Legal Notice

KVKK Privacy Notice

This privacy notice has been prepared under Article 10 of Law No. 6698 on the Protection of Personal Data, to inform you on all matters relating to the processing of your personal data.

1. Data Controller

Your personal data is processed under Law No. 6698 on the Protection of Personal Data by the company whose details appear below, acting in its capacity as data controller:

2. Purpose of Processing

Your personal data is processed for the following purposes:

• Receiving, evaluating and responding to your quote requests
• Managing and tracking order processes
• Issuing invoices, delivery notes and contractual documents
• Conducting customer relations and after-sales support services
• Fulfilling legal obligations
• Providing in-platform messaging and notification services
• Measuring and improving service quality
• Marketing activities through product and service promotions (subject to your explicit consent)

3. Personal Data Collected

The following personal data is collected via the platform and through our contact channels:

• Identity information: name, surname, name of authorized representative
• Contact information: email address, phone number, address
• Company information: company name, tax number, trade registry number
• Transaction information: quote requests, order history, message records
• Technical data: IP address, browser type, session information, cookie data

4. Legal Basis

Your personal data is processed within the framework of the following legal grounds under Article 5 of the KVKK:

• Being directly related to the conclusion or performance of a contract (Art. 5/2-c)
• The data controller's ability to fulfill its legal obligation (Art. 5/2-ç)
• Legitimate interests, provided they do not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f)
• Explicit consent (for marketing communications and non-essential cookies) (Art. 5/1)

5. Transfer of Data

Your personal data may be shared with the following parties, provided the security measures set out in law are taken:

• Business partners and suppliers: to carry out production, logistics and delivery processes
• Service providers: for Resend (email delivery service), Google Analytics 4 and Microsoft Clarity (analytics tools), cloud storage and software services
• Authorized public bodies and institutions: the relevant authorities within the scope of legal obligations

Your personal data is not transferred abroad without your explicit consent. Where a transfer abroad is involved, the conditions under Article 9 of the KVKK are complied with.

6. Retention Period

Your personal data is retained for as long as the purpose of processing requires and within the legal periods prescribed by the relevant legislation. Commercial records are kept for 10 years, customer contact records for 3 years, and technical data for 2 years. Once these periods expire, the data is securely deleted, destroyed or anonymized.

7. Rights of the Data Subject (KVKK Article 11)

Under Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing your personal data and whether it is used in line with that purpose
• To know the third parties to whom your personal data is transferred, domestically or abroad
• To request correction if your personal data has been processed incompletely or inaccurately
• To request the deletion or destruction of your personal data
• To object to a result that arises against you as a consequence of your data being analyzed exclusively through automated systems
• To request compensation for damages you incur due to your personal data being processed unlawfully

8. How to Apply

You can apply through the following channels to exercise the rights set out above:

• Email: a written application to info@kutusevdasi.com with the subject "KVKK Application"
• Post/In person: a written application, with identity verification, to 1. Yıl Mah. Kışla Cad. Ensar Apt. No: 69A Bağcılar / İstanbul

Your application must clearly state your name, surname, Turkish ID number or passport number, contact details and the request you wish to make. Your application will be concluded within 30 days at the latest. No fee is charged when a request is answered; however, if the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.

Last updated: June 2026