Privacy & KVKK Notice

01Data controller

Your personal data is processed by the company named below, acting as data controller under the Personal Data Protection Law No. 6698 (the “Law”). The company operates the vahdetadditive.com website and the VAHDET Additive Manufacturing brand.

Trade name

Vahdet Petrol Eğitim Hizmetleri Sanayi ve Ticaret A.Ş.

Brand

VAHDET Additive Manufacturing

Address

Atatürk Mah. Hadımköy Yolu Cad. No: 12, 34517 Esenyurt / İstanbul, Türkiye

Tax office / No.

Esenyurt / 8830355793

MERSIS no.

0883035579300001

Email

[email protected]

This notice covers personal data processed when you visit vahdetadditive.com, send a request and files through the quote form, or write to or call us using the contact details published on this site.

02Personal data we process

Depending on how you interact with us, we may process personal data in the following categories:

• Identity data: first name and surname and, if you provide it, your job title or role.
• Contact data: email address, telephone number, the name of your company and your country.
• Customer transaction data: the content of your quote request (part description, quantity, material, finish, target delivery date, tolerances, inspection and documentation needs, confidentiality and flight-use information, delivery destination and notes), the CAD files and drawings you upload, correspondence about your request, quotations and, if an order follows, order and contract records. Uploaded files may contain personal data, for example a designer’s name in the file metadata or in the title block of a drawing. Each request you send is stored together with the country that Cloudflare reports for your internet connection; your IP address is not stored with the request.
• Transaction security data: server logs kept by our hosting provider for security, such as IP address, date and time of access, the page requested and browser information, and technical signals about your browser and device processed by Cloudflare Turnstile, which protects the quote form against abuse.

We do not intend to process special categories of personal data; please do not include such data in your request or files. If you share personal data about another person, such as a colleague, please make sure they are aware of this notice.

03Purposes of processing

We process your personal data for the following purposes:

• receiving quote requests, carrying out the engineering review of uploaded files and preparing quotations,
• communicating with you about your request and our quotation,
• preparing and managing non-disclosure agreements (NDAs) where you ask for one,
• where a request leads to an order, concluding and performing the contract, including production, shipping and invoicing,
• fulfilling our legal obligations, in particular those arising from commercial and tax legislation,
• keeping the website and the quote form secure and preventing automated or abusive use,
• establishing, exercising and defending legal claims,
• responding to information requests from authorized public bodies.

04Legal bases

We process your personal data on the following legal bases set out in Article 5(2) of the Law:

• Art. 5(2)(c): processing is necessary for the establishment or performance of a contract, provided that it is directly related to that contract: assessing your quote request and preparing a quotation, the steps taken before a contract, and performing the contract if an order follows.
• Art. 5(2)(ç): processing is necessary for us to comply with a legal obligation: keeping commercial books, documents and records as required by law and responding to authorities.
• Art. 5(2)(e): processing is necessary for the establishment, exercise or protection of a right: keeping records that may serve as evidence in a dispute.
• Art. 5(2)(f): processing is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms: securing the website and the quote form through server logs and Turnstile verification.

Confirming in the quote form that you have read this notice only acknowledges that you have been informed; it is not a declaration of explicit consent. Should we ever need to carry out processing for which none of the legal bases above applies, we will ask for your explicit consent separately.

05How personal data is collected

We collect personal data directly from you when you complete the quote form, upload files, email us or call us, and by automated means through our hosting infrastructure and Cloudflare Turnstile when you visit the website or use the quote form.

A colleague who sends a request on your behalf may also share your data with us. In every case, data is collected on the legal bases described above.

06Recipients and transfers abroad

Subject to the conditions in Articles 8 and 9 of the Law, and limited to the purposes above, we may transfer personal data to the following recipients:

• Hosting and storage provider: Cloudflare, which hosts the website, runs the quote form, stores uploaded files and provides form security (Turnstile).
• Email delivery provider: the provider we use to deliver notification emails about your request.
• Professional advisers: legal, financial and audit advisers, to the extent necessary.
• Authorities: authorized public institutions and courts, where required by law or on request.

Our service providers, in particular Cloudflare, may process personal data on servers located outside Türkiye. Such transfers abroad are carried out in accordance with Article 9 of the Law.

07Retention periods

• Requests that do not lead to an order: we keep your request and files only as long as needed to prepare and follow up the quotation. They are deleted within two years of the request at the latest.
• Requests that lead to an order: the request, files and order records are kept for as long as needed to perform the contract and then for the retention periods required by law.
• Server logs and security signals: kept by our hosting provider for a limited period for security purposes.

You can ask us to delete your files earlier at any time; we will do so except for records we are legally required to keep. When a retention period ends, personal data is deleted, destroyed or anonymized in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

08Cookies and similar technologies

• No cookies of our own: this website does not set cookies of its own and uses no advertising or visitor-tracking tools.
• Cloudflare Web Analytics: we may use Cloudflare Web Analytics to count visits. It does not use cookies and does not identify individual visitors.
• Cloudflare Turnstile: the quote form is protected by Cloudflare Turnstile, which processes technical signals about your browser and device to tell people from automated traffic. Turnstile is loaded only on the quote page.
• Language preference: if you dismiss the suggestion to view a page in the other language, that choice is stored only in your browser’s local storage. It contains no personal data and is never sent to us.

09Your rights

Under Article 11 of the Law, you have the right to apply to us as data controller to:

• learn whether your personal data is processed,
• request information about the processing if it is,
• learn the purpose of the processing and whether your data is used in line with that purpose,
• know the third parties in Türkiye or abroad to whom your personal data is transferred,
• request correction if your personal data is incomplete or inaccurate,
• request deletion or destruction of your personal data under the conditions set out in Article 7 of the Law,
• request that any correction, deletion or destruction be notified to the third parties to whom your data was transferred,
• object to a result to your detriment arising from the analysis of your data exclusively by automated systems,
• claim compensation for damage arising from the unlawful processing of your personal data.

The next section explains how to exercise these rights.

10How to apply

You can submit requests about your rights in one of the following ways, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• Written application

  Deliver your application bearing your wet signature, together with documents proving your identity, in person or through a notary to:

  Vahdet Petrol Eğitim Hizmetleri Sanayi ve Ticaret A.Ş.
  Atatürk Mah. Hadımköy Yolu Cad. No: 12, 34517 Esenyurt / İstanbul, Türkiye

• Application by email

  Send your application from an email address you have previously given us and that is registered in our systems, or signed with a secure electronic signature or mobile signature, to:

  [email protected]

Your application must include your first name, surname and, for written applications, your signature; for Turkish citizens, your Turkish ID number, and for foreign nationals, your nationality and passport number or ID number, if any; your place of residence or business address for notification; your email address, telephone and fax number for notification, if any; and the subject of your request.

We conclude applications free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the procedure involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.

If your application is rejected, you find the response insufficient or we do not respond in time, you may file a complaint with the Personal Data Protection Board within thirty days of learning of the response and, in any case, within sixty days of the application date.

11Changes to this notice

We may update this notice to reflect changes in legislation or in our processes. The current version is always published on this page with its last-updated date.