This translation is provided for your convenience. If there is any discrepancy, the Turkish version prevails.
Olcay Metal Madencilik San. ve Tic. A.Ş.İkitelli OSB Mah. Demirciler Sanayi Sitesi, E2 Blok No:376-377, 34490 Başakşehir/İstanbul
Data Controller and Scope
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), the data controller is Olcay Metal Madencilik San. ve Tic. A.Ş. (the “Company”).
- MERSIS No.: 0641000400500011
- Trade Registry No.: 275532
- Address: İkitelli OSB Mah. Demirciler Sanayi Sitesi, E2 Blok No:376-377, 34490 Başakşehir/İstanbul
- Email: info@olcaymetal.com.tr
- Registered email (KEP): {{KEP_ADRESI}}
This notice is for visitors to olcaymetal.com.tr and for anyone who contacts us through the site (quote form, WhatsApp, phone, email). Employees, job applicants and CCTV recordings are covered by separate notices. Reading this notice or using the site does not, on its own, amount to giving explicit consent.
Data We Process, Purposes and Legal Bases
| Activity | Data processed | Purpose | Legal basis |
|---|---|---|---|
| Quote form | Name and surname, company name, phone, email, product group of interest, your message | To assess your request, prepare a quotation and get back to you | If you write on your own behalf, entering into a contract (Art. 5(2)(c)); if you write on behalf of a company, legitimate interest in business communication (Art. 5(2)(f)) |
| WhatsApp, phone and email correspondence | Phone number, WhatsApp profile name, email address, content of correspondence, files you share (technical drawings etc.) | To handle quotation, order and shipping processes | Art. 5(2)(c); Art. 5(2)(f) |
| Sending the calculation list via WhatsApp | Product, dimensions, material, grade and quantity in the list; when you send it, your WhatsApp number and profile name | To provide price and delivery-time information | Art. 5(2)(c); Art. 5(2)(f) |
| Site visits and security | IP address, browser and device information, requested page, time of visit | To serve the pages and prevent misuse and attacks | Legitimate interest (Art. 5(2)(f)) |
| Ad measurement (only with your consent) | Ad click identifier, cookie and device identifiers, IP address, page visited, type of contact click | To measure which contact requests our Google ads lead to | Explicit consent (Art. 5(1)) |
| KVKK applications | Identity and contact details, your request and attachments | To conclude your application; to exercise and protect a right | Legal obligation (Art. 5(2)(ç)); establishing, exercising or protecting a right (Art. 5(2)(e)) |
Your data is collected electronically: by non-automated means when you fill in the form or write to us, and partly by automated means through server logs when you visit the site.
We do not ask for your Turkish ID number, payment details, health data or any other special category of personal data in the form or in our contact channels. Please do not include such information, or details about third parties that your request does not need, in your messages.
How the Quote Form and WhatsApp Work
Quote form. When you press “Send”, the information in the form is delivered to our sales team by email through our form provider Web3Forms (USA). The site has no separate database that stores form submissions.
WhatsApp buttons. The WhatsApp buttons on the site open WhatsApp with a ready-made message. On general buttons the text is fixed (for example “Hello, I’m writing from the Olcay Metal website.”); on product and industry pages the product name is added. Your name, phone number and anything you typed into a form are never added to these messages. Whether you send or edit the message is up to you; once sent, the conversation runs on WhatsApp (Meta) infrastructure under WhatsApp’s own terms.
WhatsApp is optional. You can also reach us by phone, by email or through the quote form.
Weight Calculator, Calculation List and PDF
Weight calculations run entirely in your browser; the dimensions you enter are not sent to our server.
- Calculation list: The items you add to the list (product, dimensions, material, grade, quantity) are stored only in this browser’s local storage under the name
om-hesap-listesi-v1. The list does not move to other devices; you can remove it with “Clear list” or by deleting your browser data. - PDF and copy: The PDF is generated on your device and downloaded directly; text taken with “Copy” stays on your clipboard. You decide how these files are kept.
- Sending via WhatsApp: When you press “Send via WhatsApp”, the list text is added to the WhatsApp link and passed to WhatsApp (Meta) infrastructure. This text contains no name or phone number; please do not type personal information into the “Grade” field.
If you have consented to ad measurement, Google receives only the fact that “a WhatsApp link was clicked”; the message text, the calculation list and the PDF content are never added to any measurement event.
Transfers
Within Türkiye: to competent public authorities and courts within the scope of our legal obligations, and to our legal and financial advisers, limited to the purpose and to what is necessary.
Abroad: the site’s technical infrastructure relies on service providers located outside Türkiye:
| Recipient | Service | Data transferred | When |
|---|---|---|---|
| Cloudflare, Inc. (USA) | Hosting, content delivery and security of the site | IP address, browser information, requested page | On every visit |
| Web3Forms (USA) | Delivering the quote form by email | The information in the form | When you submit the form |
| {{EPOSTA_SAGLAYICISI}} | Corporate email service | Email correspondence and form messages | When you email us or submit the form |
| Google LLC (USA) | Ad measurement | The measurement data listed in the Cookie Policy | Only if you have consented |
| WhatsApp (Meta Platforms) | Instant messaging | The message you write and your WhatsApp account details | Only if you choose to write via WhatsApp |
These transfers take place on the basis of {{KVKK_M9_AKTARIM_DAYANAGI}} provided for in Article 9 of the KVKK.
Retention Periods
| Record | Retention period | Notes |
|---|---|---|
| Quote requests and correspondence (not leading to an order) | {{SAKLAMA_SURESI}} from the date of the last contact | Erased or anonymised at the end of the period. |
| Requests that become orders, commercial correspondence and documents | Periods under Article 82 of the Turkish Commercial Code and tax legislation (10 years for commercial books and documents) | Statutory retention obligation. |
| KVKK applications and replies | After the application is concluded, for as long as needed to exercise and protect a right | As evidence in case of a dispute. |
| Records of erasure, destruction and anonymisation | At least 3 years (Erasure Regulation, Art. 7(3)) | Shows only that the operation was carried out; the erased data itself is not kept. |
| Server and security logs | Subject to the retention policy of the infrastructure provider (Cloudflare) | The Company does not separately download or keep these logs. |
| Records kept in your browser | Cookie choice 12 months; calculation list until you delete it; intro animation flag until you close the tab | Details in the Cookie Policy. |
When the period ends or the reason for processing no longer exists, the data is erased, destroyed or anonymised in accordance with Article 7 of the KVKK. A request for erasure does not require us to destroy immediately a record that the law obliges us to keep; in that case we explain in our reply why we must keep it.
Security
The site is served only over an encrypted connection (HTTPS). A Content Security Policy (CSP) allows your browser to load code only from our own server and — if you have consented — from Google. Fonts and images are served from our own server; no requests are sent to third parties when pages load. Even so, no internet service can guarantee absolute security.
Your Rights under Article 11 of the KVKK
- to learn whether your personal data is processed,
- to request information about it if it has been processed,
- to learn the purpose of processing and whether the data is used in line with that purpose,
- to know the third parties in Türkiye or abroad to whom it has been transferred,
- to request correction if it is incomplete or inaccurate,
- to request erasure or destruction under the conditions of Article 7 of the KVKK,
- to request that third parties to whom the data was transferred be notified of any correction, erasure or destruction,
- to object to a result that is to your detriment and arises solely from automated analysis,
- to claim compensation if you suffer damage because of unlawful processing.
How to Apply
To exercise your rights, you can send your application as a petition bearing your wet signature to the address above, by hand or by post; by registered email (KEP) to {{KEP_ADRESI}}; with a secure electronic or mobile signature; or from an email address you have previously given us and that is registered in our systems, to info@olcaymetal.com.tr. You may use the Data Subject Request Form on this site.
What your application must include
- your name and surname, and your signature if the application is in writing,
- for Turkish citizens, the Turkish ID number; for foreign nationals, nationality and passport number or, if any, ID number,
- your residential or business address for notifications,
- if any, the email address, telephone and fax number for notifications,
- the subject of your request and, if any, related information and documents.
The quote form and the WhatsApp line are not suitable channels for a KVKK application; please do not send identity details through them. Where necessary, we may ask for proportionate additional information to verify your identity.
Response time and fees
We conclude your application as soon as possible according to its nature and within 30 days at the latest. It is free of charge as a rule; if a written reply exceeds ten pages, a fee of TRY 1 may be charged for each additional page, and if the reply is given on a recording medium such as a CD or flash drive, a fee up to the cost of the medium may be charged. If we refuse your request, we will tell you why.
Complaint to the Board
If your application is refused, you find the reply insufficient or no reply is given in time, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning of the reply and, in any case, within 60 days of your application date (Article 14 of the KVKK). You must apply to the data controller before complaining to the Board.
Updates and Official Sources
We update this notice when the site’s data flows or our business processes change; the current version is always on this page. This notice is for information only and is not a consent form.
- Personal Data Protection Law No. 6698 (Turkish)
- Communiqué on the Obligation to Inform (Turkish)
- Communiqué on Applications to the Data Controller (Turkish)
- Regulation on the Erasure, Destruction or Anonymisation of Personal Data (Turkish)
- KVKK — Transfers abroad (Turkish)
- KVKK — Guide on Cookie Practices (Turkish)
Last updated: {{YAYIN_TARIHI}}