Data Privacy Notice

DISCLOSURE TEXT ON THE PROTECTION OF PERSONAL DATA

As GREENIX SÜRDÜRÜLEBİLİRLİK DANIŞMANLIK A.Ş. (“Greenix”), the data controller of the website located at www.greenix.com.tr, we have prepared this Disclosure Text pursuant to Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) to inform you about the purposes of processing your personal data during our e-commerce activities and other services offered through our website.

Personal data may also be processed through website cookies.
For detailed information on this, you can review our Cookie Policy and Cookie Disclosure Text.

1) WHICH OF YOUR PERSONAL DATA DO WE PROCESS?

During our e-commerce activities and related services on our website, we may request and process the following personal data that you provide or that are required:

· Identity Data
When you fill out the necessary forms to purchase products/services or request related actions such as orders, payments, deliveries, cancellations, or returns, we request and process identity-related data such as your name, surname, T.R. ID/Tax ID number, and any conversation/voice recordings to process your requests and to communicate with you if needed.

· Contact Data
To communicate with you, fulfill your delivery/payment-related requests, provide you with promotional campaigns (subject to your approval), and ensure your use of our services, we collect and process contact information such as phone number, email address, and postal address.

· Membership Data
To enable you to use our services and make purchases, we request and process user credentials such as username and password tied to your membership account.

· Customer Transaction Data
While shopping online, we process transaction data including price, payment date/method (including bank or card details), cancellation/refund dates and reasons, and other consumer transaction data. We also collect and retain data through satisfaction surveys, forms, complaints, requests, and marketing insights.

· Internet Traffic Data
To fulfill our obligations under Law No. 5651, we retain your IP address, navigation and click records (log files), and location data at the time of accessing the site.

2) HOW AND ON WHAT LEGAL GROUNDS DO WE COLLECT YOUR PERSONAL DATA?

We collect your personal data through forms, browser data, invoices, contracts, delivery notes, and other records based on the following legal grounds:

Explicitly stipulated in laws
Necessity for the establishment or performance of a contract
Fulfillment of our legal obligations as the data controller
Legitimate interests of the data controller, provided that it does not violate your fundamental rights and freedoms
Data made public by the data subject
Necessity for the establishment, exercise, or defense of a legal right

Processing is carried out through fully or partially automated means or non-automated means as part of a data recording system.

3) FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

We process your personal data for the following purposes:

To enable your access to products/services on our website
To handle payment cancellations and right of withdrawal processes
To conduct satisfaction surveys and improve service quality
To evaluate customer complaints and offer suitable solutions
To resolve contractual disputes quickly and effectively
To manage relationships with our business partners, suppliers, and other stakeholders
To inform you about our new products, campaigns, and promotions
To execute sales and marketing strategies
To provide after-sales customer support
To tailor our services based on your preferences and habits
To verify contractual records in case of a dispute
To carry out internal communications, logistics, and occupational safety processes
To plan and implement business strategies
To fulfill our legal obligations under relevant laws such as the Law on Regulation of Electronic Commerce, KVKK, and Law No. 5651
To make necessary disclosures to public authorities or other relevant parties upon request or when required

4) SHARING OF PERSONAL DATA WITH THIRD PARTIES IN TURKEY

Your personal data may be shared with the following, within the scope and limits of the purposes stated above:

Our business units to provide and customize services based on your preferences
For advertising and remarketing purposes
To ensure the legal, commercial, and technical security of individuals in a relationship with Greenix
To determine and fulfill our commercial strategies and manage risks
To assess and respond to customer requests and complaints
To resolve potential disputes and protect our legal rights

Personal data may be shared with our service providers (logistics, SMS/email providers, call centers, occupational safety firms, IT providers), business partners, dealers, group companies, consultants, lawyers, and other third parties, including public authorities and judicial institutions if necessary.

YOUR RIGHTS UNDER ARTICLE 11 OF THE KVKK

By proving your identity, you may exercise the following rights regarding your personal data:

Learn whether your personal data is processed
Request information if your data has been processed
Learn the purpose of data processing and whether it is used accordingly
Know to whom your data is transferred domestically or abroad
Request correction of incomplete or incorrect data and notification to third parties
Request deletion/destruction/anonymization of data under Article 7 of the KVKK
Learn the reason for the method chosen for data destruction
Request that third parties to whom your data is transferred be informed of your deletion request
Object to automated processing results if they are against your interests
Request compensation for damages caused by unlawful data processing

Your request will be responded to free of charge within 30 (thirty) days, unless it requires additional cost, in which case a fee may be charged as per the Communiqué on the Principles and Procedures of Application to the Data Controller.

You may submit your requests:

In writing to our physical address
Via registered electronic mail (KEP)
Using the email address you previously provided and that is registered in our system

Depending on your request and method of application, we may verify your identity via additional means (e.g., SMS verification, call confirmation).