Personal Data Notice
Personal data ZTM Makine processes through ztmmakine.com.tr, purposes, transfers, retention periods and your rights under Turkish data protection law (KVKK).
Last updated: 16 October 2026
As ZTM Makine Sanayi ve Ticaret Limited Şirketi ("ZTM Makine" or the "Company"), we care about the security of your personal data. This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the related Communiqué on the Duty to Inform, to explain how personal data collected through the ztmmakine.com.tr website (the "Site") is processed.
1. Data controller
Your personal data is processed by ZTM Makine Sanayi ve Ticaret Limited Şirketi as data controller.
- Address: Ata Mah. 773 Sk. No:14E, 09100 Efeler, Aydın, Türkiye
- E-mail: info@ztmmakine.com.tr
- Phone: +90 256 212 45 42
2. Personal data processed
| Category | Data | Where collected |
|---|---|---|
| Identity | Full name | Quote, service and contact forms |
| Contact | E-mail address, phone number, city and country | Quote, service, contact and newsletter forms |
| Customer transaction | Company name, product of interest, machine serial number, part code, request and message content | Quote, service and contact forms |
| Visual records | Machine or fault photos attached to a service request | Service form |
| Transaction security | IP address, browser information (user agent), submission time, bot-check result | All forms |
| Marketing | Newsletter subscription and consent record (date, IP) | Newsletter form |
| Cookies and usage | Your cookie preference; with your consent, visit statistics and advertising measurement data | Cookies (see Cookie Policy) |
The Site has no user accounts or payments. We do not request special categories of personal data (health, biometric, etc.); please do not include such data in messages or photos.
3. Purposes of processing
- Evaluating your quote request and providing prices and technical information,
- Handling after-sales service, spare parts and fault requests,
- Answering questions and requests sent through the contact form,
- Routing your request to the relevant department (sales, service, spare parts, export),
- Sending newsletters, product and trade-fair announcements if you consent,
- Measuring Site usage and advertising effectiveness if you consent,
- Ensuring information security and preventing spam, bots and misuse,
- Meeting legal obligations, responding to authorities and establishing or defending legal claims.
4. Collection method and legal bases
Personal data is collected electronically, by automated and partly automated means, when you complete forms on the Site and through cookies. Legal bases:
- KVKK Art. 5/2 (c) — formation or performance of a contract: quote, sales and service processes,
- KVKK Art. 5/2 (ç) — legal obligation: obligations under Law No. 5651 and other legislation, requests from authorities,
- KVKK Art. 5/2 (e) — establishing, exercising or protecting a right: keeping records in case of disputes,
- KVKK Art. 5/2 (f) — legitimate interest: responding to enquiries, information security and spam prevention,
- KVKK Art. 5/1 — explicit consent: newsletters (commercial electronic message consent under Law No. 6563), analytics and marketing cookies.
5. Transfers of personal data
Your personal data is shared only for the purposes above and to the extent necessary with:
- Our hosting provider: the server service in Türkiye where the Site and its data are stored,
- Google LLC / Google Ireland Ltd.: corporate e-mail (Google Workspace) for request notifications and replies; the address map on the contact page (Google Maps, IP address); Google Analytics and Google Tag Manager if you consent,
- Cloudflare, Inc.: bot and spam checks on forms (Cloudflare Turnstile),
- Meta Platforms Ireland Ltd.: advertising measurement (Meta Pixel) only if you consent to marketing cookies,
- Competent public authorities and courts: where required by law.
As Google, Cloudflare and Meta operate servers outside Türkiye, these are transfers abroad under KVKK Article 9 and are made with one of the appropriate safeguards provided by the Law (e.g. the standard contract published by the Personal Data Protection Board). New-request alerts may also be sent to our team via a messaging app; these alerts contain no personal data, only the request type and a link to the admin panel.
6. Retention periods
- Quote, service and contact requests: kept for 24 months from the request date, then anonymised by deleting all identifying fields; attached photos and internal notes are deleted. If a request leads to a contract, the related records are kept for the periods required by the Turkish Commercial Code and tax legislation.
- Newsletter: unconfirmed sign-ups are deleted after 7 days; a confirmed subscription is kept until you unsubscribe or withdraw consent, at which point it is deleted.
- Cookie preference: 6 months; durations of analytics and marketing cookies are listed in the Cookie Policy.
Data whose retention period has expired is deleted, destroyed or anonymised in periodic disposal runs.
7. Your rights (KVKK Article 11)
As a data subject you have the right to:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties in Türkiye or abroad to whom it is transferred,
- Request rectification if it is incomplete or inaccurate,
- Request erasure or destruction under the conditions of KVKK Article 7,
- Request that rectification, erasure or destruction be notified to third parties to whom the data was transferred,
- Object to a result against you arising exclusively from automated analysis,
- Claim compensation for damage caused by unlawful processing.
You may withdraw consent at any time: use the "unsubscribe" link in our e-mails for the newsletter and the "Cookie settings" link at the bottom of the page for cookies.
8. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may send requests together with information identifying you:
- By a wet-signed letter delivered in person or via a notary to Ata Mah. 773 Sk. No:14E, 09100 Efeler, Aydın, Türkiye,
- From your registered electronic mail (KEP) address, or with a secure electronic or mobile signature,
- From an e-mail address previously provided to us and registered in our system, to info@ztmmakine.com.tr.
Requests are concluded free of charge within 30 days at the latest; if the action requires an additional cost, the fee in the Board's tariff may be charged. If your request is rejected, you find the answer insufficient or no answer is given in time, you may file a complaint with the Personal Data Protection Board.