Privacy Notice
Last updated:
This notice is provided under Article 10 of Turkish Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains how we process the personal data of people who visit habipalbayrak.com and contact us via the quote form, phone, WhatsApp or email. This English version is provided for information; the Turkish version prevails.
1. Data controller
Habip Albayrak Gıda Pazarlama San. Tic. Ltd. Şti. (the “Company”)
- MERSIS No: 0454144320900001
- Address: Battal Gazi Mah. Şark Cad. Sardunya Sok. No:27, Aytop Gıda Toptancılar Sitesi K Blok, 34935 Sultanbeyli/Istanbul, Türkiye
- Email: info@habipalbayrak.com
- Phone: +90 532 306 71 32
2. Personal data we process
| Category | Data | How we obtain it |
|---|---|---|
| Identity | Name and surname | Quote form, phone, WhatsApp, email |
| Contact | Phone number; email address if you provide one | Quote form, phone, WhatsApp, email |
| Request details | Business name, business type, district, the products you are interested in and the content of your message | Quote form, phone, WhatsApp, email |
| Transaction security | IP address, date and time of the visit, page requested, browser information | Server access logs of the website |
In the quote form, name, business name, business type, district and phone number are required; email address, product and message are optional. We do not ask for special categories of personal data (health, religion, trade union membership and the like); please do not include such information in your message.
Our website does not use cookies or similar tracking technologies, and your visit is not tracked for analytics or advertising. See our Cookie Policy for details.
3. Purposes and legal bases
We process your personal data for the purposes below, on the legal bases shown:
| Purpose | Legal basis |
|---|---|
| Receiving your quote request, calling you back, preparing a quote and carrying out the sales process | Art. 5/2-(c) of the Law: processing directly related to the conclusion or performance of a contract |
| Answering the questions and requests you send by phone, WhatsApp or email | Art. 5/2-(c) and Art. 5/2-(f): the Company’s legitimate interest |
| Keeping the website and quote form secure and preventing abuse (spam) | Art. 5/2-(f): the Company’s legitimate interest |
| Issuing and keeping invoices, delivery notes and commercial correspondence if a commercial relationship is established | Art. 5/2-(ç): compliance with a legal obligation (Turkish Commercial Code No. 6102, Tax Procedure Law No. 213) |
| Establishing, exercising or protecting a right in the event of a dispute | Art. 5/2-(e) |
We do not process your personal data on the basis of explicit consent, so we do not ask you for it.
4. Recipients
Your personal data is shared only with the following recipients, and only for the purposes above:
- Our server (hosting) provider: to run the website and the quote form. The server is located in Türkiye.
- Our corporate email provider: to deliver the quote form and correspondence to the Company’s mailbox and store them there. The service is provided in Türkiye.
- Competent public authorities and courts: where requested under a legal obligation.
We do not share your personal data with any other third party, and we do not sell it.
Transfers abroad: personal data collected through the website and the quote form is not transferred outside Türkiye.
WhatsApp: if you choose to write to us on WhatsApp, your messages are carried over the infrastructure of WhatsApp (Meta Platforms), whose servers are located abroad, and are subject to WhatsApp’s own terms and privacy policy. If you prefer not to use this channel, you can reach us by phone, email or the quote form.
5. How data is collected
Identity, contact and request details are obtained directly from you, electronically or verbally, when you fill in the quote form, call us, or write to us on WhatsApp or by email. Transaction security data is recorded automatically by the server when you visit the site.
6. Retention
- The information you send through the quote form is not stored on the website or in a database; it is only forwarded to the Company’s corporate mailbox.
- Quote requests and correspondence are kept for as long as needed to conclude your request. If no commercial relationship follows, they are deleted once the purpose of processing no longer exists.
- If a commercial relationship is established, commercial books, documents and correspondence are kept for ten years under the Turkish Commercial Code.
- Server access logs are kept for no more than thirty days and are then deleted automatically.
7. Your rights under Article 11 of the Law
By applying to the Company, you have the right to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether the data is used in line with that purpose,
- know the third parties, in Türkiye or abroad, to whom the data is transferred,
- request correction of incomplete or inaccurate data,
- request erasure or destruction under the conditions in Article 7 of the Law,
- request that correction, erasure and destruction be notified to the third parties to whom the data was transferred,
- object to a result against you that arises from analysis of the data solely by automated systems,
- claim compensation for damage caused by unlawful processing.
8. Applications and complaints
You can send your request, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, in one of the following ways:
- in writing, with a wet signature, by hand or by post to the address above;
- from the email address you previously gave us and that is on our records, to info@habipalbayrak.com;
- as a document signed with a secure electronic signature or mobile signature, to the same email address.
Your application must include your name and surname, your signature if the application is in writing, your Turkish ID number (for foreign nationals: nationality and passport or ID number), your residential or business address for notifications, your email address and phone number if any, and the subject of your request.
We will conclude your application as soon as possible and within thirty days at the latest, free of charge. If the request requires an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.
If your application is rejected, you find the reply insufficient, or we do not reply in time, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning of the reply and in any case within sixty days of the application date (Art. 14 of the Law).
9. Updates
If our practices for processing personal data change, this notice will be updated. The current version is always published on this page.