Legal
Privacy Notice
Last updated: 25 October 2026
What is this notice for?
Packageturk Ambalaj Sanayi ve Dış Ticaret Ltd. Şti. (“Packageturk”) processes the personal data of packageturk.com visitors, of people who contact us with a quotation or information request, and of our business contacts as the data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”). This notice fulfils the information duty under Article 10 KVKK. It is an information notice; it does not depend on your approval or consent. The only processing based on consent is analytics cookies, and that consent is asked for separately in the cookie banner.
1. Data controller
- Legal name: Packageturk Ambalaj Sanayi ve Dış Ticaret Ltd. Şti.
- MERSİS: 0719-0575-5080-0001
- Trade registry no.: 1049176
- Tax office / no.: Beyoğlu Vergi Dairesi / 7190575508
- Address: Teknopark İstanbul Cube Beyoğlu, Şehit Muhtar Mah. Mis Sk. No:24 İç Kapı No:28 Beyoğlu / İstanbul 34435
- Phone: +90 531 836 76 32
- E-mail: packageturk@packageturk.com
- KEP: packageturk@hs03.kep.tr
2. Data processed, purposes and legal bases
Article numbers in the legal basis column refer to Article 5 KVKK.
| Data | How it is collected | Purpose | Legal basis | Recipients |
|---|---|---|---|---|
| Enquiries: first and last name, e-mail, phone and company (optional), subject, message | Contact form (an e-mail draft you send from your own mail app), e-mail, phone | Answering your enquiry, running the quotation and sample process | Steps prior to a contract (KVKK Art. 5/2-c — quotation and order requests); legitimate interest (Art. 5/2-f) for general questions | Zoho (business e-mail service, EU data centre) |
| WhatsApp conversations: phone number, profile name, messages and files you share | When you write to our WhatsApp line | Answering your enquiry, quotation and order communication | Steps prior to a contract (Art. 5/2-c); legitimate interest (Art. 5/2-f) | WhatsApp Ireland Ltd. / Meta (platform provider) |
| Customer and supplier contacts: name, title, contact details; order, shipping and invoice details | During quotations, orders and correspondence | Producing and delivering orders, invoicing, export and customs procedures, accounting | Performance of a contract (Art. 5/2-c); legal obligation (Art. 5/2-ç — Turkish Commercial Code, Tax Procedure Law, customs law) | Courier and logistics companies, customs broker, accountant, banks; competent public authorities on request |
| Security: IP address and the country derived from it, browser details, requested page and time | Automatically when you visit the site (server logs) | Serving and securing the site; sending visitors from Türkiye to the Turkish pages | Legitimate interest (Art. 5/2-f) | Vercel Inc. (hosting, USA) |
| Analytics: pseudonymous browser ID, IP, pages visited, clicks on contact links, 3D model for which the AR view is opened | Google Analytics cookies; only if you allow “analytics” in the cookie banner | Measuring and improving how the site is used | Explicit consent (Art. 5/1) — can be withdrawn at any time via Cookie Preferences | Google Ireland Ltd. / Google LLC (USA) |
The site has no user accounts, no online payments and does not collect payment details. We do not ask for special categories of data (health, biometrics etc.); please do not include them in your messages.
3. Transfers
Your data is shared only for the purposes in the table above, to the extent necessary, with the recipient groups listed there. We do not sell personal data and do not share it with third parties for advertising.
International transfers (KVKK Art. 9): our hosting provider Vercel is located in the USA; the Zoho data centre we use for e-mail is in the European Union. If you choose to contact us on WhatsApp, your messages are processed on Meta’s infrastructure; this transfer is necessary for the pre-contractual communication you started (Art. 9/6-b). Transfers to Google Analytics rely solely on your explicit consent to analytics cookies (Art. 9/6-a) and stop when you withdraw it. Other transfers take place within the safeguards provided in Article 9 KVKK, solely to provide the service.
4. How data is collected
Data is collected electronically when you send it to us through the contact form, e-mail, phone or WhatsApp, through correspondence during a business relationship, and automatically while you use the site (server logs; analytics cookies with your consent). We do not buy data from third parties.
5. Retention
- Enquiries: up to 2 years after the enquiry is closed; 10 years as business correspondence if it leads to a business relationship (Turkish Commercial Code Art. 82).
- Order and invoice records: 10 years (Turkish Commercial Code Art. 82, Tax Procedure Law Art. 253).
- Server logs: short-term at the hosting provider, at most 30 days.
- Analytics data: at most 14 months in our Google Analytics account.
Data whose retention period has expired is deleted, destroyed or anonymised.
6. Your rights and how to apply
Under Article 11 KVKK you may learn whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties it is transferred to, ask for incomplete or incorrect data to be corrected, ask for deletion or destruction under Article 7 KVKK and for these actions to be notified to recipients, object to a result against you arising from automated analysis, and claim compensation for damage caused by unlawful processing.
You can send your request through:
- Post: Teknopark İstanbul Cube Beyoğlu, Şehit Muhtar Mah. Mis Sk. No:24 İç Kapı No:28 Beyoğlu / İstanbul 34435
- Registered e-mail (KEP): packageturk@hs03.kep.tr
- E-mail: packageturk@packageturk.com (from the e-mail address you previously used with us)
We respond free of charge within 30 days at the latest. If your request is rejected, the answer is insufficient or we do not respond in time, you may complain to the Turkish Personal Data Protection Authority (KVKK).
For cookies see also the Cookie Policy.
This English text is a translation provided for convenience. The Turkish version of this document is the legally binding text; in the event of any discrepancy, the Turkish version prevails.