At Armin Pure Beauty, we value the protection of your personal data. This Privacy Notice has been prepared in accordance with Turkish Personal Data Protection Law No. 6698 (the "KVKK") to inform you about how your personal data is processed when you visit our website or contact us.
1. Data Controller
The data controller responsible for the personal data processing activities described in this notice and carried out under the Armin Pure Beauty brand is:
Full Name / Registered Business Name: [Official name or registered business name of the data controller]
Address: [Current full address]
Email: [Email address designated for data protection requests]
Registered Electronic Mail (KEP): [KEP address, if available]
2. Personal Data Processed and Methods of Collection
Depending on your use of our website and your interactions with us, the following categories of personal data may be processed:
-
Identity and Contact Information: Your first name, last name, phone number, and email address provided when submitting an inquiry or appointment request.
-
Inquiry and Communication Information: Services you are interested in, appointment preferences, questions, and the content of your correspondence with us.
-
Website and Security Information: IP addresses, access dates and times, browser information, and server logs generated when accessing our website.
-
Cookie and Preference Information: Information collected through cookies, depending on the types of cookies used on our website and your preferences.
This information is collected electronically or verbally through website forms, email and telephone communications, server logs, and cookies.
Please do not submit health information, laboratory test results, identity documents, or sensitive photographs through the general contact sections of our website. If the processing of special categories of personal data becomes necessary in connection with a particular service, a separate privacy notice will be provided, and the applicable legal requirements for processing such data will be met.
3. Purposes and Legal Bases for Processing Personal Data
Your personal data is processed only to the extent necessary for the relevant activities and for the following purposes:
-
Evaluating Service and Appointment Requests: Your name, contact details, and inquiry information may be processed under Article 5(2)(c) of the KVKK when processing is directly related to and necessary for the establishment or performance of a contract.
-
Responding to Questions and Feedback: Your contact details and correspondence may be processed under Article 5(2)(f) of the KVKK based on our legitimate interest in managing communications, provided that your fundamental rights and freedoms are not adversely affected.
-
Maintaining Website Security: Technical access and security records may be processed under Article 5(2)(f) of the KVKK based on our legitimate interest in preventing misuse and maintaining system security.
-
Fulfilling Legal Obligations: Relevant records may be processed under Article 5(2)(ç) of the KVKK when necessary to comply with obligations imposed by applicable laws and regulations.
-
Protecting Legal Rights and Managing Disputes: Necessary communication and transaction records may be processed under Article 5(2)(e) of the KVKK when processing is essential for the establishment, exercise, or protection of a legal right.
-
Using Optional Cookies: Where no other applicable legal basis exists, the relevant personal data may be processed based on your explicit consent under Article 5(1) of the KVKK.
4. Transfer of Personal Data
Your personal data may be shared, to the extent necessary for the purposes described above, with the following categories of recipients:
-
Technical infrastructure providers responsible for website hosting, maintenance, and security.
-
Software and communication service providers supporting communication and appointment management.
-
Legal advisors when necessary for handling legal matters.
-
Authorized public institutions and judicial authorities when required by law or in response to a lawful request.
Such transfers may take place in accordance with the conditions set out in Article 8 of the KVKK.
[This section must be finalized after verifying the service providers actually used and the relevant data flows. Recipient categories that do not apply must be removed.]
International Transfers of Personal Data:
[Hosting, email, analytics, appointment management, and communication services must be reviewed to determine whether personal data is transferred outside Türkiye. Where international transfers occur, this section must specify the categories of data transferred, recipient categories, purposes of transfer, and the applicable transfer mechanism under Article 9 of the KVKK.]
5. Cookies
The names, providers, purposes, retention periods, and legal bases of cookies used on our website are explained in our Cookie Notice.
Cookies requiring explicit consent will not be activated before you provide your consent. You may change your preferences or withdraw your consent through the cookie settings available on our website.
6. Data Retention and Security
Your personal data is retained for the periods required by applicable laws and regulations or for as long as necessary to fulfill the purposes for which it was collected.
When all legal grounds for processing cease to exist, your personal data will be deleted, destroyed, or anonymized in accordance with applicable legislation.
We implement the necessary technical and organizational measures to prevent unlawful processing of and unauthorized access to personal data and to ensure its secure storage.
7. Your Rights
Under Article 11 of the KVKK, you have the right to:
-
Learn whether your personal data is being processed and request information about such processing.
-
Learn the purposes of processing, whether your data is being used in accordance with those purposes, and the third parties to whom your personal data has been transferred, whether within Türkiye or abroad.
-
Request the correction of incomplete or inaccurate personal data.
-
Request the deletion or destruction of your personal data when the applicable legal conditions are met.
-
Request that corrections, deletions, or destruction of your personal data be communicated to third parties to whom the data has been transferred.
-
Object to decisions made solely through automated analysis of your personal data that produce an unfavorable result concerning you.
-
Request compensation if you suffer damage as a result of unlawful processing of your personal data.
8. How to Submit a Request
You may submit requests concerning your personal data rights in writing to the address provided above, together with information sufficient to verify your identity and a description of your request.
You may also submit your request through the methods specified in the Communiqué on the Procedures and Principles for Applications to the Data Controller, including:
-
Our registered electronic mail (KEP) address, if available.
-
The email address specified above, using an email address that you have previously provided to us and that is registered in our systems.
Requests will be evaluated and answered as soon as possible, and no later than 30 days after receipt, depending on the nature of the request.
If processing your request involves additional costs, a fee may be charged in accordance with the tariff established by the Turkish Personal Data Protection Board.
Last Updated: [Day/Month/Year]