This policy defines the general principles, methods, and responsibilities applicable to all personal data processing activities carried out by KIRMIZIGÜL Kozmetik San. ve Tic. Ltd. Şti. (“Company”). The purpose is to ensure the confidentiality and security of personal data and to carry out data processing activities in compliance with legal regulations.

This policy covers the data of all real persons who are customers, employees, suppliers, business partners, website visitors, or who have any contact with the Company.

KIRMIZIGÜL Kozmetik complies with the following principles in the processing of personal data:

- Processing lawfully and in good faith

- Accuracy and up-to-dateness

- Processing for specific, explicit, and legitimate purposes

- Being relevant, limited, and proportionate to the purpose

- Retaining only for the necessary period

- Compliance with explicit consent and legal obligations

The Company takes appropriate technical and administrative measures to protect the confidentiality of personal data. These include access control systems, encryption, logging, regular backups, authorization restrictions, and employee awareness trainings.

In accordance with Articles 8 and 9 of the Personal Data Protection Law (KVKK), data may be shared with public institutions, business partners, and service providers only to the extent necessary. In case of international transfers, the required legal permissions are obtained.

All employees are obliged to keep the personal data they have access to confidential within the scope of their duties and to use it only for the relevant purpose.