KVKK Privacy Notice
We explain, under Turkish Personal Data Protection Law no. 6698, why we process your personal data, who we share it with, how long we keep it and what your rights are.
Last updated: 28 July 2026
01 Data Controller
This notice has been prepared by B.E.S. KİMYA KAUÇUK SANAYİ VE TİCARET A.Ş. (the “Company”) in its capacity as data controller, pursuant to Article 10 of Turkish Personal Data Protection Law no. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
| Item | Details |
|---|---|
| Data controller | B.E.S. KİMYA KAUÇUK SANAYİ VE TİCARET A.Ş. |
| Registered address | Yassıören Mah. Mediha Sk. No: 14 İç Kapı No: 1 Arnavutköy / İstanbul |
| Tax office / number | Yenikapı · 1270390374 |
| Telephone | +90 (212) 771 12 71 · +90 (212) 771 12 76 |
| Channel for requests | Set out in the “Your Rights and How to Apply” section of this notice |
02 Personal Data Processed
Our business is corporate (B2B) in nature; your data is mostly processed in your capacity as an employee, officer or representative acting on behalf of a legal entity. The categories processed, by channel, are set out below.
| Data category | Examples | Collection channel |
|---|---|---|
| Identity | First and last name, the company represented, role/title | Contact form, e-mail, telephone, WhatsApp, trade-fair meetings |
| Contact | E-mail address, telephone number, company address | Contact form, e-mail, telephone, WhatsApp |
| Customer transaction | Content of enquiries/quotations, sample requests, order and delivery records, correspondence | Enquiry and order processes |
| Financial | Invoicing and payment details (where a commercial relationship is established) | Commercial processes |
| Transaction security | IP address, browser and device information, visit logs, cookie identifiers | Website and server logs |
Special categories of personal data (health, biometric data and the like) are neither requested nor processed. Please do not enter such information into our forms.
03 Purposes of Processing
- Responding to product, quotation, sample and technical support requests
- Establishing the commercial relationship, negotiating and performing the contract; running order, production planning, shipping and after-sales support processes
- Carrying out invoicing, collection, accounting and financial reporting processes
- Assessing quality complaints, returns and technical investigations
- Fulfilling statutory retention, disclosure and reporting obligations
- Securing the website, preventing misuse and resolving technical issues
- Sending commercial electronic messages where you have given explicit consent
04 Legal Bases
Your personal data is processed on the following legal bases under Article 5 of the KVKK:
| Legal basis (KVKK art. 5/2) | Processing it covers |
|---|---|
| Conclusion or performance of a contract (c) | Quotation, sample, order, delivery and after-sales processes |
| Legal obligation (ç) | Invoice and ledger records, tax and commercial law obligations |
| Legitimate interest (f) | Managing contact requests, website and network security, evidence in disputes |
| Establishment and protection of rights (e) | Exercising the right of defence in potential legal disputes |
| Explicit consent (art. 5/1) | Non-essential cookies and the sending of commercial electronic messages |
05 Transfers
Your personal data may be transferred to the following parties, strictly limited to the purposes above and subject to the conditions in Articles 8 and 9 of the KVKK:
- IT infrastructure providers (server hosting, e-mail delivery, security services)
- Logistics and courier companies (limited to the information required for shipment)
- Accountants, independent auditors and legal advisers engaged by the Company
- Authorised public authorities and institutions (upon request and as required by law)
Transfers abroad take place only where the servers of the IT services used are located outside Türkiye, and only if the conditions of Article 9 of the KVKK are met. Data processing agreements are concluded with those providers and the necessary technical and organisational measures are applied.
06 Retention Periods
| Data | Retention period |
|---|---|
| Contact and quotation enquiries that do not lead to a commercial relationship | 2 years from closure of the enquiry |
| Contracts and commercial records, invoices and ledgers | 10 years as required by law (Turkish Commercial Code art. 82, Tax Procedure Law) |
| Website server and security logs | Up to 2 years |
| Consent records for commercial electronic messages | 3 years from withdrawal of consent |
At the end of the period your personal data is erased, destroyed or anonymised.
07 Your Rights and How to Apply
Under Article 11 of the KVKK you have the right to: learn whether your personal data is being processed; request information if it has been; learn the purpose of processing and whether it is used in line with that purpose; know the third parties to whom it has been transferred in Türkiye or abroad; request rectification if it is incomplete or inaccurate; request its erasure or destruction; request that such actions be notified to the third parties to whom the data was transferred; object to an outcome adverse to you arising solely from automated analysis; and claim compensation for damage suffered as a result of unlawful processing.
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your request in writing to the Company’s registered address, or send it from the e-mail address you have previously notified to us and which is registered in our systems. Your request is concluded within thirty days at the latest; where the process entails an additional cost, the fee set out in the tariff determined by the Board may be charged.
Your application must state your full name, your signature (for written applications), your request and any relevant information and documents. The application must allow your identity to be established.
Other legal documents