Data Privacy Notice

DISCLOSURE TEXT ON THE PROTECTION OF PERSONAL DATA

As GREENIX SÜRDÜRÜLEBİLİRLİK DANIŞMANLIK A.Ş. (“Greenix”), the data controller of the website located at www.greenix.com.tr, we have prepared this Disclosure Text pursuant to Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) to inform you about the purposes of processing your personal data during our e-commerce activities and other services offered through our website.

Personal data may also be processed through website cookies.
For detailed information on this, you can review our Cookie Policy and Cookie Disclosure Text.


1) WHICH OF YOUR PERSONAL DATA DO WE PROCESS?

During our e-commerce activities and related services on our website, we may request and process the following personal data that you provide or that are required:

· Identity Data
When you fill out the necessary forms to purchase products/services or request related actions such as orders, payments, deliveries, cancellations, or returns, we request and process identity-related data such as your name, surname, T.R. ID/Tax ID number, and any conversation/voice recordings to process your requests and to communicate with you if needed.

· Contact Data
To communicate with you, fulfill your delivery/payment-related requests, provide you with promotional campaigns (subject to your approval), and ensure your use of our services, we collect and process contact information such as phone number, email address, and postal address.

· Membership Data
To enable you to use our services and make purchases, we request and process user credentials such as username and password tied to your membership account.

· Customer Transaction Data
While shopping online, we process transaction data including price, payment date/method (including bank or card details), cancellation/refund dates and reasons, and other consumer transaction data. We also collect and retain data through satisfaction surveys, forms, complaints, requests, and marketing insights.

· Internet Traffic Data
To fulfill our obligations under Law No. 5651, we retain your IP address, navigation and click records (log files), and location data at the time of accessing the site.


2) HOW AND ON WHAT LEGAL GROUNDS DO WE COLLECT YOUR PERSONAL DATA?

We collect your personal data through forms, browser data, invoices, contracts, delivery notes, and other records based on the following legal grounds:

  • Explicitly stipulated in laws

  • Necessity for the establishment or performance of a contract

  • Fulfillment of our legal obligations as the data controller

  • Legitimate interests of the data controller, provided that it does not violate your fundamental rights and freedoms

  • Data made public by the data subject

  • Necessity for the establishment, exercise, or defense of a legal right

Processing is carried out through fully or partially automated means or non-automated means as part of a data recording system.


3) FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

We process your personal data for the following purposes:

  • To enable your access to products/services on our website

  • To handle payment cancellations and right of withdrawal processes

  • To conduct satisfaction surveys and improve service quality

  • To evaluate customer complaints and offer suitable solutions

  • To resolve contractual disputes quickly and effectively

  • To manage relationships with our business partners, suppliers, and other stakeholders

  • To inform you about our new products, campaigns, and promotions

  • To execute sales and marketing strategies

  • To provide after-sales customer support

  • To tailor our services based on your preferences and habits

  • To verify contractual records in case of a dispute

  • To carry out internal communications, logistics, and occupational safety processes

  • To plan and implement business strategies

  • To fulfill our legal obligations under relevant laws such as the Law on Regulation of Electronic Commerce, KVKK, and Law No. 5651

  • To make necessary disclosures to public authorities or other relevant parties upon request or when required


4) SHARING OF PERSONAL DATA WITH THIRD PARTIES IN TURKEY

Your personal data may be shared with the following, within the scope and limits of the purposes stated above:

  • Our business units to provide and customize services based on your preferences

  • For advertising and remarketing purposes

  • To ensure the legal, commercial, and technical security of individuals in a relationship with Greenix

  • To determine and fulfill our commercial strategies and manage risks

  • To assess and respond to customer requests and complaints

  • To resolve potential disputes and protect our legal rights

Personal data may be shared with our service providers (logistics, SMS/email providers, call centers, occupational safety firms, IT providers), business partners, dealers, group companies, consultants, lawyers, and other third parties, including public authorities and judicial institutions if necessary.


YOUR RIGHTS UNDER ARTICLE 11 OF THE KVKK

By proving your identity, you may exercise the following rights regarding your personal data:

  • Learn whether your personal data is processed

  • Request information if your data has been processed

  • Learn the purpose of data processing and whether it is used accordingly

  • Know to whom your data is transferred domestically or abroad

  • Request correction of incomplete or incorrect data and notification to third parties

  • Request deletion/destruction/anonymization of data under Article 7 of the KVKK

  • Learn the reason for the method chosen for data destruction

  • Request that third parties to whom your data is transferred be informed of your deletion request

  • Object to automated processing results if they are against your interests

  • Request compensation for damages caused by unlawful data processing

Your request will be responded to free of charge within 30 (thirty) days, unless it requires additional cost, in which case a fee may be charged as per the Communiqué on the Principles and Procedures of Application to the Data Controller.


You may submit your requests:

  • In writing to our physical address

  • Via registered electronic mail (KEP)

  • Using the email address you previously provided and that is registered in our system

Depending on your request and method of application, we may verify your identity via additional means (e.g., SMS verification, call confirmation).