Privacy and Data Security
Policy

Nesil İlaç Kozmetik Ltd. Şti. (hereinafter referred to as the "Company") considers the privacy and security of the personal data of users ("Visitors") who visit the https://nesililac.com website as one of its most important priorities.

This Privacy Policy has been prepared in full compliance with the Law No. 6698 on the Protection of Personal Data ("KVKK"), the European General Data Protection Regulation ("GDPR") and relevant legislation, in order to transparently explain the purposes for which your personal data is collected, how it is processed, with whom it is shared and your rights.

1. YOUR PERSONAL DATA COLLECTED

Our company may collect the following data categories during your use of our website:

• Identity Information: Name, surname, Turkish Republic Identity Number (if legally required).
• Contact Information: Email address, phone number, full address.
• Transaction Security Information: IP address, port information, website login and logout information, password and login credentials.
• Marketing Information: Shopping history, cookie records, campaign usage information.
• Request/Complaint Management Information: Messages and requests you submit through our website.

2. PURPOSES OF PROCESSING PERSONAL DATA

Your collected personal data is processed for the following purposes:

• Fulfillment of obligations arising from legislation (e.g., maintaining log records as required by Law No. 5651).
• Managing the sales processes for goods/services and handling invoicing procedures.
• Conducting activities aimed at improving customer satisfaction.
• Tracking and resolving requests and complaints.
• Authorized persons, institutions, and organizations should be informed.
• Implementing information security processes.

3. TRANSFER OF PERSONAL DATA

Your personal data may be transferred to authorized public institutions and organizations (e.g., courts, BTK) for the purpose of fulfilling legal obligations and to our business partners (e.g., shipping companies, payment infrastructure providers) for the purpose of conducting our commercial activities, within the framework of the conditions specified in Articles 8 and 9 of the KVKK (Law on Protection of Personal Data).

4. DATA SUBJECT'S RIGHTS (KVKK ARTICLE 11)

Under the Turkish Personal Data Protection Law (KVKK), as a data subject, you have the following rights:

• To find out whether your personal data is being processed,
• You have the right to request information regarding the processing of your personal data.
• To learn the purpose of processing personal data and whether it is being used appropriately for that purpose.
• Knowing the third parties to whom personal data is transferred, whether domestically or internationally.
• Requesting the correction of personal data if it has been processed incompletely or inaccurately.
• Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK (Law on Protection of Personal Data).
• You have the right to object to an outcome that is unfavorable to you, resulting solely from the analysis of processed data by automated systems.
• You have the right to claim compensation for damages you have suffered as a result of the unlawful processing of your personal data.

5. DATA SECURITY MEASURES

Our company takes all necessary technical and administrative measures to ensure the security of your personal data. Our site is protected by an SSL (Secure Socket Layer) certificate, and your data is stored encrypted to prevent unauthorized access.

6. COOKIE USAGE

Our website uses cookies to improve user experience and analyze site traffic. A privacy policy has been created using the Turksem.com privacy policy generator tool. You can block cookies at any time through your browser settings.

7. COMMUNICATION AND APPLICATION

To exercise your rights mentioned above or to have questions regarding our privacy policy, you can contact us through the following channels.