Legal
Information notice on the processing of personal data under Law No. 6698 (KVKK).
As THABATWOOD GLOBAL SANAYİ ARGE VE DIŞ TİCARET LİMİTED ŞİRKETİ ("THABATWOOD"), we act as data controller under the Personal Data Protection Law No. 6698 ("KVKK") and process your personal data with care, in line with the law and the principle of good faith.
01Scope
This notice explains how your personal data is processed when you visit our website, use our contact and sample-list forms, or contact us by email, phone or WhatsApp.
02Personal data we process
- Identity: name and surname.
- Contact: email address; phone number, company and country if you share them.
- Request content: the subject, your message and the areas of interest you select.
- Transaction security: IP address, date and time of the request, browser information and server logs.
- Communication records: messages you send us by email or WhatsApp.
03Purposes of processing
- Evaluating and answering your enquiries.
- Evaluating partnership, supply and commercial cooperation requests.
- Informing you when our samples are ready (sample list only).
- Ensuring website security and preventing spam and misuse.
- Fulfilling our legal obligations and responding to requests from authorised institutions.
- Remembering your language preference on the website.
04Legal grounds
Your personal data is processed under Article 5 of KVKK on the grounds that processing is necessary for the establishment or performance of a contract, for compliance with our legal obligations, for the establishment, exercise or protection of a right, and for our legitimate interests provided that your fundamental rights and freedoms are not harmed. For sample-list communications we rely on your explicit consent, which you can withdraw at any time.
05Method of collection
Your data is collected electronically through the forms on our website, email, phone and WhatsApp, and automatically through server logs and technically necessary cookies.
06Transfer of personal data
Your data may be shared, only to the extent necessary, with our hosting, email and IT service providers and, where required by law, with authorised public institutions. Some service providers (for example email delivery, WhatsApp by Meta and Google Fonts by Google) may process data on servers outside Türkiye; such transfers are carried out in accordance with Article 9 of KVKK.
07Retention periods
Form messages are not stored in the website database; they are delivered to our corporate email. Correspondence is kept for as long as necessary for its purpose and for the periods required by law, after which it is deleted, destroyed or anonymised. Sample-list records are kept until you withdraw your consent. Server logs are kept for the period required by the applicable legislation.
08Cookies
Our website uses only technically necessary cookies, for example to remember your language choice. We do not use analytics or advertising cookies. If such tools are added in the future, this notice will be updated and your consent will be requested through a cookie banner.
09Your rights under Article 11 of KVKK
- To learn whether your personal data is processed, and to request information about it;
- To learn the purpose of processing and whether it is used in line with that purpose;
- To know the third parties in Türkiye or abroad to whom your data is transferred;
- To request correction of incomplete or inaccurate data;
- To request deletion or destruction of your data under the conditions of Article 7;
- To request that third parties to whom your data was transferred are notified of these operations;
- To object to a result against you that arises from analysis exclusively by automated systems;
- To claim compensation for damages arising from unlawful processing.
10How to apply
You can send your request in writing to our address, or by email from an address registered with us, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Please include your name and surname, your address or email address, and a clear description of your request. We will respond free of charge within thirty days at the latest.
11Data security
We take appropriate technical and administrative measures to protect your data, including encrypted connections (HTTPS), restricted administrator access, strong passwords, regular updates and spam protection. Our forms do not accept file uploads.
12Changes to this notice
We may update this notice when necessary. The current version is always published on this page.