Personal Data Protection and Privacy Policy Example

1. Introduction
This policy has been prepared by URAW Cosmetics to comply with the Law No. 6698 on the Protection of Personal Data (KVKK). The company acknowledges its obligation to protect the privacy of personal data belonging to its customers, employees, suppliers, and other relevant parties.

2. Methods of Collecting Personal Data
The company collects personal data through the following methods:

• Via the Website: Data collected during users' visits to the website (IP address, cookies, pages visited, etc.).

• Customer Communication: Personal data provided by customers via channels such as phone, email, or social media.

• Contracts: Personal data provided through contracts made with the company (name, address, phone number, email address, payment information, etc.).

3. Purposes of Processing Personal Data
The collected personal data may be processed for the following purposes:

• Service Provision: To provide products and services, deliver them, and meet customer requests.

• Communication: To communicate with customers and send notifications.

• Marketing: To offer personalized offers and advertisements.

• Legal Obligations: To fulfill legal obligations, tax, audit, and similar processes.

4. Storage of Personal Data
Personal data is stored only for a certain period and not kept unnecessarily. The retention period of data is determined based on legal regulations and company policies. Once the retention period ends, the data is deleted or anonymized.

5. Sharing of Personal Data
The company may share personal data with third parties only in the following cases:

• Legal Obligations: Personal data may be shared with government agencies or official authorities in accordance with legal obligations.

• Service Providers: The company may share data with third parties (e.g., data processing, storage service providers) to provide certain services. In this case, it ensures that data processors comply with the KVKK.

• Business Partners: With the consent of the relevant individual, data may be shared with business partners or suppliers.

6. Security of Personal Data
The company takes technical and administrative measures to ensure the security of personal data. These measures include encryption, data access control, and regular security audits.

7. Rights of Data Subjects
Under KVKK, data subjects have the following rights:

• To learn whether personal data is being processed,

• To access their personal data,

• To request correction of their personal data,

• To request deletion or destruction of their personal data,

• To object to the processing of their personal data,

• To request the transfer of their personal data.

Data subjects can make a request to [Company Name] through [communication channel (email, phone, etc.)] to exercise these rights.

8. Cookies
Our website uses cookies to enhance the user experience. The use of cookies is carried out with the user's consent. Users can disable cookies through their browser settings.

9. Policy Changes
The company may update this Personal Data Protection and Privacy Policy from time to time. The updated policy will be announced to users by publishing it on our website.