top of page

Information Text

Last Updated: 28.12.2025
 

This disclosure text has been prepared by …. Kozmetik Ticaret Limited Şirketi (“…. KOZMETİK / COMPANY”) as the “data controller” in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law”), published in the Official Gazette No. 29677 dated April 7, 2016, and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
 

The personal data collected and processed by …. Kozmetik are under the protection of …. Kozmetik. In accordance with the Law and relevant legislation, …. Kozmetik uses technological and infrastructural resources and takes the necessary technical and administrative measures to ensure that personal data are securely stored and processed lawfully.
 

Personal data are processed by …. Kozmetik in compliance with the Law and relevant legislation. Real persons whose personal data are processed under the Law can obtain information through this text regarding the personal data processed by …. Kozmetik as the data controller, the purposes of processing, the recipient groups to which the data are transferred, the methods of collection, the legal basis, and their rights. The scope, processing, and transfer of personal data described in this text may vary depending on the products, services, and applications you use, as well as any explicit consent or requests you provide.
 

1. LIGHTING COVERAGE

 

  1.       DEFINITIONS AND ABBREVIATIONS

 

  •          Company: ……… Kozmetik Ticaret Limited Şirketi

  •          Personal Data: Any information relating to an identified or identifiable natural person.

  •          Data Subject (Relevant Person): The natural person whose personal data is being processed.

  •          Processing of Personal Data: Any operation performed on personal data, whether fully or partially by automated means or as part of any data recording system by non-automated methods, including obtaining, recording, storing, retaining, modifying, reorganizing, disclosing, transferring, acquiring, making accessible, classifying, or preventing the use of such data.

  •          Data Processor: A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller.

  •          Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.

  •          Explicit Consent: A consent given freely, explicitly, and unequivocally on a specific matter, based on being informed, and limited only to that specific processing.

2.      WHAT ARE YOUR PERSONAL DATA?

 

  •          Identity: first name, last name, date of birth, Turkish ID number (T.C. Kimlik No)

  •          Contact: address, mobile phone number, email address

  •          Customer Transactions: call center records, order information, request information, invoice details

  •          Transaction Security: IP address information, website login and logout data, username and password information

  •          Marketing: shopping history, survey responses, cookie records, information obtained through campaign activities

  •          Usage Data: date of membership form completion, offers received or not received, membership start date, frequency/times of website logins, last login date

  •           Requests/Complaints: personal data related to receiving and evaluating any requests or complaints submitted to the Company

 

3.      PURPOSES, COLLECTION METHODS, AND LEGAL BASIS OF PERSONAL DATA PROCESSING

 

Legal Grounds

Purpose of Processing and Processed Data

Necessary for the establishment and performance of a contract: Processing personal data of the parties to the contract as required for its execution.

  •          Identity and contact data for updating customer contact information

  •          Identity, contact, and customer transaction data for sales records and invoicing

  •          Identity, contact, and customer transaction data for the establishment and/or performance of the sales contract

  •          Usage data and transaction security data for the provision of products and services

Explicitly stipulated by law and necessary for the data controller to fulfill its legal obligations.

  •          Identity, contact, and customer transaction data are processed for issuing invoices for goods and services purchased in accordance with the Tax Procedure Law.

  •          Identity, contact, and customer transaction data are processed to respond to requests from official authorities.

  •          Identity, contact, and customer transaction data are processed to provide information to authorized institutions as required by law.

  •          Transaction security data are processed to ensure compliance with the data retention obligations stipulated by law.

  •          Identity, contact, customer transaction, and request/complaint data are processed to respond to data subject applications and perform necessary actions in accordance with the law.

Processing of data for the legitimate interests of the data controller, without harming the fundamental rights and freedoms of the data subject, is necessary for

  •          Identity, contact, customer transaction, and request/complaint data are processed to enable individuals to benefit from the products and services offered by …Kozmetik, including sales and marketing activities.

  •          Identity, contact, customer transaction, and request/complaint data are processed to ensure the healthy management of customer relations.

  •          Identity, contact, customer transaction, and request/complaint data are processed to carry out the commercial activities conducted by …Kozmetik and the associated business processes.

  •          Identity, contact, and customer transaction data are processed to ensure the legal, technical, and commercial security of individuals who have a business relationship with …Kozmetik.

  •          Identity, contact, customer transaction, transaction security, and request/complaint data are processed for the monitoring and management of legal matters.

  •          Transaction security data for information security.

  •          Identity, contact, customer transaction, and request/complaint data are processed to conduct auditing and ethical activities within the information security process.

  •          Identity, contact, customer transaction, and request/complaint data are processed to plan and implement customer satisfaction and corporate communication activities.

  •          Identity and contact data are processed for sweepstakes, campaigns, promotions, contests, and advertising activities, as well as whenever processing is necessary to establish, exercise, or protect a legal right.

  •          Identity, contact, customer transaction, and request/complaint data are processed to receive, evaluate, and finalize requests and complaints.

  •          Identity, contact, customer transaction, transaction security, and request/complaint data are processed to be retained for the general statute of limitations period in order to serve as evidence in potential future disputes.

  •          Contact data are processed to communicate with customers for the purpose of providing information about products and services, subject to the existence of explicit consent.

  •          Identity, contact, customer transaction, and request/complaint data are processed for the marketing processes of …Kozmetik’s products and services, including profiling and analysis activities, and for customizing and recommending the products and services offered by …Kozmetik according to the preferences, usage habits, and needs of the individuals.

  •          Identity and contact data are processed to send advertising, promotional, and similar commercial electronic communications through the communication channel you have chosen with …Kozmetik

4. TRANSFER OF PERSONAL DATA

 

…Kozmetik may transfer the collected personal data to the following recipient groups in accordance with the purposes described in this disclosure text and within the scope of the Law and relevant legislation

 

  •          …Kozmetik Ticaret Limited Şirketi may transfer personal data to its business partners and authorized persons acting on behalf and account of …Kozmetik.

  •          …Kozmetik may transfer personal data to regulatory and supervisory authorities, courts, enforcement offices, and other institutions and organizations authorized to request personal data, as well as to the individuals authorized by these institutions.

  •          …Kozmetik may transfer personal data, within the scope of legal obligations and statutory limitations, to independent audit firms, tax advisors, other external professional consultants, lawyers, and insurance companies.

  •          …Kozmetik may transfer personal data to domestic suppliers and business partners with whom …Kozmetik works or will work, as well as to sellers featured on the platform, for the procurement or delivery of products and services to be purchased or used.

 

5.      YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA

 

As data subjects, if you submit your requests regarding your rights through the communication channels specified in this disclosure text, the Company will process and respond to your request free of charge within thirty (30) days, depending on the nature of the request. However, if a fee has been prescribed by the Personal Data Protection Board, the specified fee will be collected by the Company.

Within this scope, data subjects have the following rights under Article 11 of the Law:

 

  • To find out whether your personal data is being processed,

  • You have the right to request information regarding the processing of your personal data.

  • Kişisel verilerinizin işlenme amacını ve bunların amacına uygun kullanılıp kullanılmadığını öğrenme, 

  • The right to know the third parties to whom your personal data is transferred, whether domestically or abroad,

  • The right to request the correction of your personal data if it has been processed incompletely or inaccurately,

  • The right to request the deletion or destruction of your personal data in accordance with the conditions set forth in Article 7 of the Personal Data Protection Law,

  • The right to request that third parties to whom your personal data has been transferred be informed about the correction, deletion, or destruction of your personal data,

  • You have the right to object to the processing of your personal data through automated systems,

  • The right to request compensation for any damages you incur due to the unlawful processing of your personal data.

6.     IDENTITY/CONTACT INFORMATION OF THE DATA CONTROLLER

 

  •          Trade Registry Number: 

  •          Tax Office: 

  •          Tax Number: 

  •          Address: 

  •         Telephone: 0

  •          Email Address: info@pyxcosmetics.com

 

You can submit your questions and requests regarding your personal data through one of the following methods:

 

  • By sending an email to info@....cosmetics.com from the email address you provided when registering as a Member and that is registered in our system, prepared in accordance with the Communiqué on the Procedures and Principles for Applications to Data Controllers,

  • By submitting a written application, prepared in accordance with the Communiqué on the Procedures and Principles for Applications to Data Controllers, via a notary to the following address: …………….

 

 

 

7.      FINAL PROVISIONS

 

This disclosure text is effective from the date of its publication. …Kozmetik may make changes at any time if necessary. Any changes will become effective upon publication on the www……cosmetics.com website. To stay informed about updates, we recommend that you periodically check our website.

bottom of page