Privacy Notice (KVKK) | Kırmızıgül Cosmetics

Last updated: 15 October 2026

As Kırmızıgül Kozmetik ve Turizm Sanayi Ticaret Limited Şirketi (“Kırmızıgül Cosmetics” or the “Company”), we provide this notice under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform visitors to our website and people who contact us about how their personal data is processed.

This is an English translation provided for convenience. In the event of any discrepancy, the Turkish version prevails.

1. Data controller

Company: Kırmızıgül Kozmetik ve Turizm Sanayi Ticaret Limited Şirketi
MERSIS No: [to be completed]
Address: Veliköy OSB Mah. Osman Uzun Cad. No:55/1, Çerkezköy / Tekirdağ, Türkiye
Email: iletisim@kirmizigulgroup.com
Registered email (KEP): [to be completed]
Phone: +90 282 725 25 25

2. Personal data we process

Identity: first name and surname.
Contact: email address and phone number.
Request details: the subject you select and the content of your message.
Security: server access logs such as IP address, date and time, pages visited and browser information.

Please do not include special categories of personal data, such as health information, in your message.

3. How we collect it

We collect personal data through the contact form on our website, by email and by phone, by wholly or partly automated means. The contact form lets you send the details you enter from your own email app to iletisim@kirmizigulgroup.com; form data is not separately stored on our web server. Server access logs are created automatically when you visit the site.

4. Purposes

To answer your questions, requests and suggestions,
To assess distribution, sales, export and contract manufacturing enquiries and establish business relationships,
To respond to requests for information about our products,
To maintain information security and monitor the safe operation of the website,
To meet our legal obligations and respond to requests from competent authorities,
To exercise and defend our legal rights in the event of a dispute.

5. Legal grounds

We process your personal data without requiring your explicit consent, on the following grounds under Article 5(2) KVKK:

It is directly necessary for entering into or performing a contract (distribution, sales, export and contract manufacturing enquiries) (Art. 5(2)(c)),
It is necessary for us to comply with a legal obligation (Art. 5(2)(ç)),
It is necessary to establish, exercise or defend a right (Art. 5(2)(e)),
It is necessary for our legitimate interests, provided this does not harm your fundamental rights and freedoms, for example to reply to your enquiry and keep the site secure (Art. 5(2)(f)).

6. Transfers

Limited to the purposes above and in line with Articles 8 and 9 KVKK, your personal data may be shared with:

Our group companies and business partners, depending on your enquiry (for example, our distributor in your region),
Providers of our website hosting and email services,
Our legal and financial advisers,
Competent public authorities and courts, where required.

If the servers of our email service provider are located outside Türkiye, your messages may be transferred abroad subject to appropriate safeguards, such as the standard contractual clauses published by the Personal Data Protection Board under Article 9 KVKK.

7. Retention

We keep correspondence for 2 years after your enquiry is closed. Correspondence that leads to a business relationship is kept for 10 years under the Turkish Commercial Code and tax legislation. Server access logs are kept for up to 2 years. When the retention period ends, the data is erased, destroyed or anonymised.

8. Your rights

Under Article 11 KVKK you have the right to:

Find out whether your personal data is processed,
Request information about the processing,
Learn the purpose of the processing and whether the data is used accordingly,
Know the third parties in Türkiye or abroad to whom your data is transferred,
Request correction of incomplete or inaccurate data,
Request erasure or destruction of your data under the conditions set out in Article 7 KVKK,
Request that corrections, erasure or destruction be notified to third parties who received the data,
Object to an outcome against you resulting from analysis of your data exclusively by automated systems,
Claim compensation for damage caused by unlawful processing.

9. How to apply

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your request:

In writing with a wet signature, in person or through a notary, to our address above,
To our registered email (KEP) address,
By email to iletisim@kirmizigulgroup.com, signed with a secure electronic or mobile signature, or sent from an email address you have previously given us and that is registered in our systems.

Your request should include your name and surname, Turkish ID number (or nationality and passport number for non-Turkish citizens), postal address for notifications, email and phone number if available, and a description of your request. We respond free of charge within 30 days at the latest. If the request involves an additional cost, a fee may be charged in line with the tariff set by the Board.