PERSONAL DATA PROTECTION INFORMATION NOTICE
Data Controller: Bazaarica Kozmetik İç ve Dış Ticaret Limited Şirketi
Address: Parseller Mh. Yurtsever Cd. Sinpaş İstanbul Palace Sitesi No:4/1, 34771 Ümraniye – Istanbul
MERSIS No: 160176800200001
1. Introduction
As Bazaarica Kozmetik İç ve Dış Ticaret Limited Şirketi (hereinafter referred to as the “Company”), the privacy and security of your personal data are among our top priorities. Our Company processes your personal data in compliance with the provisions of the Law on the Protection of Personal Data No. 6698 (“KVKK”).
We would like to inform you about the processing of your personal data when you register as a member or shop as a guest user on the website www.childlovesmom.com and/or mobile applications owned by our Company (hereinafter referred to as the “Platform”) in order to benefit from the services offered on the Platform.
2. Which Personal Data Do We Process?
If you use the Platform’s services, the following personal data will be processed:
- Identity Information: Your name, surname.
- Contact Information: Your email address, phone number, and delivery address details.
- Customer Transaction Information: Your order and invoice details, transaction history, requests and complaints, platform usage data, and any information you share in product reviews or questions.
- Transaction Security Information: Your device information, IP address, password information, and cookie data.
- Legal Transaction Information: Correspondence with authorized persons, institutions, and organizations; information related to legal requests.
- Audio Record Information: If you contact our call center, the audio recording of your call.
3. Purposes and Legal Grounds for Processing Your Personal Data
Your personal data is collected electronically through the Platform or via channels such as our call center, based on the legal grounds set forth in Article 5 of KVKK.
3.1 Based on the legal ground of “explicitly stipulated in laws” (KVKK Art. 5/2-a):
- As the Member is a trader, pursuant to Art. 6/2 of the Law on the Regulation of Electronic Commerce No. 6563, commercial electronic messages (emails or SMS) may be sent without prior approval.
3.2 Based on the legal ground of “necessity for the performance of a contract” (KVKK Art. 5/2-c):
- Creating and verifying your membership account, matching it with your personal data.
- Responding to your requests, handling complaints, providing support, and ensuring customer satisfaction.
- Processing payments for purchases or sales, managing shipping between members, handling return requests.
- Enabling you to view and use your membership account and the Platform, allowing buying/selling activities, fulfilling intermediary service provider obligations.
- Notifying you about updates, changes, or developments related to your account or the Platform.
- Storing personal data on the Platform’s servers.
- Keeping and viewing financial records related to payments, sales, and invoices.
- Enabling you to reaccess past messages, purchases, invoices, and transaction records.
- Implementing essential Platform functions, keeping your login session active.
- Remembering your login details, past transactions, and preferences.
- Providing support through guidance for requested actions.
- Displaying viewed products in relevant sections to complete purchases.
3.3 Based on the legal ground of “compliance with legal obligations” (KVKK Art. 5/2-ç):
- Responding to official requests from law enforcement and authorities, sharing relevant information.
- Conducting transactions in compliance with applicable laws.
- Storing personal data for periods required by legislation.
- Ensuring the technical, legal, and commercial security of the Company and its stakeholders.
3.4 Based on the legal ground of “establishment, exercise, or protection of a right” (KVKK Art. 5/2-e):
- Retaining personal data for statutory limitation periods in case of disputes.
- Reviewing and using personal data for legal evaluations and processes.
3.5 Based on the legal ground of “legitimate interests” (KVKK Art. 5/2-f):
- Facilitating, customizing, and improving the use of the Platform and its services.
- Preventing, detecting, minimizing, and investigating fraud, security breaches, or unlawful activities.
- Monitoring transaction security by storing usage and payment data.
- Resolving complaints or disputes regarding the Platform, users, or products.
- Monitoring and reviewing the user’s financial transactions.
- Ensuring and improving Platform security.
Additional Processing Purposes:
Establishment of Membership and Order Processing (Performance of a Contract & Legal Obligations):
- Managing membership and creating profiles.
- Concluding distance sales contracts and processing orders.
- Delivering orders and managing logistics.
- Processing payments and invoices.
- Managing cancellation and return processes.
- Fulfilling legal obligations (e.g., under the Law on the Regulation of Electronic Commerce, Law on Consumer Protection).
Improving Service Quality and Customer Experience (Legitimate Interest):
- Handling requests, complaints, and suggestions to ensure satisfaction.
- Conducting analysis and reporting to improve service quality and user experience.
- Ensuring operational security and preventing fraudulent activities.
Marketing and Promotional Activities (Explicit Consent):
- With your explicit consent, sending commercial electronic messages (SMS, email, push notifications) for campaigns, promotions, and advertisements.
- You may withdraw your consent at any time via the communication channels listed below.
4. To Whom and For What Purposes Are Your Personal Data Transferred?
Your personal data may be shared with domestic and international recipients in accordance with applicable laws, on a “need-to-know” basis.
Domestic Transfers:
- Suppliers & Business Partners: Domestic cargo/courier companies for delivery, banks/payment institutions for payment processing.
- Authorized Public Institutions: Tax Offices, Courts, Ministries, or other authorities to fulfill legal obligations or upon request.
International Transfers:
Due to international sales and the use of global technology services, your data may be transferred abroad under KVKK Art. 9.
- Order Delivery: For international shipments, identity and contact details are shared with courier/logistics companies in the destination country (necessary for contract performance).
- IT Services: For website infrastructure, operations, and analytics, we work with foreign service providers (GoDaddy, Google Analytics, Hetzner, etc.), which means data may be transferred to their server locations (based on legitimate interest and cookie consent).
Our Company takes necessary technical and administrative measures to ensure the security of your data during international transfers.
5. Your Rights Regarding Your Personal Data (KVKK Art. 11)
You have the right to:
- Learn whether your personal data is processed,
- Request information if processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know third parties to whom it is transferred domestically or abroad,
- Request correction if incomplete or inaccurate,
- Request deletion or destruction under KVKK conditions,
- Object to outcomes against you,
- Request compensation if you suffer damage due to unlawful processing.
6. Contact for Rights and Requests
You can send your requests via the following methods, and your request will be concluded free of charge within 30 days:
Email: [email protected] (from your registered email)
WhatsApp Support Line: +90 539 494 34 00
In-Person Written Application: Parseller Mh. Yurtsever Cd. Sinpaş İstanbul Palace Sitesi No:4/1, 34771 Ümraniye – Istanbul