Personal Data Protection Notice

Data Controller

Personal Data We Process

• Identity: First name, last name
• Contact: Email address, phone number
• Professional: Company name, position
• Request content: Requested product, tonnage, message body
• Web cookies and traffic data: anonymized usage statistics via GA4 and Google Search Console

Processing Purposes

• Responding to your RFQ or information request
• Preparing quotes and presenting commercial offers
• Managing shipment, logistics and customs processes
• Invoicing, collection and accounting obligations
• Statutory retention duties and requests from official authorities
• Monitoring and improving website performance

Legal Basis

• KVKK Art. 5/2(c) / GDPR Art. 6(1)(b): Necessity for the conclusion or performance of a contract
• KVKK Art. 5/2(ç) / GDPR Art. 6(1)(c): Compliance with legal obligations of the data controller
• KVKK Art. 5/2(f) / GDPR Art. 6(1)(f): Legitimate interests of the data controller (B2B commercial communication)
• KVKK Art. 5/1 / GDPR Art. 6(1)(a): Explicit consent given via web form checkbox

Recipients of Your Data

• Banks — payment and foreign exchange transactions
• Customs broker — import and export processes (Hedef Gümrük Müşavirliği)
• Logistics partners — shipment and transportation management
• Accounting software — Paraşüt SaaS platform (cross-border server, GDPR-compliant)
• Legal authorities and official institutions — when required by applicable law
• Cross-border transfers occur only with explicit consent or under an adequacy decision

Your Rights

Under KVKK Article 11 and GDPR Articles 15–22, you have the following rights:

• Right to know whether your personal data is being processed
• Right to request information about the processing
• Right to learn the purpose and whether the data is used in accordance with this purpose
• Right to know third parties to whom data is transferred domestically or abroad
• Right to request correction of incomplete or incorrect data
• Right to request erasure or destruction within the conditions set by law
• Right to object to analysis carried out by automated systems
• Right to claim compensation for damages caused by unlawful processing

Retention Period

RFQ and quote data are retained for 10 years from the start of the commercial relationship (Turkish Commercial Code bookkeeping requirement). Web cookie data is retained for a maximum of 24 months. Data is deleted or anonymized at the end of the retention period.