INFORMATION NOTICE REGARDING THE PROCESSING OF “CUSTOMER” PERSONAL DATA

Data Controller and Categories of Personal Data

Pursuant to the Personal Data Protection Law No. 6698 (“KVKK”); your personal data such as name, surname, phone number, address, email address, customer transaction information, payment information, request/complaint details, and transaction security data may be processed by ABB Import and Export Limited Company (Yoola Cosmetics), as the data controller, within the scope explained below.

Definitions

Personal Data:

Any information relating to an identified or identifiable natural person.

Data Controller:

The natural or legal person who determines the purposes and means of processing personal data.

Supplier:

The natural or legal person from whom goods or services are purchased.

Business Partner:

Economically and legally independent natural or legal persons from whom services are obtained within the scope of a contractual relationship for the execution of the Company’s activities.

Purposes of Processing Personal Data

Your collected personal data is processed for the following purposes:

  • Execution of goods and services sales processes
  • Management of order processes
  • Provision of after-sales support services
  • Execution of finance and accounting processes
  • Monitoring and handling of requests and complaints
  • Customer relationship management
  • Conducting activities aimed at customer satisfaction
  • Execution of contract processes
  • Conducting advertising, campaign, and promotion processes
  • Ensuring business continuity and operational processes
  • Audit, legal, and regulatory compliance processes
  • Execution and development of business activities
  • Management of security and transaction security processes

Transfer of Personal Data

Your personal data may be transferred to third parties in the following cases:

  • To suppliers and business partners for order delivery, payment transactions, and customer services,
  • To the Revenue Administration (Turkish Tax Authority) for invoicing processes,
  • To software, CRM, e-commerce infrastructure, and cloud system providers,
  • To authorized public institutions within the scope of the Company’s legal obligations,
  • To programs and digital systems used for business continuity purposes.

Your personal data may also be transferred to:

  • Server/cloud service providers located abroad,
  • Business partners residing abroad,

provided that your explicit consent is obtained or the data controller in the relevant foreign country undertakes adequate protection in writing and the approval of the Personal Data Protection Board is granted.

Source and Legal Grounds for Collecting Personal Data

Your personal data is collected through:

  • Information you provide electronically,
  • Membership/order information created on yoolacosmetics.com,
  • Documents submitted physically or digitally,
  • Transactions performed on payment screens,

by automated or partially automated methods.

Our processing activities are based on the following legal grounds set out in Article 5 of the KVKK:

  • Explicitly stipulated by law
  • Directly related to the establishment or performance of a contract
  • Necessary for the data controller to fulfill its legal obligations
  • Necessary for the establishment, exercise, or protection of a right
  • Necessary for the legitimate interests of the Company, provided that fundamental rights and freedoms are not harmed
  • Explicit consent, where required

Application Procedures and Principles

You may submit your requests regarding your rights under Article 11 of the KVKK:

👉 By using the “Data Subject Application Form” available at https://yoolacosmetics.com/,

through the following channels:

  • KEP: abbithalat@hs09.kep.tr
  • Email: info@yoolacosmetics.com (from the email address registered in our system)
  • Written application: ABB Import and Export Limited Company Bahçeşehir 1. Kısım Mah., Vali Recep Yazıcıoğlu Cad., Bahçeşehir Konakları, Villa F3, No: 64V, Başakşehir, Istanbul
  • Via notary public

Your applications will be concluded free of charge within a maximum of 30 days, depending on the nature of the request. However, if the process requires additional costs, a fee determined by the Personal Data Protection Board may be charged.