As Green Aura Blooms Çiçekçilik ve Seracılık Anonim Şirketi (“Green” or “Company“), we process your personal data within the scope of your use of Green digital media. With this text, we aim to inform you about how we process your personal data as the data controller.

As a user of Green, you provide us with certain personal data as part of your use of the website www.greenaurablooms.com.

We have prepared this clarification text so that you can get information about how we process your personal data within the scope of your use of Green digital channels.

Please do not hesitate to contact us in case you have any questions regarding the issues mentioned below or your personal data. You can send your questions to [email protected] e-mail address.

A. What are the Purposes and Legal Reasons for Processing Your Personal Data?

Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data (“Law“) regulate the legal reasons for personal data processing. These legal grounds refer to the situations in which your personal data can be processed legally.

In the table below, we have included which of your personal data we process, for which purposes and on the basis of which legal grounds:

For which purposes is your data processed?	Which legal grounds are relied upon when processing your data?	Which personal data are processed?
Verification of the identity and contact details of the user who will make use of our Services (this verification is important so that we can contact you via the contact details you actively use),Creating your Green membership and providing access to your account,	Art. 5/2 (c) of the Law It is necessary to process personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of the contract.	-Identification (name, surname, customer ID) –Contact (e-mail, phone number and address) –Transaction Security Information (device operating system and version, device type, device ID, hardware model, IP address, user transaction logs, password information)
-Fulfillment of our legal obligations in cases where authorized institutions or organizations request our Company or where it is foreseen that we will notify these institutions (for example, sharing your information in the event that a public institution requests a request regarding a suspected illegal transaction), -Contacting you regarding the information and notifications required by our legal obligations -Fulfillment of the legal obligations we undertake due to the legislation in force.	Article 5/2 (ç) of the Law Data processing is mandatory for the data controller to fulfill its legal obligation.	-Identity (name, surname, customer ID) –Contact (e-mail, phone number and address) –Knowledge of Legal Procedures (correspondence with judicial authorities, information on litigation/execution files in case of disputes)
-Protecting and exercising our rights in the event of a possible dispute and conducting legal processes, -Detection of suspicious/unlawful/illegal transactions within the scope of access and use of Green’s digital channels; protection of the rights of our customers and our Company in this context,	Art. 5/2 (e) of the Law Data processing is mandatory for the establishment, exercise or protection of a right.	-Identification (name, surname, customer ID) –Contact (e-mail, phone number and address) –Knowledge of Legal Procedures (correspondence with judicial authorities, information on litigation/execution files in case of disputes) –Risk Management Information (information on preventing suspicious or illegal transactions)
-Contacting you within the scope of the products and services we offer, -Receiving and finalizing your complaints, requests and suggestions, -Carrying out activities to develop and improve our products, services and processes and customer experience, -Presenting our products and services to you in a way that best suits your preferences and experiences (for example, not showing products you are not interested in on the main shopping screens), -Review and supervision of our business activities.	Art. 5/2 (f) of the Law Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.	-Identification (name, surname, customer ID) –Contact (e-mail, phone number and address) –Legal Procedure Information (Information obtained in accordance with the correspondence made within the scope of the requests of judicial and administrative authorities) –Information shared regarding requests, questions and complaints in communication processes (Message, e-mail)
We process your personal data to carry out marketing communications if you provide your explicit consent. Within the scope of marketing communications, we inform you about our advertisements, campaigns, promotions and opportunities in line with your communication consent preferences. You have the right to completely reject information about our advertisements, campaigns, promotions and opportunities at any time or to customize your preferences. You can change your preferences from the “Membership Information – Communication Permissions” tab in the “My Account” section of our website.	Article 5/1 of the Law Explicit consent of the person concerned.	-Identification (name, surname, customer ID) –Contact (e-mail, phone number and address)

B. With whom and for what purposes do we share your personal data?

We share your personal data with third parties in accordance with the purposes and legal reasons specified in the heading “A. What are the Purposes and Legal Reasons for Processing Your Personal Data?” of this disclosure text. While sharing your personal data with third parties, we ensure compliance with the articles of the Law regarding the transfer of personal data.

We have provided information below about with whom and for what purposes we share your data:

Authorized Institutions and Organizationsà Fulfillment of our legal obligations in cases where authorized institutions or organizations request our Company or where it is stipulated that we notify these institutions.
Group Companies and Shareholdersà Ensuring compliance with the policies and rules of Group Companies, conducting audit and reporting processes.
Companies from which we receive products and servicesà Obtaining support from third parties within the scope of supplying goods or services, carrying out financial and accounting processes.

C. By Which Methods and Based on Legal Grounds Do We Collect Your Personal Data?

We collect your personal data through digital channels by automatic and partially automatic methods. In certain cases, we also collect your data in a physical environment by non-automatic methods, provided that it is part of the data recording system (for example, if you physically transmit information or documents to us).

We process your personal data based on the legal grounds that the processing of personal data is necessary for the establishment or performance of a contract, the fulfillment of our legal obligations, the establishment, exercise or protection of a right, the processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and the explicit consent of the data subject.

D. How Can You Exercise Your Rights Regarding Your Personal Data?

Article 11 of the Law regulates “data subject rights”. You can exercise your rights under this article by contacting our Company. Below we have included the contact information of our Company and the methods by which you can exercise your rights:

Green Aura Blooms Çiçekçilik ve Seracılık Anonim Şirketi

Address Esentepe Mah. Butcher Sk. Eser Business Center B Block No: 18 Interior Door No: 56 Şişli/İstanbul

E-mail: [email protected]

You can send us your requests regarding your rights by one of the following methods:

Using your e-mail address registered in our systems, you can send an e-mail containing your requests to the e-mail address [email protected].
By mail, you can send your request to our Company’s Esentepe Mah. Butcher Sk. Eser Business Center B Blok No: 18 Interior Door No: 56 Şişli/İstanbul address.
Additional methods to exercise your rights are also specified in the Communiqué on the Procedures and Principles of Application to the Data Controller. If you wish, you can also choose one of the methods specified in this Communiqué.

Detailed information about Green’s personal data processing processes is provided in the Personal Data Processing and Protection Policy. You can access the Policy at www.greenaurablooms.com.