Privacy Policy
1. General Information
This Privacy Policy has been prepared for the purpose of outlining the procedures and principles regarding the processing of personal records of users, members, and individuals within the scope of the website with the domain name www.ikaglaie.com and the in-program sales plans belonging to the Company, operated by İREM SAYLAM KARAGÖZ IKAGLAIE BEAUTY COSMETICS GÜZELLİK ÜRÜNLERİ ("Company"), in compliance with the Personal Data Protection Law No. 6698 (KVKK), relevant legislation, and applicable e-commerce regulations.
This Privacy Policy applies to the www.ikaglaie.com address and all digital platforms owned by the Company that carry the IKAGLAIE brand. Third-party websites outside of these platforms that use the IKAGLAIE logo are outside the scope of this Privacy Policy.
The content and guidance provided on the websites are for informational purposes to inform users, and we are not responsible for the content and practices of third-party sites.
Our company collects personal data such as registration details, order data, payment and delivery distribution, forms and surveys on the website, communication with customer service and similar distributions; advertising address, contact information, address details, e-mail, order and transaction information, IP address, and site usage data, in accordance with the law, within the scope of the performance of the service and the formation of the contract.
2. Personal Data Collected
Our company; during registration processes, order data, payment and delivery distribution, forms and surveys on the website, communication with customer service, and similar distributions:
· Name-surname
· Contact information
· Address information
· E-mail address
· Order and transaction information
· IP address
· Site usage and transaction data
Personal data such as these are collected in accordance with the law, within the scope of the performance of the service and the formation of the contract.
3. Purposes of Processing Personal Data
Collected Personal Data:
· Expansion of membership and orders,
· Product and performance changes,
· Execution of payment, invoicing, and delivery processes,
· Provision of customer relations and support,
· Information security and improvement of the systemic process,
· Fulfillment of legal obligations
are processed in accordance with the Personal Data Protection Law No. 6698.
In case of explicit consent, the data may also be processed for the purpose of increasing risks, campaigns, and information. Users submit their consents regarding commercial electronic communication preferences during the registration phase. They may exercise these preferences at any time through their account settings or via the unsubscribe link included in the messages sent to them.
4. Transfer of Personal Data
Personal data transmitted to us via our online store or through electronic communication channels are processed in accordance with the Law on the Protection of Personal Data No. 6698 and relevant legislation.
Your Personal Data;
· Fulfillment of legal obligations,
· Execution of orders, payments, invoicing, and delivery,
· Maintenance of customer service and technical support operations and processes,
may be transferred to authorized public institutions, payment service providers, cargo and logistics service providers, and business partners providing technical infrastructure services, limited to the purposes stated and to the extent necessary. Otherwise, personal data shall not be transferred to third parties without your explicit consent.
During visits to our website, IP addresses may be processed within the scope of log records to maintain system operations and specify technical information. This data is stored for periods stipulated by law and kept securely.
Your personal data may be used for statistical analysis, reporting, and service development purposes without disclosing your identity.
Registration information, usernames, and passwords of our users are personal to the individual. It is the responsibility of the user to protect the confidentiality of this information. Our company employs necessary technical and administrative measures to prevent unauthorized access.
Our website may direct users to third-party websites. We are not responsible for the privacy and data protection practices of these sites.
The company adopts the protection of personal privacy and rights as a fundamental principle; all necessary measures are in place to prevent unauthorized access, disclosure, or unlawful use.
Information shared during membership is accessible only to the user and can only be updated by the user. If the user keeps their login information confidential, it is not possible for third parties to access or modify this information.
Our company implements the security infrastructure used during payment and registration processes within the framework of internationally accepted security standards.
5. Storage Period of Personal Data
Personal data shall be stored for the duration of the retention periods specified in the Law on the Protection of Personal Data No. 6698, relevant legislation, and other legal regulations, or limited to the duration of the purpose for which they are processed if no period is stipulated in the relevant legislation. In the event that the reason for storage ceases or the processing of personal data is no longer necessary, such personal data shall be deleted, destroyed, or anonymized in accordance with the Company's Personal Data Storage and Disposal Policy.
6. Data Security
To ensure that personal data is not processed or accessed unlawfully and to ensure the protection of personal information, the Company implements appropriate technical and administrative security measures, taking into account technological capabilities and implementation costs.
In this context;
· Unauthorized access,
· Data loss,
· Data disclosure,
· Unlawful processing
Necessary information security measures are applied against these risks.
Registration information, usernames, and passwords of our users are personal to the individual. It is the responsibility of the user to protect the confidentiality of this information. If the user keeps their login information confidential, it is not possible for third parties to access this information.
Our company uses security infrastructures in compliance with internationally accepted information security systems during payment and registration processes, and maintains audit and control mechanisms required for the protection of personal data.
7. Exceptional Cases
In the limited circumstances specified below, personal data may be disclosed to third parties outside of this Privacy Policy:
1. If requested by authorized administrative and judicial authorities in a manner compliant with procedures and the law,
2. For the purpose of fulfilling legal obligations arising from legislation,
3. Where it is necessary for the establishment, performance, or legal validity of contracts (membership agreement, distance sales agreement, etc.) to which we are a party,
4. In cases where data processing is necessary for the establishment, exercise, or protection of a right.
Data sharing performed in this context is carried out in a manner that is limited, proportionate, and compliant with the law.
8. Rights of the Personal Data Subject
In accordance with Article 11 of the Law on the Protection of Personal Data No. 6698, personal data subjects have the following rights;
• To learn whether their personal data has been processed,
• To request information if their personal data has been processed,
• To learn the purpose of processing their personal data and whether it has been used in accordance with that purpose,
• To know the third parties to whom their personal data is transferred domestically or abroad,
• To request the correction of their personal data if it has been processed incompletely or incorrectly,
• To request the deletion, destruction, or anonymization of their personal data if the reasons requiring its processing have ceased to exist,
• To request notification of the correction, deletion, destruction, or anonymization processes to third parties to whom the personal data has been transferred,
• To object to any unfavorable consequence arising from the analysis of the processed data exclusively through automated systems,
• To request compensation for damages in case of loss due to the unlawful processing of personal data.
9- Method of Collection and Legal Basis for Personal Data
Your personal data is collected via automated or non-automated methods, including membership transactions, order and payment steps, contact forms, written or electronic communications with customer services, cookies, and similar means through the website with the domain name www.ikaglaie.com.
The collected personal data is processed based on the legal grounds specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698:
• It being directly related to the establishment or performance of a contract,
• The necessity for our Company to fulfill its legal obligations,
• The necessity of data processing for the establishment, exercise, or protection of a right,
• The necessity of data processing for the legitimate interests of the data controller,
• The existence of explicit consent (in terms of promotion, campaigns, and commercial electronic message activities).
Regarding personal data processed based on explicit consent, data subjects have the right to withdraw their explicit consent at any time. Personal data owners may submit their requests to exercise their rights specified in Article 11 of the Personal Data Protection Law No. 6698:
10- Application Method under KVKK
Personal data owners may submit their requests to exercise their rights specified in Article 11 of the Personal Data Protection Law No. 6698 to our Company:
• In writing,
• Via registered electronic mail (KEP) address,
• Using a secure electronic signature or mobile signature,
• Via the electronic mail address previously notified to our Company and registered in our systems.
Applications must be made together with information and documents that will ensure identity verification; our Company will conclude the applications free of charge within a maximum of 30 (thirty) days, depending on the nature of the request.
However, if the transaction requires additional costs, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.
Applications are evaluated within the framework of privacy and data security principles, and requests that could harm the rights and freedoms of third parties may be rejected.
Contact
You can submit any requests and applications regarding our Privacy Policy and your personal data to our company via the contact information below.
Company Title: İrem SAYLAM KARAGÖZ-IKAGLAIE Beauty Cosmetics Güzellik Ürünleri
Address: Osman Yılmaz Mh. 634 Sk. No:8 D:9 Gebze / Kocaeli
E-Mail: info@ikaglaie.com
