This privacy notice has been prepared by AKTİFİM KOZMETİK KUAFÖR MALZ. SAN. TİC. LTD. ŞTİ. (“Aktifim Kozmetik”) as data controller, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
1. Data controller
- Company: AKTİFİM KOZMETİK KUAFÖR MALZ. SAN. TİC. LTD. ŞTİ.
- Address: Pamuklar Mah. Kızılcahamam Cad. No: 50/B, Yenimahalle / Ankara, Türkiye
- Phone: +90 312 343 98 40
- Email: info@aktifimkozmetik.com
- MERSIS No: 0042034952800018
- Tax Office / No: Yenimahalle V.D. / 0420349528
2. Personal data processed
Through our website (www.aktifimkozmetik.com) and our contact channels we may process the following personal data:
- Identity: first name and surname
- Contact: phone number, email address, salon or company name
- Customer transaction: the subject you choose and the content of your message
- Transaction security: IP address, date and time of submission, browser information, the result of the security check (Cloudflare Turnstile)
Please do not share special categories of personal data (such as health, religion or ethnic origin) in your message.
3. Purposes of processing
- Receiving and evaluating your enquiry and responding to you
- Providing information and offers about products, training, salon fit-outs and events
- Evaluating business and brand partnership requests
- Securing the website and contact form and preventing abuse, spam and automated attacks
- Fulfilling our legal obligations and responding to requests from competent authorities
4. Legal grounds
Your personal data is processed on the following legal grounds under Article 5 of the KVKK:
- Processing is directly related to the establishment or performance of a contract (Art. 5/2-c)
- Compliance with a legal obligation of the data controller (Art. 5/2-ç)
- The legitimate interests of the data controller, provided your fundamental rights and freedoms are not harmed (Art. 5/2-f), e.g. form security
- Where none of the above applies, and for transfers abroad, your explicit consent (Art. 5/1 and Art. 9)
5. Transfer of personal data
Limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to:
- Hosting, email and security service providers: for hosting the website, forwarding form messages by email and protecting against attacks (including Cloudflare, Inc.). Some of these providers may have servers abroad; such transfers rely on the safeguards set out in Art. 9 of the KVKK or on your explicit consent.
- Competent public authorities: where required by law and to the extent requested.
Your personal data is never sold or rented to third parties for marketing purposes.
6. Method of collection
Your personal data is collected electronically via the contact form on our website, email, phone and WhatsApp, partly by automated means (e.g. IP address and security verification).
7. Retention
- Contact form messages are kept for at most 2 years after your request is concluded; if a business relationship is established, the periods required by law apply.
- IP-based rate-limiting records used for form security are held only in server memory for a few hours at most and are not stored permanently.
- Web server access logs are kept for at most 30 days.
Data whose retention period has expired is deleted, destroyed or anonymised.
8. Your rights (KVKK Art. 11)
As a data subject you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether data is used in line with that purpose; to know the third parties in Türkiye or abroad to whom it has been transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction under the conditions of Art. 7 and notification of these actions to third parties to whom the data was transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage arising from unlawful processing.
9. How to apply
You may submit your requests in writing, with information identifying you, to Pamuklar Mah. Kızılcahamam Cad. No: 50/B, Yenimahalle / Ankara, Türkiye, or by email to info@aktifimkozmetik.com from an email address registered with us, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are concluded free of charge within 30 days at the latest; if the action requires additional cost, the fee schedule set by the Personal Data Protection Board may apply.