PERSONAL DATA PROTECTION POLICY

As Dilay Çınar Hair Studio, with this policy, we are responsible for all internal parties (candidate employees, employees, employee family members, candidate interns, interns, contracted employees, visitors entering our salon and subsidiary employees) and third parties (employees of official institutions and organizations, consultants, academicians, potential suppliers, current suppliers, campaign participants and other third parties) collected, processed, stored and archived personal data, in accordance with the Personal Data Protection Law No. 6698 (“KVKK”), we undertake to protect the following eight principles;

Personal Data;

• It is collected, processed, stored and archived in accordance with the law and good faith.
• It is processed for specific, legitimate and explicit purposes.
• They are processed in connection with the purpose for which they are processed, in a limited and measured manner.
• Maximum effort is made to ensure accuracy and timeliness; accordingly, accurate data is collected and data is kept up to date.
• They are retained for the period stipulated in the relevant legislation or for the period required for the purpose for which they are processed.
• The rights and requests of data subjects are taken into account when processing. Data subject rights are defined in Article 11 of the law. as provided for in its article;
• To learn whether his/her personal data is being processed.
• Request information if their personal data has been processed.
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose.
• To request to learn the third parties to whom personal data are transferred domestically or abroad.
• To request correction of personal data in case of incomplete or incorrect processing.
• To request the deletion or destruction of personal data for which there is no lawful justification or basis for processing in accordance with KVKK or this policy.
• Request notification of the correction or deletion made upon request to third parties to whom personal data are transferred.
• To object to the occurrence of a result to the detriment of the person by analyzing the processed data exclusively through automated systems.
• In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

• The data subject is subject to Article 11 of the LPPD. rights listed in Article 11 (deletion, learning whether it is processed or not, learning the transferred 3rd parties and other rights listed in Article 11) and their requests regarding the implementation of KVKK by the following methods;

– Ortakoy Mah. Muallim Naci Cad. No:51 Ortaköy – Beşiktaş / Istanbul Application in person with Identity Confirmation,

– Application to info@dilaycinar.com registered e-mail address,

– Ortakoy Mah. Muallim Naci Cad. No:51 Ortaköy – Beşiktaş / Istanbul through a notary public,

– Application to info@dilaycinar.com (For applications made by e-mail, an identity confirmation security question may be asked for institutional identity confirmation)

• The following actions are taken after the relevant person requests are received;

– It is checked that the identity confirmation regarding the request has been made.

– The request is reviewed.

– It is checked whether the request is any of the information requests, information change requests and deletion requests classified as standard requests.

– If the request is a standard request, it is determined which group (consultant, member, volunteer, donor, employee, 3rd party, etc.) the natural person whose personal data is processed belongs to by contacting the unit determined to be relevant within the scope of the request.

The person concerned is subject to Article 11 of the LPPD. In case the data is requested to be deleted or destroyed based on the article; If all the conditions for processing personal data have disappeared, personal data is deleted, anonymized or destroyed.

• Necessary technical and administrative measures are taken for data security during processing (taking necessary physical, environmental and systemic measures).
• When sharing data, it is shared in accordance with legal exceptions or by obtaining explicit consent. Personal data of internal parties and third parties are collected, processed, stored and archived by our Company in accordance with the eight principles above.