Personal Data Protection and Privacy Policy

As Synbiotik A.Ş. (Website: www.synbiotiktr.com), we place utmost importance on the protection of your personal data. Your personal data is processed and stored in compliance with the Law No. 6698 on the Protection of Personal Data (“KVKK”).

1. How Your Personal Data May Be Processed
Pursuant to Law No. 6698, the personal data you share with Synbiotik A.Ş. may be processed—either partially or fully, by automated or non-automated means, provided that they are part of a data recording system—by being obtained, recorded, stored, modified, reorganized, and subjected to other forms of processing. Under the KVKK, all operations performed on data are considered “processing of personal data.”

2. Purposes and Legal Grounds for Processing Personal Data
Your personal data may be processed for the following purposes:

To fulfill the requirements of the services we offer to our customers, in accordance with the contract and technical necessities, and to improve our products and services,

To provide information to prosecutors, courts, and relevant public authorities upon request and in accordance with the law in matters relating to public safety and legal disputes,

To offer a wide range of benefits to our members or to share such opportunities within the bounds of the law with individuals or institutions that may provide them,

To analyze advertising preferences.

Your personal data will be processed in accordance with the KVKK and its secondary legislation.

3. Transfer of Personal Data to Third Parties
For the purposes mentioned above, your personal data may be shared with the following parties:

Our principal shareholders, affiliates, advertisers, both local and international subsidiaries,

Partner companies using Synbiotik A.Ş.’s infrastructure,

Service providers, collaborators, program partners, domestic/international institutions and organizations, and other third parties involved in the delivery of services or acting as data processors.

Provisions regarding the use of cookies for advertising purposes are part of this “Personal Data Protection and Privacy Policy” and are also detailed in our [Cookie Policy].

4. Methods of Collecting Personal Data
Your personal data may be collected through the following methods:

Through forms on the synbiotiktr.com website and mobile applications, including name, surname, address, phone number, email, and login preferences, as well as through IP logs, cookie data, browsing details, and location information,

Through business relationships, job applications, offers, business cards, CVs, and other communication channels, whether physical, virtual, oral, written, or electronic,

From public data sources, web pages, blogs, surveys, campaigns, competitions, micro websites, social media platforms (Facebook, X [formerly Twitter], Google, Instagram, Snapchat, etc.), and user interactions such as email newsletter opens or clicks.

5. Transfer of Personal Data Abroad
Your personal data, collected through any of the above-mentioned means and processed in or outside Türkiye, may be transferred to foreign service providers (in countries deemed to have adequate protection by the Turkish Personal Data Protection Board), provided that it remains within the scope of KVKK and the purposes of processing are appropriate.

Such data may be shared with:

Business partners and service providers involved in offering and promoting products and services,

Authorized emergency services in case of emergencies,

Regulatory and supervisory bodies, courts, enforcement offices, and other official institutions authorized to request personal data,

Legal entities in a commercial relationship with Synbiotik A.Ş. that may possess your phone number, when necessary.

6. Storage and Protection of Personal Data
Synbiotik A.Ş. is obligated under Article 12 of the KVKK to prevent unlawful processing of personal data, block unauthorized access, and protect the data. We apply technical measures such as encryption, hashing, access logs, and access controls, as well as physical security measures. In case of illegal access to personal data by third parties, Synbiotik A.Ş. will immediately notify the Personal Data Protection Board in accordance with legal regulations.

7. Accuracy and Currency of Personal Data
According to Article 4 of the KVKK, Synbiotik A.Ş. is responsible for keeping your personal data accurate and up to date. Therefore, you are required to provide accurate and up-to-date data or update it through the Website or mobile application to ensure compliance with legal obligations.

8. Rights of the Data Subject under Law No. 6698
As of October 7, 2016, under Article 11 of the KVKK, you have the following rights:

To learn whether your personal data is being processed,

To request information regarding your processed data,

To learn the purpose of processing and whether it is being used in accordance with its purpose,

To know the third parties, in Türkiye or abroad, to whom your personal data has been transferred,

To request correction of your data if it is incomplete or inaccurate,

To request deletion or destruction of your data in accordance with the conditions set forth in Article 7 of the KVKK,

To request notification of the correction, deletion, or destruction to third parties to whom the data was transferred,

To object to any result arising against you solely due to analysis by automated systems,

To claim compensation for damages incurred due to unlawful processing of your personal data.

9. Contact and Application Method
Once the legal infrastructure is in place, a Data Controller Representative appointed by Synbiotik A.Ş. will be registered in the Data Controllers Registry and published on our website.

You may direct your questions, comments, or requests to [email protected].

Synbiotik A.Ş. will respond to your request—positively or negatively, with justification—within 30 days, either in writing or electronically. In principle, the processing of requests is free of charge. However, if the process requires additional costs, Synbiotik A.Ş. reserves the right to request a fee, as determined by the Personal Data Protection Board under Article 13 of the KVKK.

By sharing your personal data through our website, applications, or other channels, you acknowledge that you have read and accepted our Personal Data Policy, including the terms related to data processing methods, transfers, commercial sharing (provided it benefits the user), and usage of shared data through social media and other platforms. You hereby provide your explicit consent, defined in the KVKK as informed and freely given consent for a specific matter of importance, and agree to contact Synbiotik A.Ş. before exercising your legal rights.