This Privacy Notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about the personal data processed through the eksado.com website and related services.

1. Data Controller

Your personal data is processed by EKSADO YAPI TİCARET VE İHRACAT SANAYİ LİMİTED ŞİRKETİ ("Eksado" or the "Company") as the data controller.

• Trade name: EKSADO YAPI TİCARET VE İHRACAT SANAYİ LİMİTED ŞİRKETİ
• Registered office: Yanık Mahallesi, Yanık Orta Sokak, No: 60/1, Sapanca / Sakarya, Türkiye
• Factory and production facility: Kozluk Mahallesi, D-100 Yanyol Caddesi, No: 12/2, Erenler / Sakarya, Türkiye
• Tax office / number: Sapanca Tax Office / 6260565497
• MERSIS number: 0626056549700001
• Email: contact@eksado.com
• Phone / WhatsApp: +90 533 250 26 82

2. Personal Data We Process

What we process depends on how you use the website. We only process data you give us or data needed for the service to work.

• Identity: first and last name; optionally date/year of birth and gender for membership.
• Contact: email address, phone number, country, city and, if you share it, address.
• Corporate membership: company name, tax number, tax office, company email and phone.
• Customer transactions: quote and contact requests, models you are interested in, message contents, your preferred reply channel, favourites, orders, delivery country/city and order progress records.
• Appointments: topic, preferred date/time range and meeting type for meeting requests with management.
• Security: IP address and browser information when a form is submitted, sign-in records and session cookies.
• Visit statistics: page viewed, referring site, campaign tags, approximate location (country/region/city), device type, browser, operating system and visit duration. Your IP address is not stored in these records; a daily-changing, irreversible visitor code is used instead. If you are signed in, your email address and account role are added to the record.
• Marketing: only if you consent, your preference to receive news and campaign updates.

3. Purposes

• To receive and assess your quote, information and contact requests and reply through the channel you choose (website, email or WhatsApp),
• To create your account, let you sign in and keep your account secure,
• To carry out contracts, orders, production, delivery, warranty and after-sales support,
• To schedule meetings and appointments with management,
• To meet legal obligations and respond to requests from authorised bodies,
• To establish, exercise and defend legal claims,
• To keep the website secure, prevent misuse, and measure and improve service quality,
• With your explicit consent, to keep you informed about news and campaigns.

4. Collection Method and Legal Grounds

Your data is collected through website forms, membership and "Sign in with Google", email, phone and WhatsApp correspondence, and automatically while the website runs. It is processed on the following grounds under KVKK Article 5/2:

• It is directly necessary for entering into or performing a contract (quotes, orders, membership),
• It is necessary to meet our legal obligations,
• It is necessary to establish, exercise or defend a right,
• It is necessary for our legitimate interests, provided your fundamental rights are not harmed (website security, visit statistics, service improvement).

Marketing communication is based only on your explicit consent (KVKK Article 5/1). Not giving consent does not prevent you from getting a quote or becoming a member.

5. Transfers

Limited to the purposes above and in line with KVKK Articles 8 and 9, your data may be shared with:

• Technology providers we use: database and authentication (Supabase), website hosting (Vercel), email delivery (our email service provider) and Google if you choose "Sign in with Google",
• WhatsApp (Meta) if you choose WhatsApp as your reply channel,
• Shipping, installation and business partners, to the extent needed to fulfil your order,
• Authorised public bodies and courts.

Some of our technology providers have servers outside Türkiye. Such transfers rely on the appropriate safeguards set out in KVKK Article 9 (standard contracts) or, where that is not possible, on your explicit consent.

6. Retention

Personal data is kept for as long as the law requires or the purpose needs. Membership data is kept while your account is open; order, contract and invoice records for the statutory periods (generally 10 years); quote and contact correspondence for a reasonable period after the request is closed. After that, data is deleted, destroyed or anonymised.

7. Your Rights

Under KVKK Article 11 you may: learn whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to; ask for incomplete or inaccurate data to be corrected; ask for deletion or destruction where the conditions are met and for these actions to be notified to recipients; object to a result against you arising from automated analysis; and claim compensation for damage caused by unlawful processing.

8. How to Apply

To exercise your rights, use the online form on the "Data Subject Request Form" page or email contact@eksado.com from the email address registered with us. Requests are answered free of charge within 30 days at the latest; if the request involves an additional cost, the fee set by the Personal Data Protection Board may apply.