Personal Data Protection Law

Data Controller and Representative

By Law No. 6698 on the Personal Data Protection ("Law"), your personal data may be processed by Arkevital Kozmetik Sanayi ve Ticaret Limited Şirketi Beauté Attendue ("Company") as the data controller, within the scope described below.

Purposes of Processing Personal Data

Your collected personal data may be processed by our business units within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law for the following purposes:

Processing of Personal Data of Customers:

Conducting necessary activities by our business units to benefit individuals from the products and services offered by Beauté Attendue and executing related business processes,

Conducting necessary activities by relevant business units for the realization of commercial activities carried out by Beauté Attendue and the execution of related business processes,

Purchase transactions of the product, delivery, invoice issuance, and fulfillment of other legal obligations,

Tracking of contract processes and/or legal claims,

Tracking of customer requests and/or complaints,

Planning and execution of company audit activities,

Ensuring the security of company operations,

Planning, auditing, and executing information security processes,

Planning and executing commercial and/or business strategies of Beauté Attendue,

Ensuring the legal, technical, and commercial-business security of individuals involved in the business relationship with Beauté Attendue,

Planning and executing activities necessary for the customization, recommendation, and promotion of products and services offered by Beauté Attendue based on the preferences, usage habits, and needs of individuals,

Planning and executing the management of relationships with business partners and/or suppliers.

 

Processing Purposes of Personal Data with the Explicit Consent of Customers:

Customers must approve the Information Notice and Consent Declaration for the following purposes,

for the processing of personal data by Beauté Attendue

Customizing and recommending products and services to customers based on their preferences, usage habits, and needs,

Conducting direct or indirect marketing activities to customers,

Planning and executing sales and marketing processes of the products and/or services of Beauté Attendue,

Planning and executing processes to create and/or increase the loyalty to products and/or services offered to customers,

Determining target audiences from the customers, and creating campaigns and cross-selling,

Tracking customer movements to enhance user experience,

Conducting activities for personalized segmentation, targeting, analysis, and in-house reporting, planning and executing market research, and customer satisfaction activities,

Planning and executing customer relationship management processes,

Sending commercial electronic messages, announcing customer-specific campaigns via SMS, email, mobile applications, social media, and internet advertisements, conducting customer satisfaction surveys, and telesales applications.

 

Transfer of Processed Personal Data to Whom and for What Purpose

Your collected personal data may be transferred to business partners, shareholders, call centers, suppliers, investors, legally authorized public institutions, private individuals or organizations, and third parties, both domestically and internationally, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law and limited to the fulfillment of these purposes.

 

Method of Collecting Personal Data and Legal Basis

Your personal data may be collected by the Company through various methods, whether automatic or non-automatic, depending on the services, products, or commercial activities provided by the Company. These methods may include verbal, written, or electronic means such as the Company's call center, website, social media channels, mobile applications, and similar tools. The collection of personal data is based on legal reasons such as providing you with rights and benefits, maintaining and developing internal Company activities, and fulfilling legal obligations.

 

Rights of the Data Subject under Article 11 of the Law

As personal data owners, if you submit your requests regarding your rights to the Company through the methods specified in the Data Subject Application Form, the Company will promptly and no later than thirty days, free of charge, fulfill the request depending on the nature of it. However, if the process requires an additional cost, the Company will charge the fee specified in the tariff determined by the Personal Data Protection Board. In this context, personal data owners;

Learning whether personal data has been processed,

Requesting information if personal data has been processed,

Learning the purpose of the processing of personal data and whether they are used in accordance with their purpose,

Knowing the third parties to whom personal data are transferred domestically or abroad,

Requesting correction of personal data if it is incomplete or incorrectly processed and notifying third parties to whom personal data has been transferred,

Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite being processed by the Law and other relevant laws, and notifying third parties to whom personal data has been transferred,

Even though personal data has been processed in accordance with Law No. 6698 and other relevant legal provisions, in the event that the reasons requiring its processing cease to exist, you have the right to request the deletion or destruction of personal data and to request the notification of this process to third parties to whom personal data has been transferred.

Objecting to the occurrence of a result against the individual by analyzing the processed data exclusively through automated systems,

Claiming compensation for damages in case personal data is processed unlawfully, leading to damage.

According to the first paragraph of Article 13 of the Law, if you want to use the rights mentioned above, you can send your request to the Company in writing or through other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, according to the Law, you must submit your application to the Company in writing within the scope of Article 11 of the Law. In this context, the channels and methods for submitting your applications in writing to the Company for your rights mentioned above are explained below.

To exercise your rights mentioned above, you can submit your request to the Company by filling out the Data Subject Application Form, including the necessary information to identify your identity and other requested information, and explaining your request regarding the right you want to exercise, signing a copy of the form, and delivering it in person with identity identification documents to the address Emirbeyazıt Mah. Zübeyde Hanım Cad. Üntaş Rezidans No:14 C Blok Kat:4 Apt:11 Menteşe Muğla/TÜRKİYE or you can send it by registered mail or through a notary or other methods specified in the Law.