This Privacy Notice has been prepared, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, by the data controller operating the website at https://akbulakgida.com.tr/ (the “Site”). This text is for information only; you do not need to tick a separate “I agree” box to use the Site or to send the contact form, because most of the processing below relies not on explicit consent but on the other legal grounds in the Law. The only processing that requires your explicit consent (Google Maps) operates separately and only with your choice.
1. Data controller
| Information | Details |
|---|---|
| Trade name | Akbulak Gıda Dış Tic. Ltd. Şti. |
| Site / brand name | Akbulak Gıda |
| Address | Hadımköy Yolu Caddesi, Devlet Sokak No:4/A, 34500 Büyükçekmece/İstanbul |
| Phone | 0 (212) 876 8380 |
| info@akbulakgida.com.tr |
2. Personal data processed, purposes and legal grounds
If you only browse the Site, you are not asked for your name, email or similar information. The processing below is what actually takes place on the Site; because the Site has no membership, payment, shopping, newsletter, advertising or visitor analytics (statistics/tracking) function, no data is processed for those purposes.
| Processing | Data processed | Purpose | Legal ground (Law) | Method of collection |
|---|---|---|---|---|
| Contact form | First name, last name (optional), email address, message content and any information you yourself write in your message | To receive and evaluate your contact request and reply to you | Art. 5/2-(f): the legitimate interest of the data controller, provided it does not harm the data subject’s fundamental rights and freedoms (being able to reply to incoming requests); Art. 5/2-(c) if the request turns into contract negotiations | The form on the Site (automatic, electronic) |
| Form security | An MD5 digest of your IP address (not encryption; it is a one-way digest) and a random submission ID; only as a temporary record valid for 10 minutes | To limit automated/abusive submissions and prevent double submission | Art. 5/2-(f): legitimate interest in keeping the Site and the form secure | Automatic, electronic |
| Cookie preference record | Your preferences, the date of the record and the preference version (the “brandbase_consent” cookie) | To remember your cookie preferences and not ask again on your next visit | Art. 5/2-(f): a technical record necessary to apply your preference (see the Cookie Policy) | Automatic, in your browser |
| Google Maps (only if you allow the “Functional” preference) | IP address, browser/device information and the data Google collects under its own terms (including cookies) | To show the address on a map on the contact page | Art. 5/1: explicit consent (the permission you give to the functional category in the preferences panel) | Your browser connects directly to Google |
| Server access logs | IP address, date/time of access, requested page, browser information | To keep the Site secure and running without interruption and to detect errors and abuse | Art. 5/2-(f): legitimate interest in Site security | May be kept automatically by the hosting infrastructure as an ordinary operating log |
No special categories of personal data are requested beyond these. Please do not write special-category data (health, religion, etc.) in your message.
3. Parties to whom data is transferred, and purposes
- Hosting and email service providers: The Site and the emails sent through the contact form are processed through a hosting/email infrastructure. Purpose of transfer: operating the Site and delivering your message to us. The Site is hosted by Hostinger, and emails sent through the contact form are delivered to the company mailbox on the Hostinger email service. Confirmation needed before publication: The country where the servers are located, and the validity for the Akbulak account of the service/data-processing contract with the provider
- Google (only if you give map permission): The map content is served by Google; Google may also process your data for its own purposes under its own privacy policy.
- Authorised public bodies and institutions: If requested under legislation, within the framework of Article 8 of the Law and limited to the scope of the request.
Your data is not transferred to third parties for marketing, advertising or profiling purposes.
4. Transfers abroad
The regime in Article 9 of the Law changed as of 01.06.2024 (with Law No. 7499): data may be transferred abroad to countries with an adequacy decision; where there is no adequacy decision, if appropriate safeguards such as standard contractual clauses, binding corporate rules or an undertaking are provided; and if neither applies, only in occasional (exceptional) cases.
- Google Maps: The map loads only if you give permission; in that case your browser connects directly to Google and Google’s infrastructure may be outside Türkiye. This connection is made at your choice; the basis and safeguards under Article 9 of the Law must be assessed separately. Confirmation needed before publication: Verification, with legal counsel, of the grounds and safeguards under Article 9 of the Law for Google Even if you do not give permission, you can use the Site fully; the address and the “Get Directions” link continue to work.
- Hosting/email: If the servers or the email infrastructure are located abroad, the transfer is made under the regime above. Confirmation needed before publication: The country where the server and email infrastructure are located and the basis for the transfer
5. Retention period
- Contact form message: Your message is not written to the Site’s database; it is delivered to the recipient mailbox as an email. How long it remains in the mailbox, on the email server and in backups depends on the recipient’s email policy. Confirmation needed before publication: Retention/deletion period of incoming form emails and the backup practice
- Form security records: These are temporary records valid for 10 minutes. When the period ends, the record is treated as invalid and is deleted by WordPress’s temporary-record cleanup (when the same record is accessed again or in WordPress’s daily scheduled cleanup); physical deletion may not occur exactly at the 10th minute, so the record may remain in the system for a short time after expiry.
- Cookie preference record: 180 days; after that your preference is asked again. You can change your preferences at any time via the Cookie Preferences link or delete the cookie from your browser.
- Server access logs: Confirmation needed before publication: The hosting provider’s retention period for access logs
When the purpose of retention ends, the data is deleted, destroyed or anonymised.
6. Your rights (Article 11 of the Law)
By applying to the data controller, you may request to:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of the processing and whether it is used in accordance with its purpose,
- Know the third parties to whom data is transferred in Türkiye or abroad,
- Request correction if it is incomplete or inaccurate,
- Request deletion or destruction within the conditions of the Law and request that these actions be notified to third parties to whom the data was transferred,
- Object to a result against you arising from the analysis of the processed data exclusively by automated systems,
- Request compensation for damage if you suffer harm due to unlawful processing.
7. How to apply
You can submit your applications, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, with information identifying you and a written statement of your request:
- Written application: To the address above, by a hand-signed petition (in person or by post/notary),
- Email signed with a secure electronic signature or mobile signature: To info@akbulakgida.com.tr.
Your application is concluded free of charge within thirty days at the latest, depending on the nature of the request; if the process requires a separate cost, a fee according to the tariff set by the Personal Data Protection Board may be charged. The reply is given in writing or electronically. If your application is rejected, you find the reply insufficient or no reply is given in time, you have the right to complain to the Personal Data Protection Board within thirty days of learning the reply and in any case within sixty days of the application date.
8. Version of this text
This text is updated when a new processing activity is added or the way an existing one is carried out changes; the version number and date at the top of the page show the actual date of change. You can always reach the current text from the link in the Site’s footer. Other related documents: Privacy Policy, Cookie Policy.