Privacy Policy

PRIVACY POLICY

1. INTRODUCTION

As Erkul Kozmetik Sanayi ve Ticaret Anonim Şirketi (“Erkul Kozmetik” or the “Company”), we attach importance to the protection of your personal data. This Privacy Policy (the “Policy”) explains which of your personal data we process in connection with your visit to our website available at https://www.erkulcosmetics.com (the “Site”), for which purposes and on which legal bases we process such data, with whom we may share them, and how you may exercise your rights regarding your personal data, in accordance with the applicable legislation, in particular Law No. 6698 on the Protection of Personal Data (the “Law”).

Data controller: Erkul Kozmetik Sanayi ve Ticaret Anonim Şirketi

Cihangir Mahallesi Petrol Ofisi Caddesi No:1 Avcılar / İstanbul


For detailed information on the cookies used on the Site, please see the Cookie Policy.

2. PERSONAL DATA WE PROCESS

Where you visit the Site, transaction security data (log records and, depending on your preference, cookie data) are processed about you. The Site does not contain any forms. Where you contact us by e-mail using the addresses provided on the Site (for example, for private-label, distribution or job application enquiries), the personal data you include in your message are processed. In this respect, the following personal data may be processed:

Data Category

Personal Data

Identity

Name, surname

Contact

E-mail address; telephone number and company information, where you provide them

Professional Experience

Where you apply for a job by e-mail: the information contained in the CV and application materials you choose to send us

Customer Transaction

Content of your enquiries, requests and correspondence (including private-label and distribution enquiries)

Transaction Security

IP address, browser and operating system information, Site access and browsing records (log records), data collected through cookies

3. METHOD OF COLLECTION OF PERSONAL DATA

Your personal data are collected in electronic form by fully or partially automated means, through the e-mails you send to the addresses provided on the Site and through the creation of cookies and log records during your visit to the Site.

4. PURPOSES AND LEGAL BASES OF THE PROCESSING OF PERSONAL DATA

Processing Purpose

Legal Basis

Receipt, assessment and conclusion of enquiries, requests, private-label and distribution enquiries and job applications sent to us by e-mail, and communication with you in this respect

Article 5/2(e) of the Law – processing being necessary for the establishment, exercise or protection of a right; Article 5/2(f) of the Law – processing being necessary for the legitimate interests of the data controller

Use as evidence in disputes that may arise from request and complaint processes

Article 5/2(e) of the Law

Ensuring the security of the Site and keeping the internet traffic records required to be kept under the applicable legislation

Article 5/2(ç) of the Law – fulfilment of a legal obligation (Law No. 5651); Article 5/2(f) of the Law

Analysis of Site usage through analytics cookies and improvement of Site performance

Article 5/1 of the Law – existence of your explicit consent

5. TRANSFER OF PERSONAL DATA

Your personal data may be transferred, limited to the achievement of the purposes stated above, to our suppliers and information technology service providers located in Türkiye and abroad from whom we receive services such as the hosting and operation of the Site; and, where necessary for the fulfilment of our legal obligations or for the resolution of a dispute, to authorised public institutions and organisations and to judicial authorities. Compliance with the rules set out in Articles 8 and 9 of the Law is ensured in the transfer of your personal data.

6. RETENTION OF PERSONAL DATA

Your personal data are retained for the period required by the processing purpose and, in any event, for the maximum periods prescribed by the applicable legislation and the statutory limitation periods; at the end of these periods, they are deleted, destroyed or anonymised. Traffic records required to be kept under Law No. 5651 are retained for the period prescribed by that legislation.

7. DATA SECURITY

Our Company takes the necessary technical and administrative measures to ensure an appropriate level of security pursuant to Article 12 of the Law, in order to prevent the unlawful processing of, and unlawful access to, your personal data and to ensure the safekeeping of your personal data.

8. YOUR RIGHTS REGARDING YOUR PERSONAL DATA

Pursuant to Article 11 of the Law, you have the following rights regarding your personal data:

  • To learn whether your personal data are processed,

  • If your personal data are processed, to request information regarding such processing,

  • To learn the purpose of the processing of your personal data and whether they are used in accordance with that purpose,

  • To know the third parties to whom your personal data are transferred, whether in Türkiye or abroad,

  • To request the rectification of your personal data where they are incomplete or inaccurately processed,

  • To request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the Law,

  • To request that your rectification, deletion and destruction requests be notified to the third parties to whom your personal data have been transferred,

  • To object to the occurrence of a result to your detriment through the analysis of your processed data exclusively by automated systems,

  • To request compensation for the damage arising from the unlawful processing of your personal data.

You may submit your requests regarding these rights;

  • To the e-mail address info@goldenrose.com.tr, using the e-mail address you have previously notified to us and which is registered in our systems,

  • By post, in writing to Cihangir Mahallesi Petrol Ofisi Caddesi No:1 Avcılar / İstanbul, or

  • Through the other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller

The Data Subject Application Form, prepared to facilitate your applications, is available on the Site. Your applications will be concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request; where the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.

9. AMENDMENTS TO THE POLICY

This Policy may be updated to reflect changes in the data processing activities on the Site or to ensure compliance with legislative amendments. The current version of the Policy will at all times be accessible on the Site.

Last Updated: September 2026