Privacy Policy
This Privacy Policy explains how Toprak Mekatronik Ltd. Şti. (“Toprak Mekatronik”, “we”) processes personal data collected through the website www.toprakmekatronik.com. It is written to meet our obligations under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
Last updated: 31 August 2026
1. Data Controller
The data controller for personal data processed through this website is Toprak Mekatronik Ltd. Şti. You can reach us at:
- Registered address: Demirkol Sokak No: 1/1, 31175 Hatay, Türkiye
- R&D office: METU Technopolis, 06800 Ankara, Türkiye
- E-mail: info@toprakmekatronik.com
- Phone: +90 539 246 87 02
2. Personal Data We Process
We only process data you actively provide, plus the technical data needed to operate the site. We do not ask visitors for identity documents, financial details or health data.
| Data category | Fields collected | Source |
|---|---|---|
| Identity | First name, last name | Contact form |
| Contact | E-mail address | Contact form, newsletter sign-up |
| Professional | Company name, company website | Contact form (optional) |
| Enquiry content | The free-text message you write and the product line you are interested in | Contact form |
| Usage data | Pages viewed, session duration, approximate location (country/city), device and browser type | Google Analytics — only if you have given consent |
| Preferences | Your language and product-line choice, your cookie decision | Cookies and local storage in your browser |
Only first name, last name and e-mail are mandatory in the contact form. Sharing company details and message content is entirely optional.
3. Purposes and Legal Bases
| Purpose | Legal basis (KVKK Art. 5) | GDPR basis |
|---|---|---|
| Responding to your enquiry, evaluating product and demo requests | Directly related to the conclusion or performance of a contract / legitimate interest | Art. 6(1)(b) and 6(1)(f) |
| Sending newsletters and product announcements | Explicit consent | Art. 6(1)(a) |
| Measuring site usage and improving content | Explicit consent (cookie banner) | Art. 6(1)(a) |
| Remembering your language and product-line preference | Legitimate interest — delivering the service you requested | Art. 6(1)(f) |
| Complying with legal obligations and establishing or defending legal claims | Legal obligation / establishment and defence of legal claims | Art. 6(1)(c) and 6(1)(f) |
We do not use your personal data for automated decision-making or profiling, and we never sell it.
4. Service Providers and Transfers
We do not share your data with third parties for marketing purposes. We rely on the following providers solely to operate the site and our communication processes:
| Provider | Role | Data location |
|---|---|---|
| Amazon Web Services (AWS) | Database and API infrastructure storing contact form and newsletter records | Ireland (eu-west-1) |
| Google Ireland Limited | Google Analytics 4 — activated only if you accept analytics cookies | European Union and United States |
| Vercel Inc. | Website hosting and content delivery | Globally distributed infrastructure |
Because some of these providers process data outside Türkiye, a cross-border transfer takes place under KVKK. Transfers are secured through standard contractual clauses pursuant to KVKK Art. 9 or — as with analytics cookies — based on your explicit consent. Data processing agreements are in place with every provider.
Where a competent public authority makes a lawful and properly formulated request, we may disclose data strictly limited to the scope of that request.
5. Retention Periods
- Contact form records: 3 years from the resolution of your enquiry. If a commercial relationship is established, records are kept for the 10-year statutory limitation period following its end.
- Newsletter subscriptions: until you unsubscribe. Your record is deleted within 30 days of your request at the latest.
- Analytics data: limited to Google Analytics’ 14-month retention window.
- Cookies and preference records: stored in your browser for the periods listed in the Cookie Policy.
Data whose retention period has expired is deleted or irreversibly anonymised as part of our periodic disposal process.
6. Data Security
- All site and API traffic is encrypted with TLS; form submissions travel over HTTPS.
- Access to database records is role-based and limited to personnel who need it for their duties.
- Data is stored encrypted at rest.
- The contact form is protected by bot detection and submission rate limiting to block automated abuse.
- Our personnel are bound by confidentiality obligations and are trained on personal data security.
Despite all technical and organisational measures, no transmission over the internet can be guaranteed to be absolutely secure. Should we identify a breach affecting your data, we will notify the Turkish Data Protection Authority and you within the periods required by law.
7. Your Rights
Under KVKK Art. 11 and the GDPR you have the following rights:
- Learn whether your personal data is being processed and request information about it
- Learn the purpose of processing and whether the data is used accordingly
- Know the third parties to whom data is transferred, in Türkiye or abroad
- Request correction of incomplete or inaccurate data
- Request erasure or destruction of your data
- Request that corrections, erasures and destructions be notified to third parties the data was transferred to
- Object to a result reached solely through automated analysis that works to your detriment
- Claim compensation for damage arising from unlawful processing
- Withdraw consent at any time (withdrawal does not affect the lawfulness of prior processing)
You can submit requests to info@toprakmekatronik.com or in writing to our registered address. We respond free of charge within 30 days at the latest. See our KVKK Disclosure Notice for the detailed application procedure.
8. Children’s Privacy
Although some of our products are designed for children, this website addresses adults — parents, caregivers, clinicians and institutional buyers. We do not knowingly collect personal data from anyone under 18 through this site. If you believe a child’s data has been submitted to us without consent, write to info@toprakmekatronik.com and we will delete the record without delay.
9. Changes to This Policy
We may revise this policy in line with legislative changes or updates to our services. The current version is always published on this page and the “last updated” date at the top is amended. For material changes, we notify our newsletter subscribers by e-mail.