PRIVACY POLICY

We care about your privacy as much as we care about our own. Find out below how we use information to improve your experience with us and how we make sure that data stays safe.

1. We collect information for the purposes of:
   1. Providing information about products and services
   2. Providing and personalising our services
   3. Administering orders and accounts relating to our customers
   4. Administering membership records
2. We will not use data from you – the User – for purposes other than the provision and personalisation of services and will not sell any information to a third party.
3. We will not disclose any personal information of Users, if explicit consent is not granted. Except in circumstances that such information is required for legal purposes.
4. We comply with the applicable Turkish regulations regarding privacy. In case there is a legal obligation, we will present data from User to third parties.
5. The information within our storage is password protected so that only the User has access to the User's personal and account information. The username and password of User are strictly personal and should be kept secret. User is responsible for the abuse of the username/password and shall immediately notify us of any loss, theft and/or abuse.
6. We take several measures to keep our and your data as secure as possible, but we can not guarantee the safety of the data. The measures we take in that context shall include (but not exclusively):
   1. Internal compliance officer
   2. Monitoring of the compliance officer
   3. Two-factor authentication for sensitive parts
   4. Time restricted access to sensitive parts
   5. Access based on the need-to-know principle
   6. For critical business parts we use the four-eyes principle
   7. Detailed logging & monitoring (internal & external)
   8. Outsourcing policy with confidentiality agreement
   9. Data Retention policy
   10. Employees are screened externally (PES)
7. We use cookies to identify visitors of this website and to keep track of browsing patterns and build up a demographic profile. Please note that visitors will always be tracked anonymously and the data is used strictly to improve the usability of the website. There is one exception, which is the Vero cookie that is only used to track Users that identify themselves by email by logging into our system. We use the following cookies:
   1. Google Analytics

      With Google Analytics we track non-personally identifiable data, including pages that are visited, for how long, what browser is used and from which pages Users exit. This will give us a better understanding about how our website is used and serves as input to improve the website and its specific pages. All of this data is anonymous.

      • Data collected: visits, page views, time on site, country, city, language, source, OS, browser.
      • Data duration: as long as the site is being tracked with Google Analytics.
      • Data owner: Botonom
      • 3rd party cookie
      Don't want your visit data reported by any website who uses Google Analytics? Learn about the opt-out browser plugin.

   2. Optimizely

      Optimizely allows us to run A/B tests on our website. This offers us a simple way to test website changes against the current design and determine which version works better for the User. In order to do so, Optimizely identifies users and track their actions, but non of the data collected identifies you as a person.

      • Data collected: visits, page views, browser, source type and last 10 events triggered on site.
      • Data duration: as long as the site is being tracked with Optimizely.
      • Data owner: Botonom
      • Both a 1st and a 3rd party cookie
      If you would like to disable being tracked for A/B tests run by Optimizely, you can opt out via this link.

   3. Crazy Egg

      Crazy Egg enables us to get an understanding of how visitors engage with the website through heat maps and scroll map reports. Crazy Egg only sets one cookie value in order to track whether a visitor is new or returning, so no personally identifiable data is collected.

      • Data collected: wether users are new or returning.
      • Data duration: as long as the site is being tracked with Crazy Egg.
      • Data owner: Botonom
      • 3rd party cookie
      Because Crazy Egg doesn't track users, they can't provide a simple opt out link. However, there are ways to disable Crazy Egg from communicating with your browser.

8. Users have the right to see what personal data is being held about them. To obtain a copy of the personal information, Users can write us at Botonom attn. Communications Department, help@botonom.com. Please note that Botonom reserves the right to charge.
9. Given that the Internet is a global environment, using it to collect and process personal data necessarily involves the transmission of data on an international basis. This means for instance that data Users pass to us may be processed outside the European Economic Area, although the data will always be held securely and in line with the requirements of Turkish data protection legislation. By communicating electronically with us, Users acknowledge and agree to our processing of personal data in this way.
10. Please note that this privacy policy is subject to change from time to time. It was last updated on Agust 31, 2016.