English translation provided for convenience. The Turkish text is the governing version.
As TORATAY Makina Mühendislik Savunma Medikal ve Güvenlik Sistemleri İmalat Ltd. Şti. (“Toratay”), we explain in this notice, pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), why and how we process the personal data you share with us through toratay.com, by email or by phone.
Data controller
The data controller is TORATAY Makina Mühendislik Savunma Medikal ve Güvenlik Sistemleri İmalat Ltd. Şti., HAB OSB Mahallesi, Uzay ve Havacılık OSB Küme Evler No: 189 EA, Kahramankazan / Ankara, Türkiye. You can reach us at info@toratay.com or +90 507 218 40 70.
Personal data we process
Quotation form and contact
Identity and contact details: your name and email address, and optionally your company name and phone number. Request details: your message and the service, equipment, material and quantity you select. When you email or call us, the information you share that way.
Server logs
When you visit the site, the hosting server keeps a technical log of your IP address, the date and time of the visit, the page you opened and your browser details.
Purposes and legal bases
We process quotation form and contact data to evaluate your request, prepare a quotation and reply to you. The legal bases are that the processing is directly related to the formation of a contract (KVKK Art. 5/2-c) and our legitimate interest in responding to your request (Art. 5/2-f).
We process server logs to keep the site secure, prevent misuse and meet lawful requests from the competent authorities. The legal bases are our legitimate interest (Art. 5/2-f) and our legal obligations (Art. 5/2-ç).
We do not rely on your explicit consent for this processing. We do not use your data for marketing, profiling or automated decision-making, and we do not send you newsletters or promotional emails.
How we collect data
We collect your data electronically: directly from you when you fill in the quotation form, email us or call us, and automatically, in the case of server logs, while you visit the site.
Transfers
We do not sell your personal data or share it with anyone for marketing. It may be transferred, only for the purposes above, to the provider that hosts our website and email (acting as data processor) and, on request, to public authorities legally entitled to receive it.
Our website and email run on servers located in Türkiye. We do not transfer your personal data abroad.
Retention
Quotation requests and correspondence that do not lead to a contract are kept for 2 years from the last message. Records of requests that lead to a contract are kept for the 10-year period required by Turkish commercial law. Server logs are kept for at most 2 years. When the period ends, your data is erased, destroyed or anonymized.
Cookies and third-party services
The site uses no cookies, analytics or advertising tools, and fonts are served from our own server. Only a record containing no personal data is kept in your browser so that the language suggestion is not shown again; it is never sent to us. Location links open Google Maps, where Google’s own privacy terms apply.
Your rights
Under Article 11 of the KVKK, you have the right to:
- 01
Learn whether your personal data is processed
- 02
Request information about the processing if it has been processed
- 03
Learn the purpose of the processing and whether the data is used in line with that purpose
- 04
Know the third parties in Türkiye or abroad to whom the data has been transferred
- 05
Request correction of incomplete or inaccurate data
- 06
Request erasure or destruction of the data under the conditions in Article 7 of the KVKK
- 07
Request that any correction, erasure or destruction be notified to the third parties to whom the data has been transferred
- 08
Object to a result against you that arises from analysis of the data exclusively by automated systems
- 09
Claim compensation if you suffer damage because of unlawful processing
How to apply
You can send requests concerning your rights in writing to our address above, together with information that lets us verify your identity, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. You can also email info@toratay.com from an email address you have previously given us and that is registered in our records.
We resolve requests free of charge as soon as possible, depending on their nature, and within 30 days at the latest. If the request involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your request is rejected, you find our answer insufficient or we do not answer in time, you may file a complaint with the Board under Article 14 of the KVKK.
Last updated: 30 October 2026