KVKK Disclosure Statement

1. Data Controller

Within the scope of the Personal Data Protection Law No. 6698, your personal data is processed by Bossforskiy Kozmetik Sanayi Ticaret Limited Şirketi as the data controller.

Company Title: Bossforskiy Kozmetik Sanayi Ticaret Limited Şirketi
Tax Office: Beyoğlu Tax Office
Tax No: 1801087276
Mersis No: 0180108727600001
Address: İnönü Mah. Cebel Topu Sk. No: 15 A Şişli / İstanbul
Phone: +90 212 296 00 51
Email: info@bossforskiy.com
Working Hours: 09:00 – 17:00

At Bossforskiy, we prioritize the privacy, security, and lawful protection of your personal data. This clarification text is prepared to explain for what purposes the personal data of individuals who visit our website, create memberships, place orders, fill out contact forms, contact our customer support channels, or benefit from our services are processed.

2. Processed Personal Data

The following personal data may be processed by Bossforskiy:

Identity Information: Name, surname, billing information, order owner information
Contact Information: Phone number, email address, delivery address, billing address
Customer Transaction Information: Order number, products purchased, shopping history, return and cancellation requests, shipping and delivery information
Financial Information: Payment method, payment status, invoice and collection information
Transaction Security Information: IP address, cookie records, site usage movements, login-logout information
Marketing Information: Campaign preferences, email subscription, opted-in communication preferences, product interests
Request and Complaint Information: Customer support requests, contact form messages, product and order related notifications
Technical Data: Device information, browser information, session information, site performance and analytics data

During payment transactions, your card information may be processed directly by payment service providers. Bossforskiy does not store sensitive payment information such as full card numbers or card security codes in its own systems.

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

Receiving, preparing, and delivering product orders
Managing sales, payment, invoicing, and accounting processes
Managing shipping, delivery, return, and cancellation processes
Responding to customer support requests
Providing information about products and services
Managing website membership and user account processes
Implementing distance sales contracts, pre-information forms, and legal texts
Conducting campaign, discount, announcement, and marketing activities
Sending commercial electronic messages if explicit consent is given
Improving website experience
Analyzing site performance, visitor behavior, and technical security
Preventing fraud, misuse, and unauthorized transactions
Fulfilling legal obligations
Responding to requests from authorized public institutions and organizations
Establishing evidence in potential disputes and conducting legal processes

4. Legal Grounds for Processing Personal Data

Your personal data is processed within the scope of the legal grounds specified in Articles 5 and 6 of Law No. 6698. In this context, your personal data may be processed based on the following legal grounds:

Explicitly stipulated in laws
Directly related to the establishment or performance of a contract
Necessary for the data controller to fulfill its legal obligation
Necessary for the establishment, exercise, or protection of a right
Necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
Having your explicit consent

Commercial electronic messages, marketing communications, campaign notifications, and some cookie uses may be carried out with your explicit consent.

5. Methods of Collecting Personal Data

Your personal data may be collected through the following methods:

Orders placed through the website
Membership and account creation forms
Contact forms
Email, phone, and customer support channels
Shipping, delivery, and return processes
Payment and invoicing systems
Cookies and similar technologies
Communications made through social media accounts
Campaign, subscription, and opt-in marketing forms
Notifications from authorized institutions and organizations

Your data may be processed by automatic or non-automatic methods, in electronic or physical environments.

6. Transfer of Personal Data

Your personal data may be shared with the following individuals, institutions, and organizations, limited to the purposes stated above:

Shipping and logistics companies
Payment service providers and banks
E-invoice, e-archive, and accounting service providers
Shopify and e-commerce infrastructure service providers
Server, software, security, and technical support service providers
Email, SMS, and marketing service providers
Individuals or institutions from whom legal, financial advisory, and consultancy services are received
Authorized public institutions and organizations
Official authorities where legal obligations must be fulfilled

Your personal data is transferred with security measures in accordance with KVKK and only to the extent necessary.

7. Transfer Abroad

Within the scope of the e-commerce infrastructure, cloud services, analytics tools, payment, or marketing technologies used on our website, some of your personal data may be processed or stored in the systems of service providers located abroad.

Such transfers may be carried out in accordance with the conditions stipulated in KVKK; within the scope of explicit consent, contractual necessity, appropriate safeguards, or legal grounds specified in the relevant legislation.

8. Retention Period of Personal Data

Your personal data is retained for the period required by the processing purpose and within the legal retention periods stipulated in the relevant legislation.

Upon the expiration of the retention period or the disappearance of the processing purpose, your personal data is deleted, destroyed, or anonymized in accordance with the relevant legislation.

9. Security of Personal Data

Bossforskiy takes care to implement the necessary technical and administrative measures to protect your personal data against unauthorized access, loss, misuse, alteration, or unlawful processing.

In this context, processes are carried out in accordance with access authorizations, secure infrastructure use, data minimization, monitoring of retention periods, and privacy principles.

10. Cookies and Similar Technologies

On our website, cookies and similar technologies may be used to improve user experience, analyze site performance, ensure security, and carry out marketing activities.

Mandatory cookies are necessary for the website to function. Performance, analytics, advertising, and marketing cookies may be used depending on your preferences and, where necessary, with your explicit consent.

For detailed information about cookie usage, please review our Cookie Policy page.

11. Rights of the Data Subject

Within the scope of Article 11 of Law No. 6698, everyone whose personal data is processed has certain rights by applying to the data controller. These rights include learning whether personal data is processed, requesting information if processed, learning the purpose of processing, knowing the third parties to whom it is transferred, requesting correction if incomplete or incorrectly processed, requesting its deletion or destruction, and requesting compensation if damage is incurred.

In this context, you have the following rights:

To learn whether your personal data is processed
To request information if your personal data has been processed
To learn the purpose of processing your personal data and whether it is used in accordance with its purpose
To know the third parties to whom your personal data has been transferred domestically or abroad
To request the correction of your incomplete or incorrectly processed personal data
To request the deletion or destruction of your personal data
To request that the correction, deletion, or destruction operations be notified to third parties to whom your personal data has been transferred
To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems
To demand compensation for damages in case you suffer damage due to unlawful processing of your personal data

12. Application Method

To exercise your rights under KVKK, you can submit your requests to Bossforskiy in writing or through other methods specified in the legislation.

You can submit your applications via the following contact channel:

Email: info@bossforskiy.com
Phone: +90 212 296 00 51
Address: İnönü Mah. Cebel Topu Sk. No: 15 A Şişli / İstanbul

Your application must include your name, surname, contact information, the subject of your request, and the necessary information to verify your identity. Bossforskiy will conclude applications as soon as possible and within legal deadlines, depending on their nature.

13. Right to Update

Bossforskiy reserves the right to update this KVKK Clarification Text in line with changes in legislation, technical requirements, service processes, or changes that may occur in data processing activities.

The updated text becomes effective from the date it is published on the website.

14. Contact

You can contact us regarding the processing and protection of your personal data or your rights under KVKK.

Bossforskiy Kozmetik Sanayi Ticaret Limited Şirketi
Email: info@bossforskiy.com
Phone: +90 212 296 00 51
Working Hours: 09:00 – 17:00

Last Updated Date: May 21, 2026