Privacy
Privacy notice and cookie information
This notice explains which personal data we process, for what purpose and on which legal basis, in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).
Last updated:
Data controller
The controller responsible for personal data collected on this website is:
- Company
- İNNOTECH METAL İŞLEME SANAYİ VE TİCARET LİMİTED ŞİRKETİ
- Address
- Sakarya 1. Organize Sanayi Bölgesi Mah. 12. Cad. 11. Blok No: 2/11 G, Arifiye / Sakarya / Türkiye
- MERSIS no.
- 0478119849400001
- [email protected]
- Phone
- +90 532 309 99 54
Personal data we process
When you simply browse our website, we do not ask for your name, e-mail or similar details. Personal data is only processed when you submit a form or contact us directly:
- Quote form: name, company (optional), e-mail, phone (optional), quantity and material (optional), description, the files you upload and your confirmation that you have read this notice.
- Contact form: name, e-mail, phone (optional), message and confirmation.
- Contact by e-mail, phone or WhatsApp: the contact details and message content you send us.
- Technical data: when you submit a form, your IP address is briefly used for the bot check and for rate limiting to prevent abuse.
Up to 5 files of the types STEP, IGES, DXF, DWG, PDF, ZIP, PNG, JPG, 20 MB in total, can be uploaded with the quote form. These files (drawings, models, photos) usually contain no personal data; where they do, for example in a title block or a photo, the same rules apply.
Providing your data is neither a statutory nor a contractual requirement. However, name, e-mail and the description or message are required fields: without them we cannot assess or answer your request. Leaving optional fields empty has no consequences.
Purposes
- Assessing your quote request, preparing a quote and sending it to you
- Answering your contact request and questions
- Confirming by e-mail that we have received your request
- Conducting pre-contractual discussions
- Protecting the forms against automated submissions (spam, bots) and keeping the service secure
Legal bases
- Processing necessary to take steps prior to entering into a contract or to perform a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)): handling quote requests and pre-contractual discussions.
- Our legitimate interests, provided your fundamental rights are not harmed (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)): answering contact requests and protecting our forms against abuse.
The checkbox on our forms confirms that you have read this notice. We do not use your data for purposes beyond those above, for example to send marketing messages.
Recipients
We do not sell your personal data or share it with third parties for marketing. To provide the service, the following providers process data on our behalf and only for this purpose:
- Hostinger (e-mail service): form content and attachments are delivered by SMTP as an e-mail to the [email protected] mailbox and stored there; the confirmation e-mail to you is also sent through this service.
- Cloudflare (domain name, content delivery and security): website traffic passes through Cloudflare. When you submit a form, Cloudflare Turnstile processes technical data about your browser and connection to check that the request comes from a human. Visitor statistics are measured with Cloudflare Web Analytics, which does not use cookies.
- Error monitoring (Sentry): only records of technical errors in the form service are sent; names, e-mail addresses, phone numbers, messages, files and IP addresses are excluded.
- WhatsApp (Meta): if you choose to write to us via WhatsApp, your message, phone number and profile information are processed by WhatsApp/Meta under its own terms, possibly outside Türkiye and the EEA. Using this channel is optional; e-mail, phone and our forms are always available as alternatives.
The servers of these providers may be located outside Türkiye and outside the European Economic Area; such transfers take place in accordance with Art. 9 KVKK and, where the GDPR applies, Chapter V GDPR. Where required by law, information may be disclosed to competent public authorities.
Retention
- The form service keeps your data and files in memory only while forwarding them; no files or form content are stored on the server. Service logs contain no personal data, only a request number, the number of files, the total size and the result.
- Your IP address is held in memory only briefly for rate limiting and is not recorded.
- E-mails relating to your request are kept in the [email protected] mailbox for the duration of our business relationship and any contract, and afterwards for the retention periods required by law. Requests that do not lead to a business relationship are deleted once they are no longer needed.
Your rights
Under Art. 11 KVKK and, where applicable, Art. 15–21 GDPR, you have the right to:
- know whether your personal data is processed and request information about it
- learn the purpose of processing and whether the data is used accordingly
- know the third parties to whom your data is transferred in Türkiye or abroad
- have incomplete or inaccurate data corrected
- have your data erased or destroyed
- have corrections or erasures notified to the third parties who received the data
- restrict processing and receive your data in a portable format, where the GDPR applies
- object to processing based on legitimate interests, and to a result against you arising solely from automated analysis
- claim compensation for damage caused by unlawful processing
How to exercise your rights
Send your request by e-mail to [email protected] or in writing to the address above, stating your name, contact details and request. Requests are answered free of charge within thirty days at the latest. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, where the GDPR applies, with a data protection supervisory authority in the EU member state of your residence.
Cookies
We do not use cookies for advertising, profiling or tracking, which is why we do not show a cookie consent banner.
- Cloudflare Web Analytics measures visitor statistics without cookies and without identifying visitors.
- Cloudflare Turnstile runs only on pages with the quote and contact forms. For the bot check it may create strictly necessary technical data in your browser; this data is used only to keep the form secure.
- Cloudflare may use strictly necessary technical cookies to deliver the website securely and reliably.
You can delete or block cookies in your browser settings. If you block Turnstile, the form cannot be submitted; you can still reach us by e-mail, phone or WhatsApp.
Changes
We update this notice when our processing or the law changes. The current version is always on this page; the date of the last update is shown at the top.