Protection of Personal Data

General Information About the Personal Data Protection Law

Law No. 6698 on the Protection of Personal Data (hereinafter referred to as KVKK) was enacted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Some provisions of the KVKK came into effect on the publication date, while others became effective on October 7, 2016.

Notification as Data Controller

Under Law No. 6698 and in the capacity of Data Controller, your personal data may be recorded, stored, updated, disclosed/transferred to third parties as permitted by legislation, classified, and processed in the ways specified in this document.

How Your Personal Data May Be Processed

In accordance with Law No. 6698, the personal data you share with us may be processed in various ways. This includes:

  • Collecting, recording, storing, modifying, reorganizing, and processing your data either fully or partially through automated or non-automated means as part of any data recording system.

All actions performed on your data are considered as “processing of personal data” under KVKK.

Purposes and Legal Reasons for Processing Your Personal Data

The personal data you share may be processed for the following purposes:

  • To fulfill the requirements of the services we provide to our customers, in line with the needs of the contract and technology, and to develop our products and services.
  • To collect necessary identity, address, and other information in accordance with the Law on Regulation of Electronic Commerce No. 6563, the Consumer Protection Law No. 6502, and related regulations, including the Regulation on Electronic Service Providers and Intermediaries published in the Official Gazette dated August 26, 2015, and the Regulation on Distance Contracts published in the Official Gazette dated November 27, 2014.
  • To organize all records and documents that will serve as the basis for payment systems in the fields of banking and electronic payment, and to comply with the legal obligations for information storage, reporting, and notification as stipulated by other authorities.
  • To provide information to prosecutors, courts, and relevant public officials as required by law and upon request concerning matters related to public safety and legal disputes.

Your personal data will be processed in accordance with the KVKK and related secondary regulations.

Information About Third Parties to Whom Your Personal Data May Be Transferred

For the purposes mentioned above, your personal data shared with our company may be transferred to:

  • Ticimax Bilişim Teknolojileri A.Ş., which provides our e-commerce infrastructure, as well as suppliers, cargo companies, and other parties related to the services provided. This may include domestic and international organizations and other third parties we collaborate with in the capacity of Data Processor.

Methods of Collecting Your Personal Data

Your personal data may be collected through:

  • Forms on our company’s website and mobile applications, including information such as name, surname, Turkish ID number, address, phone number, and email address, as well as data related to preferences, IP logs of actions performed, cookies collected by the browser, and location data.
  • Oral, written, or electronic communication through our sales and marketing department employees, branches, suppliers, and other sales channels, including paper forms, business cards, and digital marketing or call center channels.
  • Individuals sharing personal data through business cards, resumes (CVs), or proposals for purposes such as establishing a commercial relationship or applying for a job, both face-to-face and remotely.
  • Data obtained indirectly through various channels such as websites, blogs, contests, surveys, games, campaigns, and similar purposes, as well as data from publicly accessible databases and social media profiles.

Personal Data Obtained Before the KVKK Came into Effect

Personal data that was lawfully obtained prior to the effective date of the KVKK (April 7, 2016), such as through membership, electronic communication permissions, product/service purchases, will also be processed and stored in accordance with the conditions set forth in this document.

Transfer of Your Personal Data Abroad

Your personal data collected through the methods mentioned above may be transferred abroad to service providers in countries that have been accredited by the Personal Data Protection Board and provide adequate protection regarding personal data, provided that it remains under the scope of the KVKK and is consistent with contractual purposes.

Storage and Protection of Personal Data

Your personal data will be stored confidentially in our databases and systems in accordance with Article 12 of the KVKK and will not be shared with third parties under any circumstances, except for legal obligations and regulations mentioned in this document. Our company is responsible for taking necessary software and physical security measures to prevent unlawful processing and unauthorized access, in accordance with Article 12 of the KVKK. If it is learned that personal data has been unlawfully obtained by others, the situation will be immediately reported to the Personal Data Protection Board in accordance with legal regulations.

Keeping Personal Data Up to Date and Accurate

In accordance with Article 4 of the KVKK, our company has the obligation to keep your personal data accurate and up to date. To fulfill the obligations arising from the applicable legislation, customers are required to share accurate and up-to-date data or update it through the website/mobile application.

Rights of the Data Subject Under Law No. 6698

Article 11 of Law No. 6698 came into effect on October 7, 2016, and according to this article, the rights of the Data Subject after this date are as follows:

  1. To learn whether personal data is being processed.
  2. To request information regarding personal data if it has been processed.
  3. To know the purpose of processing personal data and whether they are used in accordance with that purpose.
  4. To know the third parties to whom personal data has been transferred, both domestically and abroad.
  5. To request correction of personal data if it is incomplete or incorrectly processed.
  6. To request the deletion or destruction of personal data under the conditions set out in Article 7 of the KVKK.
  7. To request that the processes of correction, deletion, or destruction of personal data be communicated to third parties to whom the personal data has been transferred.
  8. To object to the occurrence of a result against the person due to the analysis of processed data solely through automated systems.
  9. To request compensation for damages arising from the unlawful processing of personal data.

Data Controller: Oxelera Natural Skincare
Tax Number: 7850393411
Data Controllers Registry Date: 29.03.2021
Contact Person: Burak Emre Süleymanoğlu
Email Address: info@oxeleranatural.com