COOKIE POLICY
As Erkul Kozmetik Sanayi ve Ticaret Anonim Şirketi (“Erkul Kozmetik” or the “Company”), we use cookies on our website available at https://www.erkulcosmetics.com (the “Site”) in order to improve the experience of users visiting the Site.
This Cookie Policy (the “Policy”) has been prepared by Erkul Kozmetik, acting as data controller under Law No. 6698 on the Protection of Personal Data (the “Law”), within the scope of Article 10 of the Law, in order to inform users of the purposes for which personal data collected by automated means through the cookies used on the Site are processed, the types of cookies through which such data are processed, and how these cookies can be managed.
Only strictly necessary cookies are used on the Site by default; all other cookies are used only with the user's explicit consent, and users are provided with the ability to update or withdraw such consent at any time via the Cookie Preferences panel.
A. WHAT IS A COOKIE?
Cookies are small text files that allow certain information to be stored on your devices such as phones, computers and tablets when you visit a website. Cookies enable websites to operate effectively, allow user preferences (such as language preference or site settings) to be remembered, keep the information on websites up to date and make improvements for users.
Cookies are classified according to their parties, their duration of use and their purposes of use:
|
COOKIES BY PARTY |
|
|
First-Party Cookies: Cookies created directly by the website visited. |
Third-Party Cookies: Cookies created by third parties other than the website visited (e.g. analytics service providers). |
|
COOKIES BY DURATION OF USE |
|
|
Persistent Cookies: Cookies that are not deleted directly when the internet browser is closed and are deleted after a certain period of time. |
Session Cookies: Cookies used to ensure the continuity of the session and deleted when the user closes the internet browser. |
|
COOKIES BY PURPOSE OF USE |
|
|
Technical (Strictly Necessary) Cookies: Cookies that are necessary for the website to be used. If the use of these cookies is blocked, certain parts or all of the website may become inaccessible. |
Performance (Analytics) Cookies: Cookies that collect information about how users use the website. They are used to improve the user experience. |
|
Functionality Cookies: Cookies used to remember your preferences on the website and to personalise your use of the site. |
Marketing Cookies: Cookies used to present personalised content based on users' interests and to measure the effectiveness of marketing activities. |
B. COOKIES USED ON THE SITE AND THE LEGAL BASIS FOR THEIR USE
Technical/strictly necessary cookies and performance (analytics) cookies are currently used on the Site. Details of the cookies used on the Site are provided below:
STRICTLY NECESSARY COOKIES
Legal Basis: Article 5/2(f) of the Law – processing of data being necessary for the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject.
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
| _shopify_essential | Carries the session information required for the Site to function properly. | 1 year | Shopify (Site infrastructure provider) |
| localization | Stores the user's language and region preference. | 1 year | Shopify (Site infrastructure provider) |
| _tracking_consent | Stores the user's cookie preferences in the Site infrastructure and ensures that cookies run in line with those preferences. | 1 year | Shopify (Site infrastructure provider) |
| _shopify_test | Checks whether the browser supports cookies. | 1 minute | Shopify (Site infrastructure provider) |
| cookie_consent_level | Stores the preferences the user sets through the cookie banner and ensures they are respected on subsequent visits. | 2 months | Mobildev (Consent management platform) |
| cookie_consent_user_accepted | Records that the user has made a choice on the cookie banner so that the banner is not shown again. | 2 months | Mobildev (Consent management platform) |
| ccpa | Identifies the consent record of the user's cookie choice (kept as proof of consent). | 2 months | Mobildev (Consent management platform) |
| ccpu | Stores the technical ID that identifies the user in consent records. | 13 months | Mobildev (Consent management platform) |
PERFORMANCE (ANALYTICS) COOKIES
Legal Basis: Article 5/1 of the Law – existence of the data subject's explicit consent.
| Cookie Name | Purpose | Duration | Provider |
|---|---|---|---|
| _ga | Used by Google Analytics; assigns a randomly generated client ID to distinguish users. | 2 years | |
| _ga_N7H559XX0J | Used by Google Analytics 4 to persist session state. | 2 years | |
| _shopify_y | Assigns a visitor ID to measure visits to the Site. | 1 year | Shopify (Site infrastructure provider) |
| _shopify_s | Identifies the session on the Site and helps generate visit statistics. | 30 minutes | Shopify (Site infrastructure provider) |
| _shopify_analytics | Collects statistical measurement data on the use of the Site. | 1 year | Shopify (Site infrastructure provider) |
| shop_analytics | Collects statistical measurement data on the use of the Site. | 1 year | Shopify (Site infrastructure provider) |
| _landing_page | Records the first page the user lands on when entering the Site. | 2 weeks | Shopify (Site infrastructure provider) |
| _orig_referrer | Records the source from which the user arrived at the Site. | 2 weeks | Shopify (Site infrastructure provider) |
C. GOOGLE ANALYTICS
The Google Analytics service provided by Google is used on the Site for the purpose of analysing Site traffic and usage. Through Google Analytics cookies, information on Site usage statistics — such as the pages visited and the time, frequency and source of visits — is collected without personally identifying users. These cookies are operated only where your explicit consent exists.
You may disable the use of Google Analytics cookies at any time via your cookie preferences, or block them permanently by installing the browser add-on available at the link below:
https://tools.google.com/dlpage/gaoptout?hl=tr
D. PERSONAL DATA PROCESSED THROUGH COOKIES
The following personal data are processed through cookies:
|
IDENTITY |
User identifier/ID. |
|
TRANSACTION SECURITY |
User transaction records, including your IP address, browser and operating system information, the date and time of your visit, interaction status (for example, whether you were able to access the Site or received an error message), use of the features on the Site, search terms entered, frequency of your visits to the Site, language preferences, page scrolling movements and information on the tabs accessed. |
E. COLLECTION OF PERSONAL DATA THROUGH COOKIES
Your personal data specified above are collected by automated means through cookies. Personal data processing activities carried out through cookies rely on the legal bases set out under heading (B) of this Policy.
F. SHARING OF PERSONAL DATA COLLECTED THROUGH COOKIES
Your personal data collected through cookies may be shared, in line with the purposes and legal bases set out in this Policy, with information technology infrastructure service providers located in Türkiye and abroad and with third parties providing cookie services (including Google). In addition, your personal data may be shared with authorised public institutions and organisations and with judicial authorities where required for the fulfilment of legal obligations or where the sharing of information becomes necessary in the event of a dispute. Compliance with the rules set out in Articles 8 and 9 of the Law is ensured in the transfer of your personal data.
G. MANAGEMENT OF COOKIES
You may set your preferences regarding cookies other than strictly necessary cookies via the cookie information screen displayed on your first visit to the Site. You may subsequently update your preferences at any time by clicking the “Cookie Settings” link available on the Site. You may need to refresh the page for your changes to take effect.
You may also manage cookies through your browser settings. The methods for disabling cookies may vary depending on the browser used. You may access the cookie management pages of commonly used browsers via the links below:
Please note that if strictly necessary cookies are blocked, various functions of the Site may not operate.
H. EXERCISE OF DATA SUBJECT RIGHTS
Article 11 of the Law regulates the rights of data subjects. As a data subject, you may use the following methods to exercise your rights set out in Article 11 of the Law:
-
You may send your requests to the e-mail address info@goldenrose.com.tr, using the e-mail address you have previously notified to us and which is registered in our systems.
-
By post, you may submit your requests in writing to Cihangir Mahallesi Petrol Ofisi Caddesi No:1 Avcılar / İstanbul.
-
To submit your requests, you may also use the other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.
The Data Subject Application Form, prepared to facilitate your applications, is available on the Site. Your applications will be concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request; where the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.
Last Updated: September 2026