This page explains which data we process through yars.com.tr and your YARS account, why and for how long; who we share it with; and how to exercise your rights.
Yars İç ve Dış Ticaret Ltd. Şti. (“YARS”), located at Kuruçeşme Mah. Ahmet Adnan Saygun Cad. No: 69A, Beşiktaş / İstanbul, Türkiye, is the Turkish distributor of luxury and selective beauty brands. This policy applies to the website www.yars.com.tr (the “Site”) and to the My Account, Skin Analysis and contact services offered through it. The privacy notice for the YARS Mobile staff application is on a separate page.
Brand and store pages may link to third-party websites (the brands’ global sites, retailers, our social media accounts). Their privacy practices are governed by their own policies; YARS is not responsible for their content. All intellectual and industrial property rights in the Site’s texts, images and brands belong to YARS or the respective brand owners.
This policy and the notices below are updated when needed; the current version is published on this page with its effective date.
This notice is issued by YARS as data controller under Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
Company: Yars İç ve Dış Ticaret Ltd. Şti.
Address: Kuruçeşme Mah. Ahmet Adnan Saygun Cad. No: 69A, Beşiktaş / İstanbul, Türkiye
E-mail: info@yars.com.tr
Phone: +90 850 220 66 62
Depending on how you use the Site, your data falls into the groups below and is processed only for the stated purposes. You may belong to more than one group.
| Who / process | Data processed | Purpose and legal basis |
|---|---|---|
| Site visitor | IP address, browser and device type, requested page, date and time (technical server logs of the hosting provider) | Operating, securing and debugging the Site — Art. 5/2-f (legitimate interest). Logs are not used to identify individuals and are deleted automatically after a short period. |
| Contact form | Name, e-mail, company, website, area of interest (brand / retailer / agency / creator), message | Answering your request and conducting partnership discussions — Art. 5/2-c (pre-contractual request) and 5/2-f. The message is e-mailed to the YARS team and kept as a request record. |
| My Account (membership) | E-mail, password (hash), name, phone; optionally date of birth, gender, city, preferred retail location, language; address book (delivery/billing address) | Creating your account, authenticating you and providing personalised content and services — Art. 5/2-c (establishing and performing the membership contract). No national ID number is requested. |
| Skin analysis | Your questionnaire answers (oil balance, sensitivity, tone, line tendency, goals), the computed skin profile and the suggested routine | Generating cosmetic product suggestions. Without an account, answers stay in your browser only and are not sent to a server. If you choose to save the analysis to your account, it is stored on the basis of the explicit consent you give at sign-up (Art. 5/1); it is not a medical diagnosis. |
| Appointment / sample request | Preferred retail location, city, phone, requested products, your note, appointment time, request status | Scheduling and completing your request with the relevant retail location — Art. 5/2-c. The request is shared with the authorised advisor at the location you chose. |
| Store advisor records | Purchase record, products in use and notes added to your account by the advisor who assisted you in store | Following your skincare routine and serving you better on later visits — Art. 5/2-c and 5/2-f. You can hide advisor notes from your account. |
| Commercial electronic messages | E-mail address and/or phone number, date of consent | Informing you about campaigns and news — under Law No. 6563 and the related Regulation, only with your consent; consent is registered with the Turkish Message Management System (İYS) and can be withdrawn at any time. |
Data is collected electronically, by automatic and partly automatic means: when you fill in forms on the Site, open and use an account, save a skin analysis to your account, when an advisor at one of our retail locations creates a record for you, and through server logs during your visit.
Your data is not sold. It is transferred only to the recipient groups below, limited to the purpose and in line with Articles 8 and 9 of the Law:
When a period ends, data is deleted, destroyed or anonymised.
The cases listed in Article 28 of the Law (anonymised statistics, national security, judicial proceedings, etc.) fall outside the Law; in the cases under Article 28/2, rights other than compensation cannot be asserted.
You may submit requests concerning your rights, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller and with information verifying your identity:
Account holders can download their data, change communication preferences and delete their account directly from My Account, without a formal request.
Requests are concluded free of charge within 30 days at the latest; where the process entails a separate cost, the fee in the Board’s tariff may be charged. If a request is refused, the answer is found insufficient or no answer is given in time, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of the request.
Cookies and similar technologies (localStorage, sessionStorage) are small pieces of data a website stores in your browser. The Site uses only records that are strictly necessary for the service to work; no advertising, targeting or third-party analytics cookies are used. For this reason the Site does not display a cookie consent banner.
| Record | Purpose | Duration |
|---|---|---|
Account session (localStorage, sb-…-auth-token) | Keeping you signed in to My Account and showing the signed-in mark in the navigation. Created only when you open an account and sign in. | Until you sign out; the token is refreshed periodically. |
| Skin analysis session (sessionStorage) | Keeping your answers between pages in the account-free analysis and letting you return to the result page. Not sent to a server. | Deleted when the browser tab is closed. |
| Hosting technical cookies (Vercel) | Short-lived technical records the hosting infrastructure requires for content delivery and security. | Session / short-lived. |
The Instagram feed on the home page is served through YARS’s own server; Instagram places no cookies in your browser. Fonts are loaded from Google Fonts; that request transmits your IP address to Google but creates no cookie. When you click the social media links on the Site, the respective platform’s own cookie policy applies.
You can view, delete or block site data in your browser settings (Safari: Settings › Safari › Advanced › Website Data; Chrome: Settings › Privacy and security › Site data). If you block the account session record, you will not stay signed in to My Account. You can also clear the session with “Sign out on this device” in My Account.