1 As Dinossi Technology Limited Company ("Dinossi"), we strive to protect the privacy of our members using our website in order to ensure that our users benefit from our services in a safe and complete manner. Accordingly, this Dinossi Privacy Policy ("Policy") has been prepared in order to process the personal data of our members in full compliance with the Personal Data Protection Law No. 6698 ("Law") and to inform our users in this context. baveal.com cookie policy is an integral part of this Policy.

The purpose of this Policy is to determine the terms and conditions regarding the use of personal data shared with Dinossi by the Site members/visitors/users (collectively referred to as the "Data Owner") during the operation of the www.baveal.com website and mobile application (collectively referred to as the "Site") operated by Dinossi or generated by Dinossi during the use of the Site by the Data Owner.

Which Data is Processed?

The data processed by Dinossi and considered as personal data in accordance with the Law are listed below. Unless otherwise explicitly stated, the term "personal data" shall cover the information below within the scope of the terms and conditions provided under this Policy.

Credentials

Contact Details

User Information

User Transaction Information

Process Security Information

Financial Information

Marketing Information

Request/Complaint Management Information

In accordance with Articles 3 and 7 of the Law on the Protection of Personal Data, data that are irreversibly anonymised will not be considered as personal data in accordance with the provisions of the aforementioned law and processing activities related to this data will be carried out without being bound by the provisions of this Policy.

Purposes of Processing Personal Data

Dinossi, personal data provided by the Data Owner, membership registration and account creation and keeping records related to this, enabling the Data Owner to benefit from the services provided through the Site, detecting system errors and performance monitoring and improving the operation of the Site, maintenance and support services and backup services, including the purposes of providing the products and services offered by Dinossi, including the purposes of providing maintenance and support services and backup services, the necessary work to benefit the relevant persons from the products and services offered by Dinossi by the business units and the execution of the relevant business processes and the relevant persons of these products and services, planning and execution of the activities necessary for the recommendation and promotion of Dinossi to the relevant persons by customising them according to their usage habits and needs, carrying out the necessary work by the relevant business units for the realisation of the commercial activities carried out by Dinossi and the execution of the related business processes, ensuring the legal, technical and commercial-business security of Dinossi and the persons with whom it has a business relationship, and planning and execution of Dinossi's commercial and/or business strategies.

Personal Data to be Processed in Accordance with the Explicit Consent of Data Subjects and Purposes of Processing

Within the scope of the explicit consent of the Data Owner, Dinossi may process data and share this data with the parties mentioned below in order to increase the user experience by tracking the movements of the Data Owners on the Site, creating statistics, profiling, direct marketing and remarketing, creating promotional suggestions specific to the Data Owner and forwarding them to the Data Owner and using the data obtained within this scope in all kinds of advertisements and material content.

Transfer of Personal Data:

Dinossi may transfer the personal data of the Data Owner and the new data obtained by using this personal data to third parties from which Dinossi benefits from the services of Dinossi in order to fulfil the purposes specified in this Privacy Policy, limited to the purpose of providing such services. Dinossi may share with third parties such as outsourcing service providers, hosting service providers (hosting services), law offices, research companies, call centres, including those who send SMS in order to improve the Data Owner experience (including improvement and personalisation), to ensure the security of the Data Owner, to detect fraudulent or unauthorised use, to investigate operational evaluation, to eliminate errors regarding Site services and to achieve any of the purposes set out in this Privacy Policy.

Personal data may be shared with Dinossi Teknoloji Limited Şirketi and Dinossi Teknoloji Limited Şirketi officials, shareholders, business partners, suppliers, legally authorised public institutions and organisations and legally authorised private institutions within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, and may be transferred abroad within the framework of the procedures specified in Article 9 of the Law and the decisions of the Personal Data Protection Board limited to these purposes.

Method and Legal Grounds for Collection of Personal Data

Personal data are collected through the Site and electronically. Personal data collected for the legal reasons mentioned above may be processed and transferred for the purposes specified in Articles 5 and 6 of Law No. 6698 and this Privacy Policy.

Rights of the Personal Data Owner

Data subjects pursuant to Article 11 of the Law,

To learn whether personal data about them are processed or not, and to request information if their personal data are processed,

To learn the purpose of processing personal data and whether they are used in accordance with their purpose, to know the third parties to whom personal data are transferred domestically or abroad,

To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

It has the right to object to the occurrence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems and to demand the compensation of the damage in case of damage due to unlawful processing of personal data.

Requests for the exercise of such rights may be submitted by personal data owners by the methods specified in the Policy on the Processing and Protection of Personal Data prepared by Dinossi within the scope of Law No. 6698 at www.baveal.com. Dinossi will finalise such requests within thirty days. Dinossi reserves the right to charge a fee over the fee tariff (if any) determined by the Personal Data Protection Board regarding the requests.

Cookie Policy:

As Dinossi Technology Limited Company ("Dinossi"), we are working to protect the privacy of the people who use our site in order to ensure that our users benefit from our services safely and completely.

As with many websites, Cookies are used to display personal content and advertisements to visitors of www.baveal.com ("Site") and the mobile application (collectively referred to as the "Site"), to perform analytical activities within the site and to track visitor usage habits.

This Cookie Policy is an integral part of the baveal.com Privacy Policy.

Dinossi has prepared this Cookie Policy ("Policy") to explain which Cookies are used on the Site and how users can manage their preferences in this regard.

For more detailed information on the processing of your personal data by Dinossi, we recommend that you review the Dinossi Privacy Policy.

What is a Cookie?

Cookies are small text files that are stored on your device or network server via browsers by the websites you visit. Cookies are created by servers associated with the website you visit. In this way, the server can recognise when the visitor visits the same site.

Cookies do not contain personal data about visitors such as name, gender or address.

Which Cookies Are Used?

Cookies can be categorised in terms of their owners, lifetime and intended use:

Depending on the party placing the cookie, Site cookies and third party cookies are used. While site cookies are created by Dinossi, third party cookies are managed by different companies that have business partnerships with Dinossi.

Session cookies and persistent cookies are used depending on the time they are active. While session cookies are deleted when the visitor leaves the Site, persistent cookies may remain on visitors' devices for various periods of time depending on the area of use.

According to the purposes of use, technical cookies, verification cookies, targeting/advertising cookies, personalisation cookies and analytical cookies are used on the Website.

Why Cookies are Used?

On the Website, Cookies are used for the following purposes:

To perform the basic functions necessary for the operation of the Site. For example, baveal.com members should not lose the products in their shopping basket during their shopping trips. Members who have logged in do not need to re-enter their password when visiting different pages on the Site.

Analysing the Site and improving the performance of the Site. For example, integrating the different servers on which the Site runs, determining the number of visitors to the Site and adjusting performance accordingly, or making it easier for visitors to find what they are looking for.

To increase the functionality of the Site and to provide ease of use. For example, sharing to third party social media channels through the Site, remembering the username information or search queries of the visitor who visits the Site in the next visit

Carrying out personalisation, targeting and advertising activities. For example, displaying adverts linked to visitors' interests on the pages and products they view.

How Can You Manage Your Cookie Preferences?

Dinossi attaches great importance to the ability of users to use their preferences on their personal data. However, preference management is not possible for some Cookies that are mandatory for the operation of the Site. We would also like to remind you that if some Cookies are switched off, various functions of the Site may not work.

Information on how the preferences regarding the Cookies used on the Site can be managed is as follows:

Visitors have the opportunity to personalise their preferences regarding cookies by changing the browser settings through which they view the Site. If the browser being used offers this possibility, it is possible to change the preferences regarding Cookies through the browser settings. Thus, although it may vary according to the possibilities offered by the browser, data subjects have the opportunity to prevent the use of cookies, to receive a warning before the cookie is used, or to disable or delete only some Cookies. Although the preferences in this regard vary according to the browser used, it is possible to access the general explanation at https://www.aboutcookies.org/. Preferences regarding Cookies may need to be made separately for each device that the visitor accesses the Website.

Click here to switch off Cookies managed by Google Analytics.

Click here to manage the personalised advertising experience provided by Google.

In terms of cookies used by many companies for advertising activities, preferences can be managed through Your Online Choices.

The settings menu of the mobile device can be used to manage Cookies on mobile devices.

What Rights Do You Have?

Pursuant to Article 11 of the Law No. 6698 on the Protection of Personal Data, visitors may apply to Dinossi and request information about themselves,

To learn whether personal data is being processed,

Request information if personal data has been processed,

To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

To know the third parties to whom personal data are transferred domestically or abroad,

To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

To object to the emergence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems,

In case of damage due to unlawful processing of personal data, to demand compensation for the damage

has the right

Such rights will be evaluated and finalised within 30 (thirty) days in any case when communicated by the personal data owners by the methods specified in the Policy on Processing and Protection of Personal Data prepared by Dinossi within the scope of Law No. 6698. Although it is essential not to charge any fee for the requests, Dinossi reserves the right to charge a fee over the fee tariff determined by the Personal Data Protection Board.

Changes to the Consent and Privacy Policy

With its Privacy Policy ("Policy"), Dinossi aims to provide its users with a detailed explanation about the scope and purposes of the use of Cookies and to inform its users about their Cookie preferences. In this respect, it is accepted that consent to the use of Cookies is given if the Cookie information warning on the Site is closed and the Site continues to be used. Users always reserve the opportunity to change their Cookie preferences.

Dinossi may change the provisions of the Policy at any time. The current Policy takes effect on the date it is published on the Site.