Our Story | Otacı

For the past 64 years, we have been inspired by nature, and shaped and developed by the power of science.

Today we are still working to present you with the most natural products in the light of modern technologies.

KURTSAN GROUP COMPANIES’ POLICY FOR PROTECTION AND PROCESSING OF PERSONAL DATA

This KVK Policy contains explanations on the following topics:

PURPOSE AND SCOPE

DEFINITIONS

PROCESSING OF PERSONAL DATA

3.1. Categories of Personal Data and Purposes of Processing

3.2. Personal Data Collection Method

3.3. Informing Relevant Person

3.4. General Principles Regarding the Processing of Personal Data

3.5. Conditions for Processing Personal Data

3.6. Processing of Sensitive Personal Data

3.7. Transfer of Personal Data

3.8. Processing of Data by the Group Companies

3.9. Storage and Destruction of Personal Data

PROTECTION OF PERSONAL DATA

THE RIGHTS OF RELEVANT PERSONS REGARDING PERSONAL DATA AND THE USE OF RIGHTS

5.1. Rights of the Relevant Persons

5.2. Use of Rights by the Relevant Persons

5.3. Evaluation and Response of Relevant Person’s Requests

THE RELATIONSHIP OF THE KVK POLICY WITH OTHER POLICIES

ENFORCEMENT OF KVK POLICY AND AMENDMENTS TO THE POLICY

PURPOSE AND SCOPE

The protection and privacy of personal data has been adopted as a corporate culture for KURTSAN GROUP COMPANIES (These include Kurtsan İlaçları Anonim Şirketi, Kurtsan Medikal Sanayi ve Ticaret Anonim Şirketi and Otacı Bitkisel Ürünler Sanayi ve Ticaret Anonim Şirketi. They shall be briefly referred to as “KURTSAN” or “Company” within the scope of the policy). Within the scope of its activities, the Company exerts utmost care and effort to process and protect the personal data of real persons in accordance with the applicable legal norms and universal legal principles. The Company is the data controller of the personal data you provide to us, including in relation to this website, and processes and protects personal data under this Policy.

This KVK Policy is related to the personal data of persons other than our employees, which our company, as the Data Controller, processes fully or partially automatically or non-automatically, provided that it is a part of any data recording system. The KVK Policy indicates how the principles and procedures set forth by the relevant legislation are implemented in the Company’s KVK processes.

Those imlemented in the protection and legal processing of personal data shall the relevant legislation, secondary regulations and universal legal principles in force in this field. In case of conflict between our KVK Policy and the relevant regulations in force, the applicable regulations shall be valid.

We may change this Policy from time to time, so please check them when you use our services to make sure that you are aware of our updated Policy.

DEFINITIONS

ABBREVIATION DEFINITION

‘’Explicit Consent’’ It is the consent that is related to a specific subject, based on information and given with free will.

“Obligation to Inform” During the acquisition of personal data, it is an obligation of the Company, in which the Data Controller or the persons authorized by the Data Controller are required to provide information within the scope of Article 10 of the KVK Law and the Communiqué on Principles and Procedures to be Followed In Fulfillment of the Obligation to Inform.

“Relevant Person”, “Data Subject” These are natural persons whose personal data are processed by the Company or authorized persons/institutions on behalf of the Company.

“Destruction” Erasure, destruction or anonymization of personal data.

“Personal Data” It is all kinds of information related to an identified or identifiable natural person.

“Anonymization of the Persona Data” Anonymization is the process of rendering personal data impossible to link with an identified or identifiable natural person, even though matching them with other data.

“Processing of Personal Data” Any operation performed on data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying and preventing the use of personal data by fully or partially automatic or non-automatic means provided that it is a part of any data recording system.

“Erasure of Personal Data” It is the process of making personal data inaccessible and unusable for the relevant users in any way.

“Destruction of Personal Data” It is the process of making personal data inaccessible, unrecoverable and unusable by anyone in any way.

“Board” Personal Data Protection Board

“Authority” Personal Data Protection Authority

“Law”, “KVK Law” Law No. 6698 on the Protection of Personal Data

“KVK Policy” It is the Personal Data Protection and Processing Policy adopted by the Company.

“Sensitive Personal Data” These are the data related to the race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, costume and clothing, membership to associations, foundations or unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.

“Profiling” Use of automated tools to process personal data to decipher certain things about people, such as analyzing or predicting their performance, reliability, economic situation, personal preferences, interests, behavior, location or movements in their operations.

“Company” KURTSAN GROUP COMPANIES

“Kurtsan Group Companies” These include Kurtsan İlaçları Anonim Şirketi, Kurtsan Medikal Sanayi ve Ticaret Anonim Şirketi and Otacı Bitkisel Ürünler Sanayi ve Ticaret Anonim Şirketi.

“VERBİS”, “Registry” It is the Data Controllers Registry Information System operated by the Personal Data Protection Authority.

“Data Processor” It is a natural or legal person who processes personal data on behalf of the data controller based on the given authority.

“Data Controller” It is the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

PROCESSING OF PERSONAL DATA

3.1. Categories of Personal Data and Purposes of Processing

The Company shall process personal data in accordance with the general principles set forth in the Law, in particular the principles set forth in Article 4 of the Law on the processing of personal data in line with the personal data processing purposes (ANNEX-1) specified in the Data Controllers Information System (VERBIS) and based on and limited to at least one of the personal data processing conditions specified in Articles 5 and 6 of the Law. The company shall inform the relevant persons about the categories and purposes of data processing in the clarification texts in accordance with Article 10 of the Law and secondary legislation.

3.2. Personal Data Collection Method

The Company shall collect personal data electronically or in writing, in physical and electronic environment, in accordance with the personal data processing conditions specified in the KVK Law and this KVK Policy.

The company shall adopt the principle of acting in accordance with the law while obtaining personal data. Due to company activities, data shall be collected from third parties through data protection/transfer agreements and only as much as the activity requires, and at this point, measures shall be taken to ensure data security.

3.3. Informing Relevant Person

In accordance with Article 10 of the KVK Law and the provisions of the Communiqué on Principles and Procedures to be Followed In Fulfillment of the Obligation to Inform, the Company shall inform the relevant persons about the data controller of the personal data, the methods of collection, the legal reason for the processing, the purposes for processing, the purposes for which and to whom the personal data is transferred, and the rights of the relevant persons within the scope of the processing of their personal data.

3.4. General Principles Regarding the Processing of Personal Data

The Company shall comply with the “General Principles”, which are mandatory to be complied with while performing the personal data processing activities as stipulated in Article 4 of the KVK Law.

3.4.1. Processing in Compliance with Law and Good Faith

The company shall manage personal data processing activities in accordance with legal norms and universal legal principles and good faith, inform the relevant persons as necessary to ensure the transparency of the processes, and take into account the interests and reasonable expectations of the relevant persons in these processes. In this context, the data processing activity shall prevent the emergence of results that the relevant person does not expect and is not required to expect.

3.4.2. Ensuring Personal Data Is Accurate and Up-to-Date When Necessary

Personal data, as a rule, shall be processed upon the declaration of the relevant persons and as declared. The company shall not be obligated to investigate the accuracy of the data declared by the relevant persons and shall not make such a request in accordance with the law and working principles. The data shall be deemed accurate as declared. The Company shall take reasonable care and be attentive to keep personal data within its legal entity accurate, up-to-date and free of false information. It shall ensure the establishment of the necessary administrative and technical mechanism for updating the personal data in the relevant database, in case the changes in the processed personal data are communicated to the Company by the relevant person.

3.4.3. Processing for Specific, Clear and Legitimate Purposes

The Company shall sets forth its legitimate and lawful data processing purposes in a specific and clear manner before starting personal data processing activities, and process personal data as much as necessary and in connection with the Company’s products and services.

3.4.4. Being Relevant, Limited and Proportionate to the Purposes of Processing

Personal data shall be processed in a limited and proportionate manner in connection with the purposes determined by the Company and informed to the relevant person. The company shall pay attention to the fact that the processing is proportionate to achieve its purpose, taking into account the establishment of a reasonable balance between data processing and the intended purpose.

3.4.5. Storage for the Period Required for the Purpose of Processing or Stipulated in the Relevant Legislation

The Company shall retain personal data for the period required by the legislation or the purpose of processing. On the other hand, it shall erase, destruct or anonymise personal data when the period stipulated by the legislation expires or when all the purposes of processing are eliminated. As the Data Controller, the Company has determined the storage periods, destruction periods and technical and administrative measures to be implemented in the preservation in the Personal Data Storage and Destruction Policy, and declared these periods in VERBIS separately for each personal data category. The Company is aware that it is obligated to ensure that personal data are kept in accordance with these principles.

These principles shall be applied regardless of whether the Company processes personal data based on explicit consent or in accordance with other data processing conditions. At this point, the Company shall process personal data in accordance with the data processing conditions and general principles, and perform its obligation to inform the relevant persons.

3.5. Conditions for Processing Personal Data

The company shall process the personal data with the explicit consent of the relevant person or in accordance with these terms or conditions in case of existence of one or more of the other data processing conditions. In case the processed personal data is sensitive personal data, the conditions specified in the “Processing of Sensitive Personal Data” heading of this Policy shall be applied.

3.5.1. Presence of the Relevant Person’s Explicit Consent

In case the data subject has an explicit consent on a particular subject, which is based on information and given with free will, this data processing condition shall be applicable. The explicit consent obtained from the relevant person shall be preserved in a demonstrable manner by the Company for the required period of time within the scope of the KVK legislation. In the presence of the following personal data processing conditions, personal data may be processed without the need for the explicit consent of the relevant person.

3.5.2. Explicit Stipulation in the Law

If there is an express provision in the relevant law regarding the processing of that personal data, this data processing condition shall be applicable.

3.5.3. Failure to Obtain the Explicit Consent of the Relevant Person Due to Actual Impossibility

In the event that the processing of personal data is necessary for the protection of the life or physical integrity of the person or another person, who is unable to express his or her consent due to actual impossibility or whose consent has not been given legal validity, the data of the data subject shall be processed based on this data processing condition.

3.5.4. Its Direct Relation to the Conclusion or Performance of a Contract

Provided that it is directly related to the conclusion or performance of a contract to which the relevant person is a party, if the processing of personal data is necessary, the processing shall take place on the basis of this data processing condition.

3.5.5. Mandatory Processing by the Data Controller to Fulfill the Legal Obligation

If the processing of personal data is mandatory for the company to fulfill its legal obligations, the processing shall be based on this data processing condition.

3.5.6. If the Personal Data is publicized by the Relevant Person

Personal data publicized by the relevant person shall only processed for the purpose of making it public.

3.5.7. Mandatory Data Processing for the Establishment, Use or Protection of a Right

If data processing is mandatory for the establishment, use or protection of a right, the personal data of the relevant person shall be processed based on this data processing condition.

3.5.8. Mandatory Data Processing for the Legitimate Interests of the Data Controller

Provided that it does not harm the fundamental rights and freedoms of the relevant person, if data processing is mandatory for the legitimate interests of the Company, the processing shall be based on this data processing condition.

3.6. Processing of Sensitive Personal Data

The Company shall process sensitive personal data in accordance with the Policy on the Processing of Sensitive Personal Data and in the presence of one of the following data processing conditions, by complying with the additional measures announced by the Personal Data Protection Board and taking all necessary administrative and technical measures:

3.6.1. Presence of explicit consent of the relevant person.

3.6.2. In cases where the processing of sensitive personal data other than health and sexual life is stipulated by law.

3.6.3. Processing of data on health and sexual life by persons under confidentiality obligation for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing.

3.7. Transfer of Personal Data

3.7.1. Domestic Data Transfer

The Company shall transfer personal data, including sensitive personal data, as stipulated by the regulations in Article 8 of the KVK Law, to third parties (third party real and legal persons, authorized public institutions and organizations), based on appropriate personal data processing purposes and taking the necessary administrative and technical measures. The Company’s Transfer Recipient Groups are specified in VERBIS.

The Company shall act in accordance with the law in its data transfer activities. It shall only transfer data to third parties to which personal data is transferred to the extent required by the service. Transfer Recipients, who are data processors, shall instruct their groups accordingly regarding data security through data transfer contracts.

3.7 2. Transfer of Data Abroad

The Company shall be able to transfer personal data abroad only in the manner stipulated by the regulations in Article 9 of the KVK Law and by taking the necessary administrative and technical measures. This transfer shall be possible if one of the following conditions is met:

3.7.2.1. Foreign countries declared by the Authority to have adequate protection or

3.7.2.2. In the absence of adequate protection, without seeking the explicit consent of the relevant person, provided that the data controllers in Turkey and in the relevant foreign country undertake an adequate protection in writing and have the permission of the Board.

3.7.2.3. If one of the two conditions in question is not fulfilled, personal data can only be transferred abroad with the explicit consent of the relevant person.

If one of the aforementioned conditions exists, the Company may transfer personal data to IT, archive companies or cloud service companies in order to ensure the necessary infrastructure and services for corporate electronic communication channels and data security, and to platforms and applications of foreign origin for the purpose of service provision through instant messaging or online communication channels, which are widely and unavoidably used today. In addition, the Company may transfer personal data to our foreign suppliers in order to supply goods and services from foreign suppliers and to carry out its commercial activities.

3.8. Processing of Data by the Group Companies

In order to provide the services offered to you, to fulfill our mandatory or legal obligations, to carry out the Company’s activities in accordance with the Group’s goals and strategies and principles, and to protect its rights, interests and reputation, and only if necessary for the stated purposes, your personal data shall be transferred and/or made available to Group Companies by Kurtsan. We shall always ensure data protection and information security in data transfer to Group companies in accordance with the applicable data protection legislation.

3.9. Storage and Destruction of Personal Data

As the Data Controller, the Company has determined the storage periods, destruction periods and technical and administrative measures to be implemented in the preservation in the Personal Data Storage and Destruction Policy, and declared these periods in VERBIS separately for each personal data category. The Company is aware that it is obligated to ensure that personal data are kept in accordance with these principles.

In accordance with the KVK Law, personal data are kept for the period required by the relevant legislation or for the purpose for which they are processed. These are determined periods and after this period, the relevant personal data are erased, destructed or anonymised so that they can be used for analytical purposes at the end of the destruction periods stipulated in the relevant Policy in accordance with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data. You can request more information via the contact details provided in this KVK Policy.

PROTECTION OF PERSONAL DATA

The Company shall take technical and administrative measures according to technological possibilities and implementation costs in order to ensure that personal data is processed in accordance with the law. The technical and administrative measures taken for the protection of personal data shall be implemented with care and additional measures in terms of sensitive personal data, and the necessary audits shall be periodically performed at the highest level within the Company, and these security measures shall be stated in VERBIS.

The Company shall take all appropriate security measures to ensure that personal data is processed only for the purposes specified in VERBIS (ANNEX-1) and to reduce risks such as malicious use, unauthorized access, transfer, destruction or alteration of personal data. These security measures shall also include other measures taken in matters such as transferring personal data to countries that do not provide adequate data protection.

Personal data are confidential and the Company shall respect this confidentiality. Only the persons authorized within the Company shall be able to access personal data. In this framework, it shall be ensured that the software complies with the standards, that the third parties are carefully selected and that the KVK Policy is complied with within the Company.

In the event that personal data is damaged or accessed by unauthorized third parties as a result of attacks on the platforms operated by the Company or the Company’s system, despite the fact that Company has taken the necessary data security measures, The company shall take immediate action to remedy the violation in question and shall minimize the harm to the relevant person. The company shall immediately notify the relevant persons and the Board of this situation and shall take necessary measures.

THE RIGHTS OF RELEVANT PERSONS REGARDING PERSONAL DATA AND THE USE OF RIGHTS

5.1. Rights of the Relevant Persons

According to the Constitution of the Republic of Turkey, everyone has the right to demand the protection of their personal data. In this context, the rights of the relevant person regarding their personal data are listed below in Article 11 of the KVK Law:

Learning whether their personal data have been processed,

Requesting information if their personal data have been processed,

Learning the purpose of processing personal data and whether they have been used in accordance with the relevant purpose,

Learning the domestic or foreign third parties to whom their personal data are transferred,

Requesting correction in case of incomplete or incorrect processing of personal data,

Requesting the erasure or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVK Law,

Requesting notification of this erasure, destruction or correction to third parties to whom personal data have been transferred,

Objecting to any unfavorable results obtained against the data subject upon analyzing the processed data exclusively through automated systems,

Requesting the compensation of the damage in case of loss due to the processing of personal data in violation of the KVK Law.

5.2. Use of Rights by the Relevant Persons

Within the scope of the above-mentioned rights, the relevant person may submit their requests in writing to the Company’s registered electronic mail (KEP) address, using secure electronic signature, mobile signature or the electronic mail address previously notified to the Company by the relevant person and registered in the Company’s system. The relevant person can use the “Data Subject Request Form” on the Company’s website for making requests. The request shall contain:

Name, surname, and if the request is in writing, signature,

T.R. identity number for citizens of the Republic of Turkey, and nationality, passport number or, if any, identity number for foreigners,

The place of residence or workplace address for notification,

If any, the e-mail address, telephone and fax number for notification,

The subject of the request.

In addition, it is obligatory to attach information and documents regarding the subject to the request. Requests shall be taken into consideration only if they are in Turkish. In order for third parties to make a request on behalf of the relevant persons, a specific power of attorney issued by the relevant person through a notary public on behalf of the requester must be present.

5.3. Evaluation and Response of Relevant Person’s Requests

In the event that the relevant persons submit their requests regarding their rights listed above to the Company, in any case, in accordance with the request procedures stipulated in the Communiqué on the Principles and Procedures for the Request to Data Controller, as specified in this KVK Policy, the Company shall conclude this request free of charge as soon as possible, depending on its nature, and within 30 (thirty) days from the request date at the latest. However, if the procedure requires an additional cost, the Company shall be able to receive the fee specified in the tariff determined by the Board.

In written requests, the date on which the document is notified to the data controller or its representative shall be the request date. For requests made via other methods, the date on which the request reaches the data controller shall be the request date.

THE RELATIONSHIP OF THE KVK POLICY WITH OTHER POLICIES

The Company shall specify the request principles it has determined for the protection of personal data in its policies, and shall publish the said policies in public media to the extent that it is relevant. All company policies prepared on this subject shall constitute a whole and their regulations shall complement each other. In this way, the Company aims to provide transparency and accountability by informing the relevant persons about personal data processing activities.

ENFORCEMENT OF KVK POLICY AND AMENDMENTS TO THE POLICY

This KVK Policy shall be published on the Company’s website and enter into force as of the date of its publication. The Company shall always be able to make amendments in this KVK Policy. These amendments shall take effect on the day the new amended KVK Policy is published.

CONTACT US

If you have any questions about this KVK Policy or our approach to the processing and protection of your personal data, or if you want to exercise any of the rights set forth in this KVK Policy, you can get information by using any of the following ways:

KURTSAN GROUP COMPANIES

KURTSAN İLAÇLARI A.Ş.

Address: İSTOÇ OTOMARKET A-2 BLOK BURAK PLAZA KAT.7 BAĞCILAR İSTANBUL

Telephone: 0212 481 30 50

E-mail: www.kurtsanilaclari.com

KEP Address: [email protected]

KURTSAN MEDİKAL SAN.TİC.A.Ş.

Address: İSTOÇ OTOMARKET A-2 BLOK BURAK PLAZA KAT.7 BAĞCILAR İSTANBUL

Telephone: 0212 481 30 50

E-mail: www.kurtsanmedikal.com

KEP Address: [email protected]

OTACI İLAÇ KOZMETİK BESİN TİCARET A.Ş.

Address: İSTOÇ OTOMARKET A-2 BLOK BURAK PLAZA KAT.7 BAĞCILAR İSTANBUL

Telephone: 0212 481 30 50

E-mail: www.otaci.com

KEP Address: [email protected]

ANNEX-1

Data Category Data Processing Purposes

Identity

Execution of Emergency Management Processes
Execution of Information Security Processes
Execution of Audit / Ethics Activities
Carrying out Training Activities
Execution of Access Authorizations
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Execution of Company / Product / Services Loyalty Processes
Follow-up and Execution of Legal Affairs
Carrying out Internal Audit / Investigation / Intelligence Activities
Execution of Communication Activities
Execution / Supervision of Business Activities
Execution of Occupational Health / Safety Activities
Execution of Business Continuity Activities
Execution of Logistics Activities
Execution of Goods / Services Procurement Processes
Execution of Goods / Services After Sales Support Services
Execution of Goods / Services Sales Processes
Execution of Goods / Services Production and Operation Processes
Execution of Customer Relationship Management Processes
Execution of Activities for Customer Satisfaction
Organization and Event Management
Execution of Advertising / Campaign / Promotion Processes
Execution of Risk Management Processes
Execution of Storage and Archive Activities
Execution of Contract Processes
Execution of Strategic Planning Activities
Follow-up of Requests / Complaints
Ensuring the Security of Movable Property and Resources
Execution of Supply Chain Management Processes
Execution of Marketing Processes of Products / Services
Ensuring the Security of Data Controller Operations
Execution of Investment Processes
Providing Information to Authorized Persons, Institutions and Organizations
Execution of Management Activities

Communication

Execution of Emergency Management Processes
Execution of Information Security Processes
Execution of Audit / Ethics Activities
Carrying out Training Activities
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Execution of Company / Product / Services Loyalty Processes
Follow-up and Execution of Legal Affairs
Carrying out Internal Audit / Investigation / Intelligence Activities
Execution of Communication Activities
Execution / Supervision of Business Activities
Execution of Occupational Health / Safety Activities
Execution of Business Continuity Activities
Execution of Logistics Activities
Execution of Goods / Services Procurement Processes
Execution of Goods / Services After Sales Support Services
Execution of Goods / Services Sales Processes
Execution of Goods / Services Production and Operation Processes
Execution of Customer Relationship Management Processes
Execution of Activities for Customer Satisfaction
Organization and Event Management
Execution of Advertising / Campaign / Promotion Processes
Execution of Risk Management Processes
Execution of Storage and Archive Activities
Execution of Contract Processes
Execution of Strategic Planning Activities
Follow-up of Requests / Complaints
Ensuring the Security of Movable Property and Resources
Execution of Supply Chain Management Processes
Execution of Marketing Processes of Products / Services
Ensuring the Security of Data Controller Operations
Execution of Investment Processes
Providing Information to Authorized Persons, Institutions and Organizations
Execution of Management Activities

Legal Affairs

Execution of Audit / Ethics Activities
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Follow-up and Execution of Legal Affairs
Execution of Storage and Archive Activities
Providing Information to Authorized Persons, Institutions and Organizations

Customer Affairs

Execution of Audit / Ethics Activities
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Execution of Communication Activities
Execution / Supervision of Business Activities
Execution of Business Continuity Activities
Execution of Logistics Activities
Execution of Goods / Services Procurement Processes
Execution of Goods / Services After Sales Support Services
Execution of Goods / Services Sales Processes
Execution of Storage and Archive Activities
Execution of Contract Processes
Execution of Supply Chain Management Processes
Providing Information to Authorized Persons, Institutions and Organizations

Physical Space Security

Execution of Information Security Processes
Execution of Audit / Ethics Activities
Execution of Activities in Compliance with the Legislation
Execution / Supervision of Business Activities
Execution of Business Continuity Activities
Execution of Goods / Services Production and Operation Processes
Execution of Risk Management Processes
Execution of Storage and Archive Activities
Ensuring the Security of Movable Property and Resources
Ensuring the Security of Data Controller Operations
Execution of Management Activities

Risk Management

Execution of Emergency Management Processes
Execution of Audit / Ethics Activities
Execution of Activities in Compliance with the Legislation
Carrying out Internal Audit / Investigation / Intelligence Activities
Execution / Supervision of Business Activities
Execution of Risk Management Processes
Execution of Storage and Archive Activities
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations
Execution of Management Activities

Finance

Execution of Audit / Ethics Activities
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Execution of Communication Activities
Execution / Supervision of Business Activities
Execution of Business Continuity Activities
Execution of Goods / Services Procurement Processes
Execution of Goods / Services Sales Processes
Execution of Storage and Archive Activities
Execution of Contract Processes
Execution of Wage Policy
Providing Information to Authorized Persons, Institutions and Organizations

Professional Experience

Execution of Audit / Ethics Activities
Carrying out Training Activities
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Execution of Company / Product / Services Loyalty Processes
Carrying out Internal Audit / Investigation / Intelligence Activities
Execution of Communication Activities
Execution / Supervision of Business Activities
Execution of Business Continuity Activities
Execution of Logistics Activities
Execution of Goods / Services Procurement Processes
Execution of Goods / Services After Sales Support Services
Execution of Goods / Services Sales Processes
Execution of Goods / Services Production and Operation Processes
Execution of Customer Relationship Management Processes
Execution of Advertising / Campaign / Promotion Processes
Execution of Risk Management Processes
Execution of Storage and Archive Activities
Execution of Contract Processes
Follow-up of Requests / Complaints
Ensuring the Security of Movable Property and Resources
Execution of Supply Chain Management Processes
Execution of Marketing Processes of Products / Services
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations

Visual and Audio Recordings

Execution of Information Security Processes
Execution of Audit / Ethics Activities
Execution of Activities in Compliance with the Legislation
Execution of Communication Activities
Execution / Supervision of Business Activities
Execution of Business Continuity Activities
Execution of Goods / Services Procurement Processes
Execution of Goods / Services Production and Operation Processes
Execution of Advertising / Campaign / Promotion Processes
Execution of Risk Management Processes
Execution of Storage and Archive Activities
Execution of Contract Processes
Ensuring the Security of Movable Property and Resources
Execution of Marketing Processes of Products / Services
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations

Date of Update: 15.03.2022

PLANTS

ACTIVES

CATEGORY

COLLECTION

NEED

HAIR TYPE

CATEGORY

COLLECTION

NEED

SKIN TYPE

Most Wanted

Popular Categories

Otacı LAB No: 1 Moisturizing and Regenerative Shampoo

Otal Soap

Rose Cure Nourishing Serum for Eyebrow & Eyelash

Rose Cure 100% Natural Rose Water Refreshing Face Spray

since 1955

Otacı means wise person who treats people with medicinal plants.