In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by Erbo Plastik ve Ambalaj San. ve Tic. Ltd. Şti. (the "Company") as the data controller, within the scope described below.
1. Data controller
- Company name: Erbo Plastik ve Ambalaj San. ve Tic. Ltd. Şti.
- Address: Beylikdüzü OSB Mahallesi 14.Cadde No:2 Beylikdüzü/İstanbul
- E-mail: info@erboplastik.com
- Phone: +90 212 875 87 00
2. Which personal data do we process?
- Contact form: name and surname, company name, e-mail address, phone number, the content of your message and the product you are interested in.
- Technical drawing request form: name and surname, company name, job title, e-mail address, phone number, your note; and, to prevent misuse, the IP address from which the request was sent.
- Customer portal: the name and surname, e-mail address and password (stored in irreversibly encrypted form) of the authorised person of our customer company, order and document information; for security purposes, the IP address and e-mail address used in failed login attempts.
- Personal data request form: the identity and contact details you provide in your request and the content of your request.
- Website visits: the pages visited, the referring address (e.g. a search engine), the type of device, browser and operating system, and the browser language. No cookies are used and your IP address is not recorded for these statistics; visits are counted with a code that changes every day and does not reveal your identity. In addition, only if you accept cookies, usage statistics such as page views, session duration, approximate location (city/country) and device information are collected through Google Analytics.
- Phone, e-mail and WhatsApp correspondence: the information you share when you contact us through these channels.
3. For what purposes do we process your personal data?
- To evaluate your requests for information, samples, quotations and technical drawings and to get back to you,
- To carry out sales, order, shipment and contract processes; to share order status and documents via the customer portal,
- To ensure information security and prevent misuse of the website and forms,
- To evaluate and improve the operation and use of the website (with anonymous statistics),
- To fulfil obligations arising from legislation and respond to requests from competent authorities,
- To conclude your requests under the KVKK.
4. How do we collect your personal data and on what legal grounds?
Your personal data is collected electronically, partly by automated means, through the forms on our website, the customer portal, e-mail, phone and WhatsApp. Your data is processed on the following legal grounds set out in Article 5(2) of the KVKK:
- It is directly related to the establishment or performance of a contract (quotation, sample, order and customer portal transactions) — Art. 5/2-c,
- It is necessary for the data controller to fulfil its legal obligations — Art. 5/2-ç,
- It is necessary for the establishment, exercise or protection of a right — Art. 5/2-e,
- It is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (replying to your request, information security, anonymous website statistics) — Art. 5/2-f.
Your explicit consent is not requested for these activities. If an activity requires your explicit consent (e.g. marketing messages), it will be asked for separately and on an optional basis.
5. To whom do we transfer your personal data?
For the purposes above and to the extent necessary, your personal data may be transferred to:
- Our service providers in Türkiye that host our website and e-mail service,
- Our business partners such as our financial advisor and legal counsel,
- Competent public authorities and institutions upon request and to the extent permitted by law.
If you accept cookies, usage data collected by Google Analytics is transferred on the basis of your explicit consent (Art. 9 KVKK) to servers of Google LLC abroad (including the USA); apart from this, your personal data is not transferred abroad. The map on our website is loaded from Google Maps only when you click the "Show map" button; the WhatsApp link opens the WhatsApp application only when you click it. When you choose to use these services, the privacy policies of the respective companies apply.
6. How long do we keep your personal data?
- Contact form messages and technical drawing requests: for the statutory limitation periods under the relevant legislation after your request has been concluded and the business relationship has ended.
- IP addresses in technical drawing requests: 30 days.
- Customer portal records: for the duration of the business relationship and for the periods required by the relevant legislation.
- Failed login attempt records: 24 hours.
- Website statistics: up to 400 days (in a form that does not reveal your identity).
- Database backups: up to 12 months.
Data whose retention period has expired is deleted, destroyed or anonymised.
7. Your rights under Article 11 of the KVKK
By applying to our Company, you have the right to:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used in accordance with its purpose,
- Know the third parties in Türkiye or abroad to whom it is transferred,
- Request correction if it has been processed incompletely or inaccurately,
- Request its deletion or destruction under the conditions set out in Article 7 of the KVKK,
- Request that the correction, deletion or destruction be notified to the third parties to whom the data has been transferred,
- Object to a result against you arising from the analysis of the processed data exclusively by automated systems,
- Claim compensation if you suffer damage due to unlawful processing.
8. How to apply
You can submit your requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- Through the Personal Data Request Form on our website (http://www.erboplastik.com/en/kvkk-basvuru.php),
- With a signed petition accompanied by documents proving your identity, in person or through a notary, to Beylikdüzü OSB Mahallesi 14.Cadde No:2 Beylikdüzü/İstanbul,
- From an e-mail address previously notified to our Company and registered in our system, to info@erboplastik.com.
Your request will be concluded free of charge as soon as possible according to its nature and within 30 days at the latest. If the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged.
Last updated: 5 October 2026