Privacy Policy (GDPR & KVKK Compliant)

1. Introduction and Acceptance

 

Welcome to Nefis Bulgur San. Tic. Ltd. Şti. (“Nefis Bulgur,” “we,” “us,” or “our”). We are committed to protecting the privacy and security of the personal data of our website visitors and clients.

This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Turkish Law on the Protection of Personal Data No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).

By visiting, using our website (https://www.google.com/search?q=nefisbulgur.com.tr), or providing us with information via our contact forms, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

 

2. Who We Are (Data Controller)

 

In the context of KVKK and GDPR, the Data Controller responsible for your personal data is:

• Data Controller: [Your Company’s Full Legal Name – e.g., Nefis Bulgur San. Tic. Ltd. Sti.]

• Address: [Your Factory’s Full Address, Gaziantep, Turkey]

• Email: [info@https://www.google.com/search?q=nefisbulgur.com.tr or a dedicated privacy@ email]

 

3. What Personal Data We Collect

 

We may collect and process the following categories of personal data:

• Data You Provide Directly: Information you voluntarily submit through our contact forms (e.g., SureForms), such as your Full Name, Company Name, Country, E-mail Address, Phone Number, and any other information you share in your Message.

• Data Collected Automatically: Technical data collected automatically when you browse our site, such as your IP address, browser type, operating system, pages visited, and visit duration. This data is collected via cookies and similar technologies and is often anonymized.

 

4. How and Why We Use Your Data (Purpose & Lawful Basis)

 

We process your personal data based on specific purposes and lawful bases (under KVKK Art. 5/6 and GDPR Art. 6):

• To Respond to Your Inquiries: To respond to your questions, requests for quotation (RFQs), and distributorship inquiries submitted via our forms.

  • Lawful Basis: Necessary for the performance of a contract or to take steps at your request prior to entering into a contract (GDPR Art. 6(1)(b); KVKK Art. 5/2-c).

• For B2B Relations: To establish and manage our business relationship, create a potential client record, and manage orders.

  • Lawful Basis: Our legitimate interest to develop and manage our business operations (GDPR Art. 6(1)(f); KVKK Art. 5/2-f).

• To Improve Our Website: To analyze how our website is used (e.g., via Google Analytics) to improve user experience, performance, and security.

  • Lawful Basis: Our legitimate interest to maintain and improve our website, or your explicit consent (GDPR Art. 6(1)(a); KVKK Art. 5/1) for non-essential cookies.

 

5. How We Share Your Data

 

We do not sell or rent your personal data. We may share your data only in the following limited circumstances:

• Third-Party Service Providers: With trusted technical providers who help us operate our website (e.g., web hosting, email infrastructure, anonymous analytics services), under strict confidentiality agreements.

• Legal Obligations: If required by law, court order, or other governmental authority.

 

6. Cookie Policy

 

Our website uses cookies (small text files stored on your browser) to function effectively and improve your experience.

• Strictly Necessary Cookies: Essential for the website’s security and basic functionality.

• Performance/Analytics Cookies: Help us understand (anonymously) how visitors interact with our site so we can improve it.

By using our website, you agree to the use of these cookies. You can manage your cookie preferences at any time through your browser settings. (A Cookie Banner is required to obtain this consent properly).

 

7. Your Data Protection Rights

 

Under GDPR and KVKK, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.

• Right to Rectification: You can request that we correct any inaccurate or incomplete data.

• Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data under certain conditions.

• Right to Restrict Processing: You can request that we limit the processing of your data.

• Right to Data Portability: You can request that we transfer your data to another organization.

• Right to Object: You can object to our processing of your data based on legitimate interest.

To exercise any of these rights, please contact us at the email or address listed in Section 2.

 

8. Data Security & International Transfer

 

We take appropriate technical and organizational measures to protect your personal data. As a company based in Turkey, your data will be processed and stored on servers in Turkey. For visitors from the EU, this constitutes an international data transfer. We take all reasonable steps to ensure your data is treated securely.

 

9. Changes to This Policy

 

We reserve the right to update this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy on this website.

Last Updated: [November 04, 2025]