1. Purpose

This Privacy Agreement has been prepared to ensure the protection of personal data and privacy, and to determine the principles for processing such data of individuals who benefit from the products and services provided by BİOZON MEDİKAL VE OZON SİS. SAN. TİC. LTD. ŞTİ. ("Company").

2. Scope

This agreement covers all personal data obtained through our Company's website, physical facilities, customer services, mobile applications, or other communication channels.

3. Information Collected

The categories of personal data processed by our Company are as follows:

• Identity and contact information
• Financial and billing information
• Electronic media usage data
• Customer service call records
• CCTV footage (at facilities)

4. Privacy Principles

• Personal data is processed only within the scope of relevant legislation and explicit consent.
• Data is stored by implementing appropriate security measures.
• Sharing with third parties is only carried out in cases of legal obligation or service provider requirements.
• Access to data is strictly limited to authorised personnel.

5. Data Transfer

Your personal data may be shared with official authorities within the framework of legal obligations. Where required by the service, data may be shared with domestic or international business partners, provided that necessary security measures are taken.

6. Data Security

Our Company implements technical and administrative measures to prevent unauthorised access, loss, disclosure, or misuse of personal data. In this context, encryption, access controls, secure communication protocols, and regular audits are conducted.

7. User Rights

Data subjects hold the following rights under Article 11 of the PDPL:

• To learn whether their personal data is being processed
• To request information if it has been processed
• To learn the purpose of the data processing
• To request the rectification of incomplete or incorrectly processed data
• To request the erasure or destruction of data
• To know the third parties to whom data is transferred domestically or abroad
• To demand compensation for damages in the event of unlawful processing

8. Application Methods

Users may submit their requests regarding their personal data in writing to the company address or via the Registered Electronic Mail (KEP) address. Applications will be responded to within 30 days at the latest.

9. Validity

This Privacy Agreement enters into force on the date of its publication and may be updated by our company. The most current version is always accessible on our Company's website.