Privacy Policy

This policy explains in plain lan­guage how per­sonal data is pro­cessed on the TÜRKSOY GROUP web­site (the “Web­site”). Detailed inform­a­tion under Turk­ish law is provided in the KVKK Inform­a­tion Notice.

1. Data controller

trade name, Bahçeşe­hir Mah. Susam Sok. No: 10, 66100 Merkez/Yozgat, Türki­ye, MERSİS No: MERSİS number. Con­tact: info@group­turk­soy.com.

2. In brief

• The Web­site uses no ana­lyt­ics, advert­ising or social media track­ing tools.
• The Web­site sets no cook­ies and stores no data in your browser.
• All con­tent, includ­ing fonts, is loaded from the Web­site’s own server; no requests are sent to third-party serv­ers during your visit.
• What you send with the mes­sage form on the con­tact page is for­war­ded to us as an e-mail via our server; the Web­site does not store it.

3. What data do we process?

3.1 When you visit the Website

As with any web­site, your browser sends tech­nical inform­a­tion to the server. The host­ing infra­struc­ture may keep this inform­a­tion in server logs:

• IP address,
• date and time,
• the page or file reques­ted and the response status,
• browser and oper­at­ing system inform­a­tion (user agent),
• the refer­ring page (re­fer­rer).

Pur­pose: Secure and unin­ter­rup­ted oper­a­tion of the Web­site, troubleshoot­ing, and detect­ing and pre­vent­ing attacks. Legal basis: KVKK Art. 5(2)(f) (le­git­im­ate interest); KVKK Art. 5(2)(ç) where there is a stat­utory reten­tion oblig­a­tion. Reten­tion: log reten­tion period of the host­ing pro­vider.

3.2 When you contact us through the message form, by e-mail, telephone or fax

In this case, your name, your con­tact details (e-mail address, tele­phone or fax number), your com­pany name if any, and the con­tent of your mes­sage are pro­cessed.

Pur­pose: To answer your mes­sage and follow up your request. Legal basis: KVKK Art. 5(2)(c) where your request con­cerns the con­clu­sion of a con­tract; oth­er­wise KVKK Art. 5(2)(f) (le­git­im­ate interest). This pro­cessing does not rely on expli­cit con­sent. Reten­tion: reten­tion period for enquir­ies (pro­pos­al: at most 12 months after the request is con­cluded, or for the lim­it­a­tion period in the event of a legal dis­pute).

E-mails are stored with the cor­por­ate e-mail ser­vice pro­vider used by the Com­pany; they are not kept on the Web­site’s server.

4. Recipients of data

• Host­ing pro­vider: pro­vider name and server loc­a­tion,
• Cor­por­ate e-mail ser­vice pro­vider: pro­vider name and server loc­a­tion,
• Leg­ally author­ised public author­it­ies, only where there is a legal request or oblig­a­tion.

Per­sonal data is not sold and is not shared for advert­ising pur­poses.

5. Transfers abroad

If the serv­ers of the host­ing or e-mail pro­vider are loc­ated out­side Türki­ye, per­sonal data is trans­ferred abroad. In that case, the trans­fer is based on one of the safe­guards provided for in KVKK Art. 9 (for example, an adequacy decision or stand­ard con­trac­tual clauses noti­fied to the Board). Cur­rent status: loc­a­tion of the pro­viders and the trans­fer mech­an­ism used.

6. Your rights

Your rights under KVKK Art. 11 and how to make a request are explained in the KVKK Inform­a­tion Notice. Requests are con­cluded free of charge within 30 days at the latest.

Whether the EU Gen­eral Data Pro­tec­tion Reg­u­la­tion (GDPR) applies to the Com­pany’s activ­it­ies is still being assessed. If it applies, you may also exer­cise the rights of access, rec­ti­fic­a­tion, eras­ure, restric­tion of pro­cessing, data port­ab­il­ity and objec­tion listed in Art­icles 15–21 GDPR, and lodge a com­plaint with the super­vis­ory author­ity in your coun­try.

7. Security

The Web­site is served over an encryp­ted con­nec­tion (HTTPS) with restrict­ive secur­ity head­ers (in­clud­ing a con­tent secur­ity policy). It has no user accounts or data­base; mes­sages sent with the mes­sage form are for­war­ded as e-mails and are not stored on the Web­site. To pre­vent misuse, your IP address is kept on the server in hashed form for at most one hour. The Web­site is designed around the prin­ciple of data min­im­isa­tion. No system can guar­an­tee com­plete secur­ity; how­ever, we assess risks reg­u­larly and update our meas­ures.

8. Children

The Web­site is not aimed at chil­dren, and no per­sonal data is know­ingly col­lec­ted from chil­dren.

9. Cookies

The Web­site does not use cook­ies. Details are given in the Cookie Policy.

10. Changes

This policy is updated when the tech­no­lo­gies used on the Web­site or its data pro­cessing activ­it­ies change. The cur­rent ver­sion is always on this page.

This Eng­lish ver­sion is provided for inform­a­tion. In case of dis­crep­ancy, the Turk­ish ver­sion pre­vails.