Personal Data Notice

Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by NORM KOZMETİK PAZARLAMA SANAYİ VE TİCARET LİMİTED ŞİRKETİ (Rose Candy), as data controller, for the purposes explained below.

Data controller

NORM KOZMETİK PAZARLAMA SANAYİ VE TİCARET LİMİTED ŞİRKETİ (Rose Candy) — Mecidiye Mah. Selçuk Cad. No:85 İç Kapı No:1, 34930 Sultanbeyli / İstanbul

Personal data processed

Identity, contact, delivery and billing address, order, payment transaction result, delivery, return and preference records may be processed during account and order procedures. IP address, browser and cookie data may be processed when you use the site.

Collection methods

Data may be obtained electronically through site and account activity, order screens, contact requests and cookies, directly from you or from service providers required for the transaction.

Purposes and legal bases

• Providing website security and basic functions (Legitimate interest, provided that your fundamental rights and freedoms are not harmed)
• Managing account, order, payment, invoicing, delivery and return procedures (Establishment or performance of a contract and legal obligation)
• Responding to customer requests; processing necessary to establish, exercise or protect a right
• Improving the visitor experience (Explicit consent — analytics cookies)
• Targeted advertising (Explicit consent — marketing cookies)
• Fulfilling legal obligations

Data sharing

Your data may be shared with payment, shipping, e-invoicing, email/SMS and infrastructure providers or competent authorities to the extent necessary for order services. Sharing with analytics and marketing providers takes place only when you give separate explicit consent for the relevant cookie category.

Your rights

Under Article 11 of KVKK, you may contact us to:

• Learn whether your data is processed and request information if it has been processed.
• Learn the purpose of processing and whether your data is used for that purpose.
• Learn which third parties receive your data in Türkiye or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of your data under the conditions in Article 7 of the Law.
• Request that correction, deletion or destruction be notified to third parties to whom the data was transferred.
• Object to an adverse outcome arising solely from automated analysis.
• Request compensation for damage caused by unlawful processing of your data.

You may withdraw your consent with effect for the future for processing based on explicit consent. You may also send other requests concerning processing or use; these are assessed under applicable law.

Requests and contact: Send your requests to info@rosecandy.com.tr. You may also submit KVKK requests in writing to the data controller's address above or through other methods provided by law. Requests are resolved as soon as possible according to their nature and within 30 days at the latest.