Personal Data Protection Notice

The Cosmetics and Cleaning Products Manufacturers Association (KTSD) holds personal data belonging to our members. This notice explains what we do with it, why, and what you can ask us to do about it — as required by Turkish Law no. 6698 on the Protection of Personal Data (the "KVKK") and with due regard for the privacy of private life.

I. How we collect your data, and on what legal basis

Your personal data is whatever you send us — in writing, in conversation or electronically — during your membership application and afterwards, whether it concerns your company or the representatives and officers who act for it. We keep it in both physical and digital form.

We process and transfer it in line with the principles the KVKK sets out, within the conditions and purposes of Articles 5 and 6 of that law, for the purposes listed below, and with the natural and legal persons named in this notice.

II. Why we process it

We process your personal data in order to:

• activate your membership in accordance with the Associations Law and all other applicable legislation;
• carry out our work in pursuit of the association's objects;
• send you notices and formal communications about your membership and about the association;
• tell you about our services and activities;
• pass on changes in the legislation that affects you;
• let you know about association events;
• take copies and backups so that data is not lost;
• meet the legal obligations that the law requires or compels us to meet; and
• fulfil the other purposes set out in the KVKK.

III. Who we share it with, and why

Personal data collected under sections I and II above may be transferred — in line with the principles the KVKK sets out, within the conditions and purposes of Articles 8 and 9 of that law, and for the purposes described above — to members of the association and to their natural and/or legal person shareholders under the KTSD umbrella, and to public authorities and private persons legally entitled to receive it.

IV. Your rights under Article 11 of the KVKK

As the person the data belongs to, you have the right to:

• learn whether your personal data is being processed;
• ask for information about it if it is;
• learn the purpose of the processing and whether the data is used in keeping with that purpose;
• know the third parties in Türkiye or abroad to whom your data has been transferred;
• ask for your data to be corrected if it has been processed incompletely or incorrectly, and to ask that the correction be reported to the third parties it was transferred to;
• ask for your data to be erased or destroyed once the reasons for processing it no longer apply — even where it was processed lawfully — and to ask that this be reported to the third parties it was transferred to;
• object to a conclusion drawn against you by analysis carried out solely by automated systems;
• claim compensation if you suffer loss because your data was processed unlawfully.

V. How to exercise those rights

Write to us at info@ktsd.org.tr, or send a written request to Atatürk Caddesi, Dilkum 6 Sitesi No:57 Kat:1 D:11, Kadıköy / İstanbul. You may also deliver it in person or by registered post with return receipt.

VI. How long we keep it

In accordance with the KVKK, personal data processed for the purposes set out in this notice will be erased, destroyed or anonymised for further use once the purpose that required its processing has ceased under Article 7/1 of that law, and once any limitation periods that legally oblige us to keep it have expired.

VII. Data collected before the KVKK came into force

Personal data lawfully obtained through a membership relationship established before 7 April 2016 — the date the KVKK came into force — or obtained lawfully in any other way, is processed and kept in accordance with the terms of this notice and of the KVKK.

VIII. When KTSD may process your data without your explicit consent

Under Article 5 of the KVKK, KTSD may process the lawfully obtained personal data described above without seeking your explicit consent where:

• the law expressly provides for it;
• it is necessary to protect the life or physical integrity of yourself or another person, and you are unable to give consent because of actual impossibility, or your consent is not legally valid;
• it is directly necessary for entering into or performing a contract to which you are a party, whether with KTSD and its related companies or organisations or with the other natural and/or legal persons named in section III;
• it is compulsory for KTSD to meet a legal obligation;
• you have yourself made the data public;
• processing is necessary for the establishment, exercise or protection of a right;
• processing is necessary for KTSD's legitimate interests, provided it does not harm your fundamental rights and freedoms.