Privacy and Payment Security

HepaOnline requests some of your personal information, such as name, age, interests, and email, in order to provide better service to its customers.

This information collected on HepaOnline servers is used solely within HepaOnline for periodic campaign studies, the creation of special promotion activities for customer profiles, and customer classification studies aimed at preventing unwanted emails. HepaOnline strictly does not share the information collected from membership forms with third parties without the knowledge or contrary instruction of the member in question, does not use it for commercial purposes for any non-operational reason, and does not sell it.

Aside from the personal information requested in email addresses and membership forms, HepaOnline analyzes and interprets visitor movements and preferences tracked during site usage. These statistical data, which do not contain personal information, may be shared with HepaOnline business partners to provide HepaOnline customers with a more special and effective shopping experience.

Customer information may only be disclosed to official authorities if such information is duly requested by official authorities and in cases where it is obliged to make a disclosure to official authorities pursuant to the provisions of the applicable mandatory legislation. Only the customer can access all the information entered into the system by the customer, and only the customer can modify this information. It is not possible for anyone else to access and change this information.

Your credit card information requested on the payment page is under no circumstances kept on the servers of HepaOnline or the companies serving it, in order to keep the security of you, our valued customers shopping from the site, at the highest level. In this way, all transactions regarding payment are ensured to take place directly between the bank and your computer via the HepaOnline interface.

Our members have the right to learn whether personal data is processed, request information if personal data has been processed, learn the purpose of processing personal data and whether they are used in accordance with their purpose, know the third parties to whom personal data is transferred domestically or abroad, request the correction of personal data in case of incomplete or incorrect processing, request the deletion or destruction of personal data within the framework of the conditions stipulated in the relevant legislation, request notification of the correction, deletion, and destruction operations made pursuant to relevant legislation to third parties to whom personal data has been transferred, object to the emergence of a result against the person by analyzing processed data exclusively through automated systems, and request compensation for damages in case of suffering damage due to unlawful processing of personal data by applying to HepaOnline.

HepaOnline may fulfill its reasoned positive or negative response pursuant to the requests above, in writing or via digital media. If the transactions subject to the request require a cost, it is possible to request a fee over the tariff determined by the Personal Data Protection Board in accordance with Article 13 of the Personal Data Protection Law No. 6698.