Privacy Notice (KVKK)

Last updated: 23 October 2026

Privacy Notice under the Personal Data Protection Law (KVKK)

Pursuant to Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, we inform you about how personal data you share through our website is processed.

1. Data controller

Your personal data is processed by ARK İLAÇ VE KOZMETİK ÜRÜNLER SAN. TİC. LTD. ŞTİ. (“ARK İlaç ve Kozmetik”) as the data controller.

Antalya address: Ilıca Mh. Sanayi Sitesi 132. Sokak A Blok No:4-5 Manavgat / Antalya. Istanbul contact address: Şirinevler Mah. Mahmutbey Cad. Meriç Sk. Ünal İş Merkezi No:13 D:4 Bahçelievler / İstanbul. Email: info@arkilac.com. Phone: +90 532 260 36 59 / 0 850 888 02 68.

2. Personal data processed

When you complete request, quote or contact forms, or contact us by email, phone or WhatsApp, the following data may be processed:

• Identity: first and last name,
• Contact: email address, phone number,
• Customer / company: company or brand name,
• Request: product group, estimated quantity, target market, packaging preference, formulation status and any other information in your project description,
• Transaction security: server access logs (IP address, date/time, browser information),
• Marketing permission: your optional commercial electronic message preference.

3. Purposes of processing

Your personal data is processed for the following purposes:

• Receiving, evaluating and responding to your requests and quotes,
• Conducting product development, formulation and manufacturing discussions,
• Evaluating sample requests,
• Managing customer relations and keeping communication records,
• Ensuring the security of the website and preventing misuse,
• Fulfilling legal obligations and protecting rights in possible disputes,
• Sending promotional and informational messages about our products and services if you have given explicit consent.

4. Legal grounds

Your data is processed on the following grounds in Article 5(2) of the Law: (c) provided it is directly related to the conclusion or performance of a contract, conducting the preliminary discussion and quoting process upon your request, (ç) it is mandatory for the controller to fulfil a legal obligation, and (f) it is mandatory for the legitimate interests of the controller, provided your fundamental rights and freedoms are not harmed. Marketing messages rely solely on the separate, optional explicit consent you give; the evaluation of your requests is not affected if you do not give it.

5. Method of collection

Your personal data is collected electronically or verbally, by automated and non-automated means, through website forms, email, phone calls and WhatsApp messaging.

6. Transfers

Within the purposes above and to the extent necessary, your data may be transferred to service providers supplying hosting, email and form-processing infrastructure, to business partners where mandatory for handling the request, and to authorized public bodies where the legislation allows.

If our service providers’ servers are located abroad, the transfer is made in line with the conditions in Article 9 of the Law. The map on the contact page loads from Google when the page opens; the Google Analytics measurement tool loads only with your cookie consent and aggregate usage data is transferred to Google; the WhatsApp link connects to WhatsApp/Meta only when you click it. These services are subject to the relevant party’s own privacy terms.

7. Retention

Your data is kept for as long as the purpose of processing requires and for the retention and limitation periods set out in the relevant legislation. At the end of these periods it is deleted, destroyed or anonymized in accordance with the Regulation on Deletion, Destruction or Anonymization of Personal Data. Data based on marketing permission is kept until you withdraw it.

8. Your rights under Article 11 of the Law

As a data subject you have the following rights:

• To learn whether your personal data is processed,
• To request information if it has been processed,
• To learn the purpose of processing and whether it is used accordingly,
• To know the third parties to whom data is transferred in Türkiye or abroad,
• To request correction if data is incomplete or inaccurate,
• To request deletion or destruction under Article 7 of the Law,
• To request that correction, deletion and destruction be notified to the third parties to whom data was transferred,
• To object to a result against you arising from analysis of the processed data exclusively by automated systems,
• To claim compensation if you suffer damage due to unlawful processing.

9. How to apply

You may submit your requests about these rights in writing to our Antalya address, stating information that identifies you and your request clearly, or by email to info@arkilac.com. Your application is concluded free of charge as soon as possible according to the nature of the request and within thirty days at the latest; if the process requires a separate cost, a fee in the tariff set by the Personal Data Protection Board may be charged.

10. Complaint to the Personal Data Protection Board

If your application is rejected, you find the response insufficient or no response is given in time, your right to file a complaint with the Personal Data Protection Board within thirty days of learning the response, and in any case within sixty days of the application date, is reserved.

11. Updates

This notice may be updated according to changes in legislation or in our activities. The current version is published on this page.