Information collected, methods and purposes
The web form electronically collects your company and contact name, telephone, email, delivery location, product/dimension/quantity details and notes. Request language, time and reference are recorded automatically; authorized staff enter status updates and follow-up notes in the panel. Technical keys, hashes, counters and an IP hash when trusted connection information is available help prevent duplicates and misuse. Do not add identity documents, bank details or sensitive personal data to notes.
Legal grounds
Necessary quote processing directly related to entering a contract with you personally relies on Article 5(2)(c) of Law No. 6698. Quote communication with company representatives and misuse prevention rely on our legitimate interests, provided your fundamental rights and freedoms are not harmed (5(2)(f)). Handling data rights requests and keeping required deletion operation records rely on our legal obligations (5(2)(ç)). Data necessary to establish, exercise or protect a right in a specific dispute is processed under 5(2)(e).
Access, hosting and notifications
Authorized staff access requests in the management panel. We use Hosting.com.tr for hosting and backups, and ProMail for email and technical deletion records. These providers state that the servers for these services are in Türkiye.
Only a generic new-request notice and panel link are sent through ProMail to the company’s Hotmail address; customer names, contact details, quote content and request references are excluded. Email services process sender/recipient addresses, sending times and a technical message identifier; Microsoft’s email service also receives this information for Hotmail delivery.
A separate technical record is kept in ProMail to prevent deleted requests from becoming usable again after an old backup is restored. It contains technical identifier hashes, operation information and the retention rule, instead of customer names or quote content. Access to these records is restricted.
Retention and deletion
The deletion period set for quote copies in the web panel is 96 hours after closure without a sale is recorded, or 30 days after a sale is recorded as completed. Open requests with ongoing discussions do not enter these closure periods and are kept while needed to follow up the quote. This rule does not cover the company’s separate accounting, invoice or order records.
Requests reserved for deletion cannot be changed or sent as notifications while the technical record is verified. An uncertain notification result or incomplete safe deletion and restoration checks may require the operation to wait for review. Deletion operation records are kept for at least three years, subject to other legal obligations; this is separate from the 96-hour/30-day period for quote content.
The provider reports keeping full server backups for one week. Separately created application backups are not automatically subject to that period. Backups may contain earlier records; during restoration, current technical deletion records are checked and deleted requests are removed before becoming usable again. We do not promise that every backup copy is destroyed at the moment a quote is deleted.
Technical information stored in your browser
To prevent duplicates, sessionStorage holds a key, content hash and language, without the form text. The quote form uses no advertising or analytics cookies. A staff session cookie is used in the management panel.
Your rights under Article 11 of Law No. 6698
You may apply to the company to exercise the following rights concerning your personal data:
- Learn whether your data is processed and request information about any processing.
- Learn the processing purpose and whether your data is used for that purpose.
- Know the third parties receiving your data within Türkiye or abroad.
- Request correction of incomplete or inaccurate data.
- Request deletion or destruction when the conditions in Article 7 are met.
- Request notification of correction, deletion or destruction to third parties that received the data.
- Object to a result against you arising solely from analysis by automated systems.
- Request compensation for damage caused by unlawful processing.
Submitting a data rights request
Send your request in Turkish to the email below from an address previously provided and registered in our system, or in writing to the postal address below. Other methods under the Communiqué remain available.
Data rights request email: info@gencsoydemircelik.com.tr
Postal address for requests: Yıldırım Beyazıt Mahallesi, Özkulçolak Caddesi, Paytowers İş Merkezi, Kat: 3, No: 33, Payas / Hatay
Include the identity, contact and request details required by the Communiqué; sign written requests. See the KVKK link below for requirements.
We respond as soon as possible and within 30 days. Requests are normally free; the Communiqué’s fee rules may apply to additional costs.
KVKK guidance on application methods and requirements (Turkish)
