Protection of personal data
Privacy Notice
Last updated: 2026-08-13
This notice has been prepared under Article 10 of Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to inform data subjects about the personal data collected via Elektronik Fiyat Etiketleri (https://elektroniketiket.org).
1. Identity of the data controller
Your personal data is processed by [to be completed] as data controller, within the scope described below.
| Legal name | [to be completed] |
|---|---|
| Address | [to be completed] |
| Application email | [to be completed] |
| Contact email | [to be completed] |
| Phone | [to be completed] |
| Tax office / number | [to be completed] |
| MERSIS number | [to be completed] |
| Registered electronic mail (KEP) | [to be completed] |
| VERBİS registration | [to be completed] |
2. Personal data processed and how it is collected
Your personal data is collected only if you complete and submit the quote request form on the site, electronically and by means that are not fully automated. Unless you complete the form, no data that identifies you or makes you identifiable is collected; the site has no membership, login or profile creation.
| Data category | Data processed |
|---|---|
| Identity | First name, surname |
| Contact | Email address, phone number (optional), city (optional) |
| Customer transaction | Company name, industry, number of stores/sites, estimated label count, target go-live period, budget band, products of interest and any notes you write in the free-text field |
| Transaction security | Server logs generated when the form is submitted. No personal data is written to these logs; only non-personal summary information such as industry and quantity is kept. |
Please do not write special categories of personal data (health, religion, membership etc.) or information about third parties in the free-text field.
3. Purposes of processing and legal grounds
| Purpose | Legal ground (KVKK Art. 5) |
|---|---|
| Passing your quote request to the manufacturers and partners that fit your scope | Art. 5/2-(c) — directly related to the conclusion or performance of a contract |
| Responding to your request and maintaining communication | Art. 5/2-(c) and 5/2-(f) — legitimate interest |
| Evaluating and answering data correction requests you submit | Art. 5/2-(f) — legitimate interest |
| Protecting the form infrastructure against abuse (spam prevention) | Art. 5/2-(f) — legitimate interest |
| Meeting legal obligations and responding to requests from competent authorities | Art. 5/2-(ç) — legal obligation |
Your personal data is not used to build marketing lists, nor sold, rented or shared with third parties for commercial purposes. No profiling or automated decision-making takes place.
4. Transfer of personal data
Domestic transfer
Your quote request is passed only to the manufacturers and Turkish partners that fit the scope you stated. The transfer takes place under KVKK Art. 8, limited to the purposes above. You are told which companies will receive it before it is sent.
International transfer
The site's hosting infrastructure is provided by Vercel Inc., and email delivery by Resend (e-posta iletimi) . Server region: Almanya (Frankfurt) — Vercel Inc.. Where these services are located abroad, the transfer relies on whichever mechanism under KVKK Art. 9 applies (adequacy decision, standard contractual clauses as appropriate safeguards, or explicit consent).
5. Retention and deletion
Your personal data is kept for as long as the purpose requires, taking into account the limitation periods set by applicable law. At the end of that period it is deleted, destroyed or anonymised.
| Data | Retention period |
|---|---|
| Quote request records | 2 yıl |
| Data correction reports | 2 yıl |
| Server logs (contain no personal data) | 12 ay |
Quote requests are not stored on the site or in a database; they are delivered by email, and the period above applies to those email records.
6. Data security
- The site and form submissions are encrypted end to end with TLS; HSTS is enforced.
- Form data is not stored persistently on the server, only forwarded.
- No personal data is written to server logs; only a non-personal summary is kept.
- A content security policy (CSP) and related security headers are applied.
- The form infrastructure is protected against automated spam submissions.
7. Cookies, measurement and browser storage
The site uses no advertising or profiling cookies. Visitor measurement is done with a cookieless tool (Plausible Analytics), described below. Only two technical entries, created by your own choices, are kept in your browser's local storage:
| Entry | Purpose |
|---|---|
esl-compare | The products you added to your comparison list |
esl-theme | Your light/dark theme preference |
These entries stay on your device, are never sent to the server and do not make you identifiable. You can delete them from your browser settings at any time.
Visitor measurement
Plausible Analytics is used to see which pages are read and whether the tools are used. It sets no cookies, leaves nothing in your browser and does not track you across sites. Visitor counts are derived from an irreversible hash of the IP address and browser information using a key that rotates daily; the IP address is not stored. This measurement contains no personal data and is carried out under the legitimate interest ground in KVKK Art. 5/2-(f).
Alongside page views, events showing tool usage are measured (completing the advisor, calculating ROI, submitting a form). Only categorical information is attached to these events — industry, label count band, manufacturer segment. Names, company names, email addresses, phone numbers and free-text notes are never sent to the measurement system.
The measurement script and event requests are proxied through our own domain; your browser makes no direct request to a third-party server. The servers processing the data are located in the European Union (Germany). If you wish to opt out entirely you can use your browser's "Do Not Track" setting or a content blocker; this does not affect how the site works.
8. Data subject rights
Under KVKK Art. 11 you have the following rights by applying to the data controller:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether it is used accordingly
- To know the third parties to whom it is transferred, domestically or abroad
- To request correction if it has been processed incompletely or incorrectly
- To request deletion or destruction under the conditions of KVKK Art. 7
- To request that correction, deletion and destruction be notified to third parties to whom the data was transferred
- To object to an adverse outcome arising solely from automated analysis
- To claim compensation for damage suffered due to unlawful processing
9. How to apply
You may submit requests concerning your rights in the following ways, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- In writing, by wet-signed petition to [to be completed]
- By registered electronic mail (KEP) to [to be completed]
- From the email address you previously notified and that is on record with us, to [to be completed]
Your application must include your name, surname, signature, Turkish ID number (nationality and passport number for foreign nationals), address for service, email and phone if available, and the subject of your request. Applications are concluded free of charge within thirty days at the latest, depending on the nature of the request; where the process incurs a cost, the fee set by the Board may be charged.
If your application is rejected, you find the response insufficient or no response is given in time, you retain the right to complain to the Personal Data Protection Board.
10. Updates to this notice
This notice may be updated due to changes in legislation or in our data processing. The current version is always published on this page and the date at the top is updated.