GÜLTAŞ KİMYA · LEGAL

Privacy Policy (GDPR)

For customers and visitors in the European Union and the European Economic Area

Belge / Document	Privacy Policy (GDPR)
Veri Sorumlusu, İşletmeci / Controller, Operator	GÜLTAŞ KİMYASAL MADDELER İTHALAT SANAYİ VE TİCARET ANONİM ŞİRKETİ
Sürüm / Version	v1.0
Yürürlük / Effective	1 Ekim 2026 · 1 October 2026
İlgili Belgeler / Related	KVKK Privacy Notice · Cookie Policy · Retention and Destruction Policy

This policy supplements the KVKK Privacy Notice for data subjects to whom the EU General Data Protection Regulation (GDPR) applies. Whether an EU representative under Article 27 GDPR must be appointed should be confirmed by counsel.

ENGLISH

1. Introduction and Scope

This Privacy Policy explains how GÜLTAŞ KİMYASAL MADDELER İTHALAT SANAYİ VE TİCARET ANONİM ŞİRKETİ (“Gültaş Kimya”, “we”) processes personal data of customers, prospects, suppliers and visitors located in the EU or EEA when they use www.gultaskimya.com or do business with us, in line with Regulation (EU) 2016/679 (GDPR).

2. Controller and Contact Details

Controller	GÜLTAŞ KİMYASAL MADDELER İTHALAT SANAYİ VE TİCARET ANONİM ŞİRKETİ
Address	Kültür Mah. Ahmet Adnan Saygun Cad. Uydu Sok. Saray Apt. No: 2/11, 34340 Beşiktaş, İstanbul, Türkiye
E-mail	info@gultaskimya.com
Telephone	+90 212 252 57 28
EU Representative (Art. 27)	Not appointed; to be appointed if required

3. Categories of Personal Data

Identity and contact data: name, position, e-mail, mobile or WhatsApp number, business address
Company and invoicing data: company name, VAT or tax number, invoice e-mail
Transaction data: quotation requests, orders, invoices, delivery and shipping details
Appointment data from our online booking system
Technical data: IP address, device and browser data, cookie identifiers, logs
Marketing data: newsletter subscription and preferences

4. How We Collect Personal Data

Directly from you through our forms, bookings, e-mail, telephone and WhatsApp; from your company in the course of business; and automatically through cookies and similar technologies.

5. Purposes and Legal Bases (Article 6 GDPR)

Purpose	Legal Basis
Company accounts, quotations, orders and delivery	Contract, Art. 6(1)(b)
Invoicing, tax, customs and chemical regulation duties	Legal obligation, Art. 6(1)(c)
Security, fraud prevention, customer relationship management	Legitimate interests, Art. 6(1)(f)
Newsletter, commercial messages, non essential cookies	Consent, Art. 6(1)(a)

6. Disclosure and Recipients

Hosting and website provider (Wix.com Ltd.), e-mail and e-invoicing providers, banks, carriers, forwarders and customs brokers, professional advisers and competent authorities, each limited to what is necessary.

7. International Transfers (Chapter V GDPR)

We are established in Türkiye, which does not have an EU adequacy decision. Transfers of your data to Türkiye and to our service providers are based on Article 49(1)(b) GDPR where necessary for a contract with you, or on Standard Contractual Clauses where applicable.

8. Retention

Data is kept for as long as needed for the purpose and for statutory periods, generally 10 years for commercial and tax records, then deleted or anonymised.

9. Your Rights (Articles 15 to 22 GDPR)

Access
Rectification
Erasure
Restriction of processing
Data portability
Objection, including to direct marketing
Withdrawal of consent at any time

10. How to Exercise Your Rights

Write to info@gultaskimya.com. We reply within one month, which may be extended by two months for complex requests.

11. Automated Decision Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

12. Complaints

You may lodge a complaint with the data protection supervisory authority of your EU member state of residence, work or alleged infringement.

13. Cookies

Details are in our Cookie Policy. Non essential cookies are used only with your consent.

14. Data Security (Article 32 GDPR)

We apply appropriate technical and organisational measures, including access control, encrypted connections and backups.

15. Children

Our services are for businesses and are not directed at children under 16.

16. Changes

We may update this policy; the current version is published on the Site with its effective date.

17. Contact

info@gultaskimya.com