Privacy Notice (KVKK)

Last updated: 14 October 2026

Controller and contact

This notice covers visitors and users of the quotation and contact forms on elvertekstil.com, operated by Elver Tekstil Dış Ticaret Ltd. Şti.
Address: Yıldırım Mah. Kemalpaşa Sok. No:10/A, Bayrampaşa, Istanbul, Türkiye.
Email: info@elvertekstil.com
Telephone: +90 (212) 438 57 15

Information we receive

The quotation form collects your name, company, email or telephone, product and delivery preferences, description and files you share. The contact form collects your name, contact details and message. Technical records include form language, submission time and IP address. Session information, a form security token and submission-attempt records support site security.

Remove personal information that is unnecessary for the quotation. Do not submit identity documents, health data or other sensitive personal data. Share other people's images or information only if authorised.

Purposes and legal grounds

• Assessing quotations, understanding design and production needs, pricing and contacting you: necessity for entering into or performing a contract (Article 5(2)(c) of Turkish Law No. 6698).
• Answering general enquiries, securing the site and preventing abuse: legitimate interests that do not prejudice your fundamental rights and freedoms (Article 5(2)(f)).
• Meeting statutory record-keeping and disclosure duties: legal obligation (Article 5(2)(ç)).
• Protecting legal rights in a dispute: establishment, exercise or protection of a right (Article 5(2)(e)).
• Optional cookies and embedded content: your separate explicit consent (Article 5(1)). Cookie consent is not a condition of submitting a form.

Where GDPR applies, the corresponding grounds are steps at your request before a contract or contractual necessity, legitimate interests, legal obligations under applicable EU/member-state law, and consent where required (Articles 6(1)(b), (f), (c) and (a)). Consent for marketing messages is not obtained by submitting a form or making a cookie choice. Replies about your request do not place you on a marketing list.

Collection and recipients

Information is collected electronically through the forms and files you submit. Servers and essential cookies generate technical records. Authorised staff review requests. Hosting, email and technical-support providers may access information as necessary to deliver their services. Delivery and accounting providers may receive relevant details if a quotation becomes an order. Public authorities receive information only where legally required.

Embedded Google Maps and analytics/marketing code are disabled by default in this version. Opening a WhatsApp, Instagram or Google Maps link takes you to that provider's service and policy. Before enabling a new international transfer within the site, its recipient, destination, purpose and basis under Article 9 of Law No. 6698 must be established and this notice updated. Routine transfers do not rely solely on cookie acceptance. Where GDPR applies, any necessary Chapter V safeguards must also be established.

Retention

Quotation and contact records and attachments are kept as long as needed to assess and follow up the request. Records relating to orders are kept for applicable commercial and tax-law periods. When the purpose ends, records are erased, destroyed or anonymised unless a dispute or legal retention duty requires otherwise. Form rate-limit records older than 24 hours are cleaned when a new form attempt is processed. Hosting access logs and backups have their own security and retention processes. Cookie durations are listed in the Cookie Policy.

Your rights

Under Article 11 of Law No. 6698 you may ask whether we process your data and request information about the purpose and recipients. You may request correction, erasure or destruction where the legal conditions are met, and notification of those actions to recipients. You may object to a detrimental result based solely on automated analysis and seek compensation for unlawful processing.

Send a written request to the postal address above, email us from an address previously provided and recorded by us, or use a secure electronic/mobile signature. Include enough information to verify your identity and understand your request; do not send unnecessary identity documents in the initial message. We will explain any secure verification needed.

Requests under Turkish law are answered within 30 days, normally without charge; costs permitted by the relevant application regulation may apply. If dissatisfied with the reply, refusal or absence of a timely reply, you may complain to the Turkish Personal Data Protection Board within the periods in Article 14. Where GDPR applies, you also have rights of access, rectification, erasure, restriction, objection and data portability where applicable, and the right to complain to your competent supervisory authority. Consent can be withdrawn at any time without affecting earlier consent-based processing.