As Kopaş Kozmetik Pazarlama ve Sanayi A.Ş. (“Kopaş” or the “Company”), we take care to process the personal data of everyone who visits the Sesu website (the “Site”) and uses its forms in line with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and related legislation. This notice, prepared under Article 10 of the KVKK, explains which personal data we process, for which purposes and on which legal grounds.
1. Data controller
Your personal data is processed by Kopaş Kozmetik Pazarlama ve Sanayi A.Ş. as the data controller.
- Address: to be provided by Kopaş
- MERSIS number: to be provided by Kopaş
- Registered e-mail (KEP): to be provided by Kopaş
- E-mail: to be provided by Kopaş
2. Personal data we process
Depending on how you use the Site, the following personal data may be processed:
- Contact form: name and surname, e-mail address, phone number (optional), the subject and content of your message, language preference, date of submission and your notice/consent record.
- “Notify me” list: e-mail address, the topic you’re interested in (e.g. a new product or category), language preference, sign-up date and consent record.
- Security data: an irreversibly hashed value of your IP address and server logs, used to prevent abuse of the forms.
- Cookie data: data collected through cookies, depending on your preferences. See the Cookie Policy for details.
The Site does not ask for special categories of personal data (e.g. health data). Please do not share such information in your messages.
3. Purposes of processing
- Receiving, reviewing and answering the questions, suggestions, requests and complaints you send through the contact form,
- Sending you announcements about new products and categories (“notify me”) if you ask us to,
- Keeping the Site secure and preventing abuse of the forms and unauthorised access,
- Analysing how the Site is used and measuring the impact of our communication activities, if you consent,
- Fulfilling legal obligations and providing information to authorised institutions.
4. Collection method and legal grounds
Your personal data is collected electronically, partly by automated means, through the forms and cookies on the Site, and processed on the following legal grounds under Article 5 of the KVKK:
- To answer your contact requests and keep the Site secure: processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5/2-f),
- For legal obligations: processing is necessary for the data controller to fulfil its legal obligations (Art. 5/2-ç),
- For potential disputes: processing is necessary to establish, exercise or protect a right (Art. 5/2-e),
- For “notify me” announcements and analytics and marketing cookies: your explicit consent (Art. 5/1). Sending commercial electronic messages is additionally based on your approval under Law No. 6563 on the Regulation of Electronic Commerce.
5. Transfers of personal data
Limited to the purposes above and in line with Articles 8 and 9 of the KVKK, your personal data may be transferred to the suppliers that provide the Site’s hosting, e-mail delivery and technical infrastructure services, to our business partners and, upon request, to authorised public institutions. The servers of the analytics and marketing tools used with your consent (e.g. Google, Meta) may be located abroad; transfers to these tools are carried out in accordance with the conditions set out in Article 9 of the KVKK.
6. Retention period
Your personal data is kept for as long as the purpose of processing requires and for the periods set out in the relevant legislation, and is then deleted, destroyed or anonymised. You can leave the “notify me” list at any time.
Detailed retention periods: to be set by Kopaş
7. Your rights under Article 11 of the KVKK
Under Article 11 of the KVKK, by applying to the data controller you have the right to:
- learn whether your personal data is processed,
- request information about the processing if it has been processed,
- learn the purpose of processing and whether the data is used in line with that purpose,
- know the third parties in Turkey or abroad to whom your personal data is transferred,
- request correction if your personal data is incomplete or inaccurate,
- request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
- request that corrections, deletions and destructions be notified to the third parties your data was transferred to,
- object to a result against you arising from the analysis of your data exclusively through automated systems,
- claim compensation if you suffer damage due to unlawful processing of your personal data.
8. How to apply
In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your requests in writing with a wet signature to the address to be provided by Kopaş, from your registered e-mail (KEP) address to the KEP address to be provided by Kopaş, or from an e-mail address you have previously shared with us and that is registered in our system to the e-mail address to be provided by Kopaş.
Your request will be concluded free of charge as soon as possible and within thirty days at the latest, depending on its nature. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
9. Changes
This notice may be updated in line with changes in legislation and in our processing activities. The current version is always published on this page.