TR Get a Quote

LEGAL

Privacy and GDPR Notice

Last updated: 2026-05-11

Note: This is a baseline privacy notice for Focussan. We recommend independent legal review for complete compliance with all applicable obligations.

1. Data Controller

This notice is provided by Focussan Metal Sanayi Ticaret A.Ş. ("Focussan" or "the Company") to inform data subjects under the EU General Data Protection Regulation (GDPR) and Turkey's Personal Data Protection Law No. 6698 (KVKK), where applicable.

2. Categories of Personal Data Processed

  • Identity: Name, surname, title
  • Contact: Email, phone, company name, address
  • Inquiry content: Contact form / WhatsApp message contents, technical files sent
  • Technical data: IP address (in server logs, limited retention)

3. Purposes of Processing

  • Responding to inquiries and quote requests
  • Performing contractual and financial obligations
  • Meeting statutory record-keeping obligations
  • Site security (limited technical logs)

4. Lawful Basis

Personal data is processed based on the following grounds:

  • Data subject's explicit consent (contact form consent checkbox)
  • Necessity for the conclusion or performance of a contract
  • Compliance with legal obligations of the controller
  • Legitimate interest (form spam protection, security logs)

5. Data Transfers and Third Parties

Personal data may be shared with the following trusted processors only as strictly necessary to deliver the service:

  • Cloudflare, Inc. — site hosting and traffic protection (GDPR DPA in place)
  • Resend — contact form mail delivery (EU region preferred)
  • Google Workspace — corporate email (EU data centre)

Apart from legally required disclosures, no data is shared with third parties; we do not sell or rent personal data.

6. Retention Period

Inquiry data is kept for a reasonable period (typically 1-3 years) after response, then deleted or anonymised. Data subject to statutory retention (e.g. invoicing records) is kept for the period required by law.

7. Data Subject Rights

Under GDPR Articles 15-22 and KVKK Article 11 you have the following rights:

  • Right of access — to know whether your data is processed and request information
  • Right to learn the purpose and recipients
  • Right to know domestic / cross-border transfers
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure (right to be forgotten)
  • Right to object to processing
  • Right to object to adverse outcomes from automated decisions
  • (GDPR) Right to data portability

8. How to Exercise Your Rights

Send a written request to muhasebe@focussan.com. We will respond within 30 days at the latest.

9. Cookies

We use only essential technical cookies. No marketing or tracking cookies. Details: Cookie Policy.