Privacy Notice | Özgü Pasta

Data controller

This notice explains how we process your personal data when you visit our website, fill in our forms or contact us by phone, WhatsApp or email.

Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by Özgü Gıda Sanayi (“Özgü Pasta”) as the data controller, within the scope described below.

Özgü Gıda Sanayi
Bahçelievler Mah. Talat Paşaoğlu Sk. No:13, 26170 Tepebaşı / Eskişehir, Türkiye
Phone: 0532 704 02 80

What data do we process?

Contact form: name, phone number, company name, the product you are interested in and your note.
Export form: name, company name, country, email, phone or WhatsApp number, company type, the products you are interested in, estimated order quantity and your message.
Direct contact: the information you share when you reach us by phone, WhatsApp or email.
Transaction security: your IP address when you submit a form; the IP address, browser information and time of visit recorded in server logs when you visit the site.

We do not ask for special categories of personal data (such as health, religion or biometric data) in our forms. Please do not share such information in your messages.

Why do we process your data?

To respond to your quote and export requests.
To manage sample, order, production and shipping processes.
To contact you by phone, WhatsApp or email.
To fulfil our invoicing, accounting and other legal obligations.
To prevent misuse of our forms and keep the website secure.

Legal grounds and collection method

Your personal data is collected electronically through the forms on our website, by phone, WhatsApp and email, and is processed on the following legal grounds set out in Article 5 of the KVKK:

It is directly related to the conclusion or performance of a contract (quote and order processes).
It is necessary for the data controller to fulfil a legal obligation (invoicing and accounting records).
It is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms (site security and prevention of misuse).

If any processing outside these grounds becomes necessary, we will ask for your explicit consent first.

How do we store your data?

Requests you send through our forms are saved in the website’s admin panel, which only authorised staff can access, and are forwarded to our company email address. To detect misuse, the request record also includes the IP address from which you submitted the form.

Retention period

We keep your personal data for as long as the purpose of processing requires. Once a business relationship is established, we keep invoicing and accounting records for the periods required by the Turkish Commercial Code and the Tax Procedure Law. Data that no longer needs to be kept is deleted, destroyed or anonymised.

Transfer of personal data

We do not sell your personal data or share it with anyone for advertising. Your data may be transferred only to the following recipients, limited to the purposes above:

Shipping and logistics companies: to deliver your order and samples.
Service providers: the companies that host our website and manage our email, only to provide these services.
Competent public authorities: when required by law.

Transfers abroad: When you write to us on WhatsApp, your messages are delivered through WhatsApp’s (Meta) infrastructure, whose servers may be located abroad. Apart from this, our site does not send data to any service abroad.

Cookies

Our site does not use analytics, advertising or tracking cookies.

We use only one essential cookie, pll_language, to remember the language you choose. It is kept for one year, does not identify you and is not shared with anyone. You can delete cookies in your browser settings; the site will then not remember your language choice.

Your rights

Under Article 11 of the KVKK you may apply to us to exercise the following rights:

to learn whether your personal data is processed,
to request information about the processing,
to learn the purpose of processing and whether the data is used accordingly,
to know the third parties in Türkiye or abroad to whom the data is transferred,
to request correction if it is incomplete or inaccurate,
to request deletion or destruction within the conditions set out in the KVKK,
to request that corrections, deletions and destructions be notified to third parties to whom the data was transferred,
to object to an outcome against you arising solely from automated analysis of your data,
to claim compensation if you suffer damage because of unlawful processing.

Application

You may send requests regarding your rights in writing to our address, or with a secure electronic signature or registered electronic mail (KEP), in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application must clearly state your name, surname, Turkish ID number (nationality and passport number for foreign nationals), address and request.

Your application will be concluded free of charge within thirty days at the latest, depending on its nature. If the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.

If your application is rejected, you find the response insufficient or no response is given in time, you may file a complaint with the Board.