Privacy Policy

a) Data Controller

Hair and Travels Inc.(“COMPANY”) with data controller status, in compliance with the new European General Data Protection Regulation (“GDPR”), which came into force on 25 May 2018, and the Personal Data Protection Law (“KVKK”), which entered into force on 24 March 2016. It undertakes to process the data as a company and pay the utmost attention to the security and protection of your data. In case of conflict between these two legislations, legal regulation favor of data subject will be applied priority.

b) Purposes of The Processing of Personal Data and Lawful Basis for Processing

Our customers' identity, communication, finance, and customer transaction data are processed within the scope of the following purposes and legal reasons.

Purpose Of Data Processing	Legal Reasons
Execution of Activities in Compliance with the Legislation Informing the Authorized Persons, Institutions and Organizations	KVKK 5 (2) a: It is clearly provided for by the laws.
Conduct of Finance and Accounting Affairs Execution of Goods / Services Sales Processes Execution of Goods / Services After-Sales Support Services Execution of Contract Processes	KVKK 5 (2) c: Processing of personal data belonging to the parties of a contract, is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
Execution of Activities in Compliance with the Legislation Informing the Authorized Persons, Institutions and Organizations	KVKK 5 (2) ç: It is mandatory for the controller to be able to perform his legal obligations.

c) Method Of Collecting Personal Data and Its Legal Reason

Your data will be obtained electronically, with the methods specified below, based on the legal reasons in Articles 5 (2) of the KVKK, to fulfill the purposes specified in paragraph (b) of this text:

By placing an order by the customers through the address hairandtravels.com, sending personal data by the customer via e-mail after the order and during order; At the same time, personal data is accessed through the platform that provides payment infrastructure services with which we are contracted.

d) To Whom and For What Purpose the Processed Personal Data May Be Transferred

Your data processed by our company will be transferred to authorized persons and institutions in the accounting process and custom procedure to fulfill legal obligations.

e) What Is Your Data Protection Rights?

We declare that you have the following rights:

Right to Be Informed: You have the right to request all kinds of information regarding your data processed by us.
Right to Rectification: If your data is inaccurate or incomplete, you have the right to request correction of inaccurate personal data and/or completion of incomplete personal data.
Right to Restrict Processing: If legal requirements are fulfilled you can request the restriction of the processing of your data.
Right to Erasure (Right to be Forgotten): You can request the deletion of your data at any time unless we are legally required or have the right to further process your data.
Right to Data Portability: You have the right to receive the personal data you have provided to the company in a structured, commonly used, and machine-readable format and transfer it to another data controller.
The Right to Object to Processing: You have the right to object to the processing of your data for direct marketing or profiling purposes. You can object to the transaction based on the evaluation of interests by stating the reasons arising from your special situation.
Right to Withdraw Explicit Consent: You have the right to withdraw your express consent for transfer abroad at any time. The withdrawal of consent has no effect on the legality of the processing based on your prior consent.
Right to Complaint and Claim for Reparation of Damage: You can make a complaint to the relevant Institutions regarding the processing of your data, and at the same time, You have the right to claim compensation for the damage arising from the unlawful processing of his/her data.

f) Exercise of the Data Subjects’ Rights:

You can communicate Rights of the Data Subjects to our Company by the following methods:

By coming to our Company in person at Istanbul
To identify your identity and not to give information to the wrong people, in writing, through a notary public or registered letter with return receipt,
By sending an e-mail to [email protected] from e-mail address notified to our Company and registered in our systems, with qualified electronic signature, or mobile signature (if any) of the Data Subjects.

a) Data Controller

b) Purposes of The Processing of Personal Data and Lawful Basis for Processing

c) Method Of Collecting Personal Data and Its Legal Reason

d) To Whom and For What Purpose the Processed Personal Data May Be Transferred

e) What Is Your Data Protection Rights?

Right to Be Informed: You have the right to request all kinds of information regarding your data processed by us.

Right to Rectification: If your data is inaccurate or incomplete, you have the right to request correction of inaccurate personal data and/or completion of incomplete personal data.

Right to Restrict Processing: If legal requirements are fulfilled you can request the restriction of the processing of your data.

Right to Erasure (Right to be Forgotten): You can request the deletion of your data at any time unless we are legally required or have the right to further process your data.

Right to Data Portability: You have the right to receive the personal data you have provided to the company in a structured, commonly used, and machine-readable format and transfer it to another data controller.

The Right to Object to Processing: You have the right to object to the processing of your data for direct marketing or profiling purposes. You can object to the transaction based on the evaluation of interests by stating the reasons arising from your special situation.

Right to Withdraw Explicit Consent: You have the right to withdraw your express consent for transfer abroad at any time. The withdrawal of consent has no effect on the legality of the processing based on your prior consent.

Right to Complaint and Claim for Reparation of Damage: You can make a complaint to the relevant Institutions regarding the processing of your data, and at the same time, You have the right to claim compensation for the damage arising from the unlawful processing of his/her data.

f) Exercise of the Data Subjects’ Rights: