Legal notice

Personal Data Protection and Privacy Notice

As CEO GRUP KOZMETİK SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“Company”), we attach great importance to the protection of personal data.

This Privacy Notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform you about the processing of your personal data.

 

1. Data Controller

Pursuant to KVKK, your personal data is processed by:

Data Controller:

CEO GRUP KOZMETİK SANAYİ VE TİCARET LİMİTED ŞİRKETİ

within the scope explained below.

2. Personal Data Processed

The following personal data may be processed:

  • Identity information (name, surname)

  • Contact information (phone number, email address, address)

  • Customer transaction information (orders, invoices, delivery details)

  • Payment information (credit/debit card details are not stored by our Company)

  • IP address and website usage data

  • Marketing and campaign preferences (if consent is given)

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

  • Carrying out e-commerce activities

  • Managing order, payment, and delivery processes

  • Providing customer support services

  • Performing invoicing and accounting processes

  • Fulfilling legal obligations

  • Conducting marketing, promotion, and informational activities (with explicit consent)

  • Ensuring website and transaction security

4. Transfer of Personal Data

Your personal data may be transferred, in accordance with Articles 8 and 9 of KVKK, to:

  • Cargo and logistics companies

  • Payment infrastructure and service providers

  • Accounting and financial service providers

  • Authorized public institutions and organizations

5. Method and Legal Basis of Data Collection

Your personal data is collected:

  • Through our website via the Shopify infrastructure

  • Via order, membership, and contact forms

  • By automatic or partially automatic electronic methods

based on the legal grounds specified in Articles 5 and 6 of KVKK, including performance of a contract, legal obligation, legitimate interest, and explicit consent.

6. Your Rights Under KVKK

Pursuant to Article 11 of KVKK, you have the right to:

  • Learn whether your personal data is processed

  • Request information if your data has been processed

  • Learn the purpose of processing and whether it is used accordingly

  • Request correction of incomplete or inaccurate data

  • Request deletion or destruction of personal data

  • Request notification of third parties to whom data has been transferred

  • Object to unfavorable outcomes resulting from automated processing

  • Claim compensation if you suffer damages due to unlawful processing

7. Application Method

You may submit your requests within the scope of KVKK in writing or via registered electronic mail (KEP), email, or notary public to our Company.

This Privacy Notice may be updated when necessary.