Privacy Notice Your data, handled responsibly.

01Data controller

The data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”) is Boytorun Kimya Sanayi A.Ş. (“Boytorun”, “we”), a family-owned manufacturer of construction chemicals established in Istanbul in 1965.

Address: İ.E.T.T. Sitesi, 3. Blok, D:1, Emirgan 34467, Sarıyer, Istanbul, Türkiye
E-mail: info@boytorun.com · Telephone: +90 212 229 18 29

This notice applies to personal data processed through boytorun.com, boydurm12.com and our other communication channels. For visitors in the European Economic Area, it also provides the information required by the EU General Data Protection Regulation (“GDPR”).

02Personal data we process

• Identity data: name and surname, job title.
• Contact data: e-mail address, telephone number, company and postal address.
• Customer and business data: company and country, enquiry content, requested documents, quotations, orders, delivery, invoice and payment records, partnership information such as territory and industries served.
• Communication records: messages sent by e-mail, web forms, WhatsApp or telephone.
• Technical data: IP address, browser and device information, pages visited and cookie data.
• Marketing data: your communication preferences — only if you have given consent.

We do not request special categories of personal data (such as health, biometric or religious data). Please do not include such information in your messages.

03How we collect personal data

We collect personal data directly from you through our website forms, e-mail, telephone, WhatsApp, meetings, trade fairs and business cards; from your company when we work with it; and automatically through cookies and server logs when you use our websites.

04Purposes and legal bases

05Who we share personal data with

Limited to the purposes above and only as far as necessary, personal data may be shared with:

• our authorised employees and representatives;
• our group companies, shareholders and business partners;
• authorised Boydur® distributors or applicators in your region, where needed to answer your enquiry or support your project;
• service providers that support our operations, such as IT, hosting, e-mail, form-processing, messaging, logistics and customer-satisfaction survey providers, acting on our instructions;
• independent auditors and professional advisers;
• public institutions and authorities legally authorised to request the data.

We do not sell personal data.

06Transfers abroad

Some service providers and business partners are located outside Türkiye. Transfers abroad are carried out in accordance with KVKK Article 9 — for example on the basis of standard contracts notified to the Personal Data Protection Authority, or where the transfer is necessary to perform a contract with you — and, where the GDPR applies, with appropriate safeguards under Chapter V of the GDPR.

07How long we keep personal data

Personal data is kept only for as long as necessary for the purpose for which it was collected and for the periods required by law. Enquiries that do not lead to a business relationship are kept for up to 2 years. Records relating to customers, contracts and transactions are kept for the statutory periods under Turkish commercial and tax law (generally 10 years). At the end of these periods data is deleted, destroyed or anonymised.

08Security

We take appropriate technical and administrative measures — including encrypted connections, access authorisation, confidentiality obligations for staff and secure storage — to prevent unlawful processing of and access to personal data. If personal data is obtained by others unlawfully, we will notify you and the Personal Data Protection Board as required by KVKK Article 12.

09Cookies

Our websites use cookies that are strictly necessary for them to work. Analytics and other non-essential cookies are used only if you accept them through the cookie banner. You can change your choice at any time through the cookie settings or your browser.

10Your rights

Under KVKK Article 11, you have the right to:

• learn whether your personal data is processed;
• request information if it has been processed;
• learn the purpose of processing and whether it is used in line with that purpose;
• know the third parties in Türkiye or abroad to whom it is transferred;
• request correction if it is incomplete or inaccurate;
• request deletion or destruction when the reasons for processing no longer exist;
• request that such corrections or deletions be notified to third parties to whom the data was transferred;
• object to a result against you arising exclusively from automated analysis;
• claim compensation for damage caused by unlawful processing.

If the GDPR applies to you, you also have the rights to restriction of processing, data portability, objection to processing based on legitimate interests, and to withdraw consent at any time without affecting earlier processing.

11How to apply

You can submit your request in writing, stating your name, surname, signature (for written applications), T.R. identity number or, for foreign nationals, nationality and passport number, address, e-mail or telephone number, and the subject of your request:

• in person or through a notary to: Boytorun Kimya Sanayi A.Ş., İ.E.T.T. Sitesi, 3. Blok, D:1, Emirgan 34467, Sarıyer, Istanbul, Türkiye;
• by registered electronic mail (KEP), secure electronic signature or mobile signature;
• by e-mail to info@boytorun.com from the e-mail address you have previously notified to us and that is registered in our systems.

We will respond within 30 days at the latest, free of charge unless the response requires an additional cost under the tariff set by the Personal Data Protection Board. We may ask for information to verify your identity. If your request is rejected or our answer is insufficient, you may complain to the Personal Data Protection Board; visitors in the European Economic Area may also contact their local supervisory authority.

12Changes to this notice

We may update this Privacy Notice to reflect legal or operational changes. The current version is always published on this page with its “last updated” date.