PERSONAL DATA PROTECTION LAW (KVKK) INFORMATION NOTICE

This Information Notice has been prepared in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) to inform you about the purposes for which your personal data is processed by the data controller, to whom and for what purposes your personal data may be transferred, the methods and legal grounds for collecting your personal data, and your rights under the KVKK.

1. DATA CONTROLLER

Your personal data is processed by VİP COSMETİCA E TİCARET (“Company”) as the data controller within the scope of Law No. 6698.

2. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is processed for the following purposes:

Carrying out order and payment transactions,

Provision of products and services and execution of invoicing processes,

Delivery and improvement of customer support services,

Management of campaigns, promotions, and advertising processes,

Fulfilment of legal obligations,

Execution of internal Company operations,

Ensuring customer satisfaction and user experience.

3. TRANSFER OF PERSONAL DATA

Your personal data may be transferred to authorized public institutions, third parties providing legal consultancy, suppliers, service providers, and business partners within the framework of Articles 8 and 9 of the KVKK.

4. METHODS AND LEGAL GROUNDS FOR COLLECTING PERSONAL DATA

Your personal data may be collected through our website, e-mail, call center, social media platforms, and mobile applications via automated or non-automated means.

Such data may be processed on the following legal grounds:

Explicitly stipulated in laws,

Processing is directly related to the establishment or performance of a contract,

Necessary for the data controller to fulfill its legal obligation,

Necessary for the legitimate interests of the data controller, provided that it does not infringe the fundamental rights and freedoms of the data subject,

Based on the explicit consent of the data subject.

5. RIGHTS OF THE DATA SUBJECT

In accordance with Article 11 of the KVKK, personal data subjects have the following rights:

To learn whether personal data is being processed,

To request information if personal data has been processed,

To learn the purpose of processing personal data and whether it is used in accordance with its purpose,

To know the third parties to whom personal data is transferred at home or abroad,

To request the correction of personal data if it is incomplete or incorrect,

To request the deletion or destruction of personal data within the framework of the conditions stipulated in the KVKK,

To request that correction, deletion, or destruction operations be notified to third parties to whom personal data has been transferred,

To object to a result arising against the person as a result of the analysis of processed data exclusively through automated systems,

To request compensation for damages if personal data has been processed unlawfully.

6. APPLICATION PROCEDURE

You may submit your requests regarding your rights listed above by completing the KVKK Application Form available at www.bidunyastore.com

and delivering it to the Company through one of the following channels:

Submitting in person by hand to the Company address,

Via notary public,

By sending an email to [email protected]

Applications shall be responded to as soon as possible and within 30 days at the latest, provided that identity verification is ensured.

This Information Notice may be updated when necessary, and the most recent version shall be published at www.cosorelli.com