Privacy notice
Information notice under the Personal Data Protection Law (KVKK)
This is an English courtesy translation of our Turkish aydınlatma metni, prepared under Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK"). In case of any difference, the Turkish text prevails.
1. Data controller
Your personal data is processed by Erguvan Kraft (the "Company") as data controller.
Address: Yeni Mahalle, Hekimsuyu Cd. No:39, 34250 Gaziosmanpaşa / İstanbul, Türkiye
Email: info@erguvankraft.com.tr
2. Personal data processed
- Identity: name, surname, title.
- Contact: email address, telephone number, company address.
- Customer transaction: the company you represent, the content of enquiries and offers, orders, contracts, shipment details and correspondence.
- Finance: invoicing and payment details (only once a contract exists).
- Transaction security: the IP address, date-time and browser information of a web-form submission.
3. Purposes
Responding to your quote request and conducting pre-contract discussions; concluding and performing sales and purchase contracts; order, shipment, customs and documentation processes; invoicing and collection; accounting and finance; compliance with legal obligations; maintaining the business relationship and communication; information security.
4. Legal bases and method of collection
Processing relies on Article 5(2) of KVKK: (c) processing necessary for the conclusion or performance of a contract to which you are party; (ç) compliance with a legal obligation of the controller; (e) processing necessary for the establishment, exercise or protection of a right; and (f) the legitimate interests of the controller, provided your fundamental rights and freedoms are not harmed. Your explicit consent is not required for these purposes; marketing communications are sent only with separate explicit consent.
Data is collected through the quote form on this website, email, telephone and meetings, by partly automated (web form) and non-automated means. The website does not use advertising or analytics cookies.
5. Transfers
Limited to the purposes above, your data may be transferred, in accordance with Article 8 of KVKK, to the producer, supplier or buyer on the other side of the transaction you have enquired about; to freight, inspection and customs-brokerage providers; to banks; to our accountants and legal advisers; and to authorised public bodies.
Hosting and form infrastructure for this website is provided by Cloudflare, Inc., established abroad. Transfers abroad in this context are made subject to the conditions and safeguards set out in Article 9 of KVKK.
6. Retention
Data is kept for the duration of the business relationship and thereafter for the limitation and retention periods required by the Turkish Commercial Code, the Tax Procedure Law and related legislation (ten years for commercial books and records), after which it is deleted, destroyed or anonymised. Enquiries that do not lead to a contract are deleted after two years at the latest.
7. Your rights under Article 11 of KVKK
You have the right to learn whether your personal data is processed; to request information if it has been; to learn the purpose of processing and whether data is used accordingly; to know the third parties to whom data is transferred in Türkiye or abroad; to request correction of incomplete or inaccurate data; to request deletion or destruction under the conditions of Article 7; to request that corrections, deletions and destructions be notified to third-party recipients; to object to a result against you produced exclusively by automated analysis; and to claim compensation for damage caused by unlawful processing.
8. Applications
Requests may be submitted in writing, with proof of identity, by registered post to the address above or by email to info@erguvankraft.com.tr, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are concluded free of charge within 30 days at the latest; where the process entails a cost, the fee set by the Personal Data Protection Board may be charged.
Last updated: September 2026. The controller's registered trade name and registry details also appear on our offers and contract documents.