PERSONAL DATA PROTECTION LAW

Valuable Customers,

In order to better serve you and to fulfill our obligations arising from the Consumer Protection Law No. 6502 and the Distance Contracts Regulation, we request some of your personal data from you.

As BİGETAŞ BİYOTEKNOLOJİ A.Ş. ("PLANTERO"), in order to fulfill our illumination obligation arising from Article 10 of the Personal Data Protection Law ("PDPL") No. 6698, we present the following explanations to the attention of our valuable customers and 3rd parties using our website.

1. What is the legal basis for PLANTERO's collection of personal data?

First of all, the principles of personal data protection are determined by the Turkish Republic Constitution and the Personal Data Protection Law No. 6698. The Electronic Commerce Law No. 6563 also includes provisions on the protection of personal data. The Turkish Penal Code No. 5237 foresees some criminal sanctions to be applied in some cases for the protection of personal data. On the other hand, the collection and use of data is necessary for the fulfillment of our obligations arising from the Consumer Protection Law No. 6502 and the Distance Contracts Regulation.

2. What methods does PLANTERO use to collect personal data?

The data provided by our customers who perform transactions through the website http://plantero.co, mobile applications, and our call centers are processed by PLANTERO in accordance with the customers' consent and the provisions of the legislation.

PLANTERO, within the framework of its legal obligations and to provide better service to visitors of http://plantero.co, will collect, process, share with third parties, and securely store your browsing information for the purposes and scope specified in this Privacy and Personal Data Protection Information text.

To make personalized promotions, offers, and marketing proposals to you, improve the content of the website or mobile application according to your preferences, and/or determine your preferences, http://plantero.co may track your browsing information and/or usage history on the website, analyze and interpret your visitor movements and preferences.

PLANTERO also allows you to connect to the http://plantero.co website or applications through social media platforms (e.g., Facebook, Google social sharing sites). During such a connection, it may collect your profile information and personal data, which you and your social media friends have publicly shared on social media accounts, together with your browsing/traffic information on the websites and applications.

http://plantero.co may match the information collected online and offline through different methods or at different times with the information collected from you on the site and use this information together with information obtained from other sources, such as third parties.

We would like to point out that the http://plantero.co website uses cookies. A cookie is a file consisting mostly of letters and numbers that allows the identification of the device used by being stored on the internet browser or hard drive of the device in use.

http://plantero.co uses cookies to remember your preferences and personalize your website/mobile application usage. This usage includes cookies that save your password and keep your website/mobile application session open continuously, thus saving you from the hassle of entering a password multiple times during each visit, and cookies that remember and recognize you in subsequent visits to the website/mobile application.

http://plantero.co uses cookies to determine how you use the website/mobile application, including where you connect to the website from, which content you view on the website/mobile application, and the duration of your visit.

The cookies on the http://plantero.co website are also used to provide you with more relevant content and ads according to your interests for advertising/promotion purposes. This way, when you use the website/mobile application, it offers you more relevant content, personalized campaigns, and products, and does not offer you the content or opportunities that you have previously indicated you do not want.

The http://plantero.co website cookies may also use “advertising technology” to show you advertisements that it thinks may interest you when you visit search engines, websites, mobile applications, and/or the websites where the website advertises. Advertising technology uses information about your previous visits to the website/mobile application and the websites/mobile applications where the website advertises to present you with personalized advertisements.

http://plantero.co uses session cookies and persistent cookies in its mobile application. The session ID cookie expires when you close your browser. The persistent cookie remains on your hard drive for an extended period. You can remove persistent cookies and reject both session cookies and persistent cookies by following the instructions provided in your internet browser's "help" file or by visiting https://www.allaboutcookies.org or https://www.youronlinechoices.eu. If you reject persistent cookies or session cookies, you can continue to use the website/mobile application, but you may not be able to access all functions of the website/mobile application, or your access may be limited.

3. For what purposes does PLANTERO use personal data?

PLANTERO may record, store, update, disclose to third parties, transfer, classify, and process your personal data in cases and to the extent permitted by the legislation. Any operation performed on data, such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data, wholly or partially by automatic means or by non-automatic means provided that it is part of any data recording system, is considered as "processing of personal data." Your personal data is processed for the following purposes:

- To verify the identity information of the person performing the transaction,

- To record address and other necessary information for communication,

- To communicate with you regarding the terms or current status of your distance sales contract,

- To organize all records and documents that will form the basis of processing in electronic (internet/mobile etc.) or paper form,

- To fulfill obligations undertaken in accordance with the distance sales contract,

- Additionally, with your consent, to design periodic campaign activities, special advertisements, campaigns, and other promotional activities aimed at customer profiles, to carry out customer "classification" studies based on the obtained data, to conduct survey and telesales applications, data mining, and other statistical analyses,

- To evaluate customer complaints and suggestions regarding our products and services,

- To fulfill our obligations arising from KVKK and to exercise our rights arising from the legislation.

4. How does PLANTERO protect your personal data?

All personal data you have shared is under the supervision and control of PLANTERO, which has the title of "Data Controller" within the scope of KVKK No. 6698. PLANTERO, in accordance with the relevant provisions of the legislation in force, assumes responsibility for establishing and adapting the necessary organization and taking and implementing technical measures to protect the confidentiality and integrity of the information as the "Data Controller." We inform you that we always update our data processing policies in accordance with international and national technical standards regarding data privacy, aware of our responsibility in this matter.

5. Does PLANTERO share your personal data?

The sharing of your personal data with third parties takes place within the framework of the permission you have given, and as a rule, personal data is not shared with third parties without the consent of our customer. However, due to our legal obligations and limited to these, your personal data may be shared with courts and other public institutions. Additionally, to provide the services we have committed and to perform quality control of the provided services, personal data transfer is made to third parties with whom we have agreements. During the transfer of data to third parties, necessary technical and legal measures are taken to prevent rights violations. However, PLANTERO is not responsible for violations arising from the data protection policies of the third party receiving the personal data and occurring under the responsibility of the third party.

6. Does PLANTERO share your personal data with third parties abroad?

Your personal data may be shared with partner institutions and organizations with which we cooperate to carry out our activities, with domestic/foreign individuals and institutions from whom we receive cloud storage services, with companies from whom we receive infrastructure services regarding the website and mobile application, with domestic/foreign organizations with whom we have agreements to send commercial electronic messages to you with your consent, with the Interbank Card Center, with banks we have agreements with, and with survey companies with whom we work within the scope of various marketing activities to provide you with better service and ensure customer satisfaction, as well as with other third parties and related business partners domestically/abroad.

7. What are your rights arising from the Personal Data Protection Law?

In accordance with the Personal Data Protection Law, regarding your personal data, you have the right to:

- Learn whether it has been processed,

- Request information if it has been processed,

- Learn the purpose of processing and whether it is used in accordance with its purpose,

- Know the third parties to whom it is transferred in the country or abroad,

- Request correction if it is incomplete or incorrectly processed,

- Request deletion or destruction within the framework of the conditions stipulated in Article 7 of the Personal Data Protection Law,

- Request notification of the operations carried out in accordance with subparagraphs (d) and (e) above to the third parties to whom it has been transferred,

- Object to any result that arises to your detriment by analyzing exclusively through automated systems,

- Request compensation for damages in case you incur damage due to unlawful processing in violation of the Personal Data Protection Law.

We would like to remind you that you have these rights.

8. How can I be informed about changes in personal data legislation?

In case of changes in the legislation related to personal data, we would like to inform you that we will update the information on our page in accordance with the new legislation and that you can always easily follow the updates through this page.

9. How can I ensure that the data is kept accurate and up-to-date?

In accordance with Article 4 of the Personal Data Protection Law, PLANTERO has the obligation to keep your personal data accurate and up-to-date. Within this scope, our customers need to share their accurate and up-to-date data with PLANTERO to enable PLANTERO to fulfill its obligations arising from the applicable legislation. In case of any changes to your data, we kindly ask you to update your data by contacting us through the communication channels mentioned below.

10. Do you want to ask PLANTERO any questions regarding your personal data?

As a data subject, you can communicate your requests regarding your rights within the scope of the Personal Data Protection Law to us through the "BİGETAŞ BİYOTEKNOLOJİ AŞ Application Form." Suppose you submit your requests regarding your rights to PLANTERO in accordance with the methods specified in this Privacy and Personal Data Protection Information text and the BİGETAŞ BİYOTEKNOLOJİ AŞ Application Form. In that case, PLANTERO will conclude your request free of charge within 30 (thirty) days at the latest. However, if a fee is stipulated by the Personal Data Protection Board, the fee determined in the tariff by PLANTERO may be requested.