KVKK

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by Norm Kozmetik San. ve Tic. Ltd. Şti. (Rose Candy) as data controller for the purposes described below.

Data Controller

NORM KOZMETİK PAZARLAMA SANAYİ VE TİCARET LİMİTED ŞİRKETİ (Rose Candy) — Mecidiye Mah. Selçuk Cad. No:85 İç Kapı No:1, 34930 Sultanbeyli / Istanbul

Personal Data Processed

Membership and order flows may process identity, contact, delivery/billing address, order, payment-result, delivery, return, and preference records; website use may process IP, browser, and cookie data. The Seller does not see or store card data.

Purpose and Legal Basis for Processing

• Ensuring website security and performance (Legitimate interest)
• Operating membership, order, payment, invoice, delivery, and return flows (Contract performance and legal obligation)
• Answering customer requests and establishing or exercising a right
• Improving visitor experience (Explicit consent — analytics cookies)
• Targeted advertising activities (Explicit consent — marketing cookies)
• Fulfilling legal obligations

Data Transfer

Where necessary to provide the order service, data may be shared with payment, carrier, e-invoice, email/SMS, and infrastructure providers or competent authorities. Transfers to analytics and marketing providers occur only when you separately consent to the relevant cookie category.

Your Rights

Under Article 11 of KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To learn the purpose of processing and whether it is used in accordance with its purpose
• To request the correction of your data
• To request the deletion or destruction of your data
• To request restriction of processing
• To object to data processing