Privacy Policy

This Privacy Policy has been prepared by KOR KİMYA PAZARLAMA VE TİCARET LİMİTED ŞİRKETİ (hereinafter referred to as "KORKİMYA" or the "Company"). KORKİMYA is committed to ensuring the security of all data held, stored, and processed in its information systems, and applies the highest level of confidentiality and security measures.

1. Purpose and Scope

This Policy has been prepared to define the data security and data privacy processes belonging to KORKİMYA. The Company's Privacy Notice and any related notice cover all data collected or transmitted through online or offline channels.

This Policy applies to all activities carried out for the processing and protection of all personal data managed by the Company. The provisions of applicable legislation in force regarding the processing and protection of personal data shall take precedence; in case of any conflict between such legislation and the provisions of this Policy, the current legislation shall prevail.

2. Definitions

• KVKK: Law No. 6698 on the Protection of Personal Data
• GDPR: European Union General Data Protection Regulation
• Data Processor: A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the controller
• Data Controller: The person who determines the purposes and means of processing personal data and manages the place where data is systematically held
• Data Subject / Relevant Person: Natural persons whose personal data is processed, including the Company's and the Company's commercially related employees, customers, business partners, shareholders, officials, potential customers, candidate employees, interns, visitors, suppliers, and third parties
• Explicit Consent: Consent relating to a specific subject, based on information, and declared with free will
• Personal Data: Any information relating to an identified or identifiable natural person
• Sensitive Personal Data: Data relating to a person's race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dress, membership of associations/foundations/unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data
• KVK Board / Board: Personal Data Protection Board

3. Protection of Personal Data

KORKİMYA acts in the capacity of data controller in accordance with Law No. 6698 on the Protection of Personal Data and other legislative provisions relating to the protection of personal data. Personal data is processed only by personnel authorized to provide services within the scope of KORKİMYA and to apply confidentiality and security procedures, and by natural and legal persons authorized after fulfilling the requirement to inform the data subjects.

4. Principles to Be Observed in the Processing of Personal Data

• Personal data is processed in compliance with law and the principle of good faith, and in a transparent manner
• Personal data is collected only for specific, explicit, and legitimate purposes
• Personal data is relevant, limited, and proportionate to the purposes for which it is processed
• Personal data is accurate and, where necessary, kept up to date; deleted or corrected without delay
• Personal data is retained for the period stipulated in the relevant legislation or required for the purpose for which it is processed
• Personal data is processed in a manner ensuring appropriate security

5. Purposes and Legal Bases of Personal Data Processing

The processing purposes of personal data processed by KORKİMYA are as follows: enabling the Company to provide services to its customers under the best conditions, ensuring reliable and uninterrupted service, securing the Company, ensuring customer satisfaction and reliability, carrying out transactions related to the services offered, conducting promotional and marketing activities for services, performing contracts entered into with customers, and fulfilling obligations arising from applicable legislation.

Legal Bases:

• Existence of explicit consent of the data subject
• Being expressly stipulated by law
• Necessity of processing personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract
• Necessity for the data controller to fulfill its legal obligation
• Necessity of data processing for the establishment, exercise, or protection of a right
• Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

6. Electronic Communications

Within the framework of the communication permissions you have given during your communication with us regarding electronic communications and on any other KORKİMYA channel, you accept to receive electronic communications via your contact information regarding the promotion of services offered by KORKİMYA and its business partners, information about new products and services, legislative announcements, and other matters you may find of interest. In this context, you may submit your request to stop the communications sent to you to KORKİMYA.

7. Log Data, Cookies, and Web Beacons

Cookies are small program fragments that may be present on your device collecting various data. Through these programs, the following data may be collected:

• Internet Protocol (IP) address
• Domain name of the computer connecting to the site
• Date, time, and duration of your visit on the site
• Browser information, operating system, screen resolution, and connection speed
• Page requests made to the site and the amount of data transferred
• Application data such as session start time and user identifier

For details, please review our Cookie Policy. With analytics consent, source, landing page and product visit history accompany your quote, sample or contact request. Analytics events never contain names, email addresses, phone numbers, company names, free text or form field values; field interactions contain field names only. Browser journey records expire after 180 days; the record attached to a lead is retained to fulfil the enquiry and applicable retention obligations.

8. Purposes for Use of Your Data

Your personal data shared during your visit to the KORKİMYA website and through the contact form, email, and other electronic transactions will primarily be used to fulfill your requests and to provide better service. The general purposes of use are: to contact you, to respond to incoming inquiries, to manage the site, and to improve the quality of service.

9. Data Security

KORKİMYA attaches importance to safeguarding the confidentiality of your information and takes all necessary technical and administrative measures regarding data security. All security measures, including those taken to protect sensitive personal data, are in place, and your data is protected in accordance with security and confidentiality standards once it reaches KORKİMYA. Your data is retained only for the stated purposes and only as long as necessary for the requirements of the business process or legal obligations.

10. Transfer of Personal Data

Domestic Transfer:

Save for cases where the KVKK or relevant legislation makes it mandatory to transfer personal data to administrative and judicial institutions and bodies, the Company does not transfer the personal data of relevant persons to other persons without the explicit consent of the relevant person, unless the matters listed in Articles 5 and/or 6 of the KVKK are involved. The Company may transfer personal data to third parties in Türkiye by taking all security measures stipulated in the KVKK and relevant legislation.

International Transfer:

Your data is transferred abroad via the following third-party service providers:

• Resend Inc. (United States of America) — form and newsletter emails
• Telegram Messenger Inc. — private weekly internal summaries of form enquiries including email addresses, requested products and quantities (privacy policy)
• Google LLC (United States of America) — Google Analytics 4 traffic measurement
• Google LLC (United States of America) — Google Maps embedded office location map
• Microsoft Corporation (United States of America) — Microsoft Clarity session recording
• LinkedIn Corporation (United States of America) — Insight Tag and conversion measurement
• Sitecore USA, Inc. (Scrunch AI, United States) — analysis of AI bot requests at the server edge; no IP address or cookies are sent
• Cloudflare, Inc. (United States of America) — CDN, Turnstile bot protection, edge infrastructure
• Google LLC (United States of America) - Google Ads conversion measurement and remarketing. The transfer is carried out on the basis of your explicit consent under KVKK Article 9 and GDPR Chapter V.

International transfers are subject to the applicable legal basis and safeguards under KVKK Article 9 and GDPR Chapter V. Transfers that rely on consent take place only after explicit consent. Third parties process data under their own privacy policies and applicable customer agreements.

11. Deletion, Destruction, and Anonymization of Personal Data

Pursuant to Article 7 of the KVKK and the provisions of other relevant legislation, in the event that the reasons for processing the processed personal data cease to exist, the personal data is deleted, destroyed, or anonymized upon the Company's decision, periodic review, and/or request of the relevant person. The Company shall not retain the data, in connection with the reason for which it was originally collected, in a form that allows the identification of the data subject for longer than necessary.

12. Protection of Children's Online Activities

KORKİMYA does not under any circumstances knowingly request personal information from children. If it is learned that a person whose personal information has been received is under the age of 13 (under the age of 16 within the EU), this information shall be used immediately to notify their parents and the data in question shall be deleted.

13. Designing New Processes in Compliance with Privacy Rules

When developing new systems, KORKİMYA takes the most appropriate technological and organizational measures for privacy and makes the necessary developments for the processing of personal data in accordance with the intended purpose.

14. Your Rights (KVKK Article 11)

Pursuant to the KVKK, you may submit your requests regarding your rights in writing and signed by registered mail to the address below, deliver your application in person, or send them to us via the contact address kvkk@korkimya.com.

Address: Barbaros Mahallesi, Kardelen Sokak, Palladium Tower, D:2/1, 34746 Ataşehir/İstanbul, Republic of Türkiye

• To learn whether your personal data is processed
• To request information if your personal data has been processed
• To learn the purpose of processing your personal data and whether it is used in accordance with its purpose
• To know the third parties to whom personal data is transferred domestically or abroad
• To request the correction of your personal data if it has been processed incompletely or inaccurately
• To request the deletion or destruction of your personal data when the reasons requiring its processing no longer exist, even if it has been processed in compliance with the KVKK and other relevant laws
• To object to the emergence of a result against the data subject through the analysis of the processed data exclusively by automated systems
• To request compensation for damages incurred due to the unlawful processing of personal data

Contact

For questions regarding this policy: kvkk@korkimya.com

Data Controller: KORKİMYA Kimya San. ve Tic. Ltd. Şti.

Data Controller Representative: Berat Kahvecioğlu

Email: kvkk@korkimya.com