The framework for processing, protecting and retaining personal data.
To be finalised once the legal company name, contact channel and company-specific data processing details have been verified.
Draft dated:
Scope of this policy
This is a draft framework for processing data relating to Yılpan website visitors and people making sample or quotation requests. It does not replace a data inventory covering all company employment, supplier and customer processes.
Core principles
- Use information lawfully and fairly.
- Keep information up to date where necessary and correct inaccuracies.
- Make the collection purpose clear and avoid requesting unnecessary data.
- Keep use relevant and proportionate to its purpose.
- Retain information only for as long as the relevant purpose or legislation requires.
Processing purposes and access
Website requests concern product selection, samples and quotations. Access to messages should be limited to the needs of staff responsible for responding. If a request progresses to sales, shipping or accounts, the relevant data categories and recipients must be established separately.
An appropriate legal basis is assessed for each use of personal data. Providing privacy information and obtaining consent are different activities; consent is not automatically required for every activity where another legal basis exists.
Protection and retention
Access permissions, account security, backups, staff guidance and provider checks must be determined according to the systems the company uses. This policy does not assume that unverified technical measures have already been implemented.
Data whose retention period has ended or whose processing purpose no longer applies should be erased, destroyed or anonymised in line with applicable law and the company’s disposal procedures. Retention periods and disposal intervals must be confirmed against company records.
Overseas services
Depending on the hosting, Google Maps, WhatsApp or email provider, international data transfers may arise. Such transfers require assessment of adequacy, appropriate safeguards or applicable exceptions under the current Article 9 of the KVKK. Reading a page or ticking a general box is not sufficient for all transfers.
Exercising your rights
Requests, identity checks and responses should be handled by people authorised by the company. For application methods and data subject rights, see the Privacy notice.
Contact address shown on the website: Büğdüz Mah. Büğdüz Küme Evleri No:365, Akyurt / Ankara, Türkiye. General enquiries: info@yilpan.com and +90 530 285 78 26.
Official reference: KVKK guidance on international data transfers