This notice is issued by the data controller under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the disclosure obligation. It explains why and on what legal grounds your personal data is processed on this site and through our contact channels, and what your rights are. If you are in the EU or EEA, the GDPR may also give you rights.

1. Data controller

Data controller: MAK Fermuar (international brand: MAK Zipper)
Address (sales store): Semaver Sokak No: 21, Mercan, Fatih, İstanbul
Email: [email protected]
WhatsApp: +90 532 494 23 90

2. What we process and why

Purpose	Data	Legal ground
Receiving your sample form (on the sample page or in the pop-up), answering sample and price requests, contacting you	Your email address, your note and anything you share in it	Directly related to forming a contract (Art. 5/2-c)
Answering questions you send by email or WhatsApp	Your name, contact details, the content of your message	Forming or performing a contract (Art. 5/2-c). For questions unrelated to a contract, our legitimate interest (Art. 5/2-f)
Sending samples, handling orders, invoicing and shipping	Full name, company, address, contact details, order and invoice details	Performing a contract (Art. 5/2-c), our legal obligations (Art. 5/2-ç)
Keeping the site working and secure	IP address, date and time, page opened, browser and device details (server logs)	Our legitimate interest (Art. 5/2-f)
Showing the map on the contact page, only if you ask for it	IP address, browser and device details, Google's own cookies	Your explicit consent (Art. 5/1): the map does not load unless you press “Show map”
Answering applications made under this notice	Your identity and contact details, your request, documents you attach	Our legal obligation (Art. 5/2-ç)
Protecting our rights if a dispute arises	Those of the records above that relate to the dispute	Establishing, exercising or protecting a right (Art. 5/2-e)

We do not ask for sensitive data such as health, religion or ethnic origin. Please do not include it in the form's note field or in your messages.

3. How we collect data

Most data comes from you. The sample form, email and WhatsApp messages reach us electronically, by partly automated means. What you tell or give us at the store or during an order is collected by non-automated means. Server logs are created automatically when you visit the site.

4. Who receives data and why

FormSubmit (formsubmit.co): When you send the sample form, to deliver your email address and note to info@makfermuar.com.
WhatsApp (Meta): Only if you press a WhatsApp link. The WhatsApp button adds your note as a message to the link that opens WhatsApp. Meta processes your messages under its own terms.
Google (Google Maps): Only if you press “Show map”, to load the map.
Cloudflare: For domain, hosting and site security services; IP address and technical logs.
Google Workspace: To receive, send and store our email; email content and contact details.
Shipping and transport companies: To deliver your sample or order, using the name, address and phone details needed.
Financial and legal advisers: For our legal obligations and to protect rights, limited to the records needed.
Competent public authorities: When the law requires it.

We do not share your data with other third parties, sell it or let others use it for marketing.

5. Transfers abroad

FormSubmit, Cloudflare, Google and WhatsApp are services of companies operating outside Türkiye. When these services are used, your data may be transferred abroad (KVKK Art. 9).

Cloudflare and Google Workspace: Data is transferred under KVKK Art. 9 so that the site and our email can run.
Form: The transfer is necessary so that we can take pre-contract steps at your request (Art. 9/6-b). If you prefer not to use the form, you can email us directly or visit our store.
WhatsApp: You send the message from your own account. Meta receives the data and processes it under its own terms.
Map: Pressing “Show map” is your explicit consent (Art. 9/6-a). If you do not press it, no data goes to Google this way.

Possible risks: other countries may not offer the level of protection found in Türkiye, public bodies there may access the data, and using your rights may be harder.

6. How long we keep data

Commercial books and documents, order records: 10 years (Turkish Commercial Code Art. 82).
Tax records and invoices: 5 years (Tax Procedure Law Art. 253). The 10-year period applies to those that are also commercial records.
Sample requests and correspondence that do not become orders: 2 years from the last message.
Server logs: A limited time, depending on the hosting settings.

When the period ends or the reason for processing no longer exists, data is deleted, destroyed or anonymised (KVKK Art. 7). If there is a dispute, the related records may be kept until it is resolved.

7. Data security

We take the technical and organisational measures required by KVKK Art. 12 to prevent unauthorised access and unlawful processing. Only people who need the data for their work can access it.

8. Cookies and browser storage

Cookies: Our site itself does not use cookies. Cloudflare may use essential security cookies to protect the site from abuse.
Browser storage: To remember your light or dark theme choice, we write an entry named mak-theme to your browser's localStorage. It holds only “light” or “dark”, stays on your device and is not sent to us. You can remove it by clearing your browser's site data.
Google Maps: The map does not load until you press “Show map”. When you press it, Google may use its own cookies.
Analytics and advertising: No visitor analytics or advertising tracking tool runs on the site at the moment. If we add one, we will update this notice before it starts.
External links: WhatsApp and map links take you to other sites, which follow their own rules.

9. Your rights (KVKK Art. 11)

By applying to us, you can:

Learn whether your data is processed and, if so, ask for information about it.
Learn the purpose of processing and whether the data is used for that purpose.
Learn which third parties in Türkiye or abroad received your data.
Ask us to correct incomplete or wrong data.
Ask us to delete or destroy your data under the conditions in KVKK Art. 7.
Ask us to tell the recipients about any correction, deletion or destruction.
Object to a result against you that comes only from analysis by automated systems.
Claim compensation if unlawful processing has caused you harm.

10. How to apply

Under the Communiqué on applications to the data controller, applications must be made in Turkish, in one of these ways:

By signed letter: Semaver Sokak No: 21, Mercan, Fatih, İstanbul
With a secure electronic signature or mobile signature: [email protected]
From an email address you gave us earlier and that is registered in our system: [email protected]

Your application must include your full name, your signature if written, your Turkish ID number (foreigners: nationality and passport number, or ID number if any), an address for notices, your email and phone if any, and the subject of your request. Attach any related documents.

We resolve requests within 30 days at the latest, free of charge. If a written reply is longer than 10 pages, 1 Turkish lira per extra page may be charged. If the reply is given on a medium such as a CD or memory stick, the cost of that medium may be charged. If your application is refused, you find the reply inadequate or you get no reply in time, you can complain to the Personal Data Protection Board within 30 days of learning the reply and in any case within 60 days of your application.

11. Changes

If the way we process data changes, we will update this notice. The current version is always on this page.

Last updated: 3 November 2026

Privacy Notice