1. Controller and scope
This notice explains the handling of personal data of ozkancompany.com visitors and people preparing product or export enquiries, under Türkiye’s Personal Data Protection Law No. 6698 (KVKK). The data controller is:
ÖZKAN COMPANY İNŞ. MOB. İTH. İHR. SAN. VE TİC. LTD. ŞTİ.
8 Mart Mah. İpek Yolu Cad. No:58 İç Kapı No:8, Nusaybin/Mardin, TürkiyeThe notice covers this website and initial enquiries. Further processing arising from a later sale, supply or employment relationship requires the relevant additional information.
2. How the enquiry form works
The form uses your name, email or phone, product interest and message to open a draft in your device’s email application. A feed enquiry also includes the delivery country, city and estimated quantity. The form does not send a message itself or save these details in a website database. The company receives your message only if you send it from your email application. Your email provider also processes the message as part of its service.
Marked fields are needed to prepare the draft. You may instead contact us directly by email or phone. Please do not send identity documents, payment card details, health information or private third-party information that your enquiry does not require. Making an enquiry does not subscribe you to marketing or constitute general consent.
3. Data, purposes and legal grounds
- Enquiries and contact: The name, contact details, message, product preference, delivery country/city and quantity you provide by email or phone are used to assess and answer your request. Processing directly necessary to prepare a contract with you personally relies on KVKK Article 5(2)(c). If you represent a business or seek general information, answering your enquiry relies on our legitimate interest under Article 5(2)(f), provided it does not harm your fundamental rights.
- Website delivery and security: Your IP address and technical information sent by your browser reach the server to deliver pages. Server access and error records can include request time, requested page and browser information. Necessary and proportionate processing to operate the site and investigate faults or abuse relies on our legitimate interest in providing a secure service under Article 5(2)(f), without prejudicing your rights.
- Data protection requests: Identity, contact, request and verification details are processed under Article 5(2)(ç) to fulfil the duty to respond under KVKK Article 13.
- Legal disputes: Correspondence and records necessary to establish, exercise or protect a right are processed for that purpose under Article 5(2)(e).
Electronic communication and server processing use automated means. Taking enquiry details by phone and reviewing correspondence can also involve non-automated means. The website form has no fields for special categories of personal data.
4. Recipients and international processing
Website requests are processed by the hosting service, and emails you send are processed by email providers for transmission and mailbox services. Staff handling your enquiry access the information they need. Records needed for a dispute are shared with legal advisers; records covered by a valid, mandatory request are shared with competent public or judicial authorities. Such disclosures must be limited to their purpose and satisfy KVKK Article 8.
The website has no visitor tracking tool that automatically sends data to an advertising or analytics platform. This does not mean that all hosting and email processing takes place in Türkiye. You may request details of service data locations and transfers at info@ozkancompany.com.
Processing involving a transfer abroad must separately satisfy KVKK Article 9. Ongoing services cannot rely solely on this notice or general consent without the required adequacy decision or appropriate safeguards. Visiting the website or opening an email draft does not constitute explicit consent to international transfers.
6. Retention and security
Retention is determined by completion of the enquiry, any applicable statutory record duties and the need for records in a dispute. Technical records and business correspondence do not share a single purpose or retention period. Once processing grounds cease, data must be erased, destroyed or anonymised as required by law. You can ask for the period and grounds applicable to your data through the request process below.
The company must limit access to those who need it and implement the necessary technical and organisational security measures. No internet or email service can promise absolute security; this does not remove the controller’s statutory obligations.
7. Your rights and requests
You may exercise your rights under KVKK Article 11. These include information about processing, correction or deletion where conditions apply, notification of the action to recipients, objection to an adverse result based solely on automated assessment, and compensation for damage caused by unlawful processing.
You can send a signed written request to the office address above, identifying yourself and your request and including the information required by law. You may also write to info@ozkancompany.com from an email address previously provided to us and registered in our records. Other applicable methods under the Communiqué on Procedures and Principles for Applications to the Data Controller remain available. The same email address can be used for general privacy questions.
Requests are resolved as soon as possible and within 30 days, depending on their nature. They are generally free; if additional costs arise, only a fee allowed by the Board’s tariff may apply. If identity verification is necessary, only the information needed is requested. Your right to complain to the Board and other statutory remedies remain unaffected.
8. Updates
Changes to the website or processing are reflected in this notice and its update date. Any information and separate explicit consent needed for a new purpose must be handled separately. Updating this page does not itself establish consent.