Skip to main content

Privacy Policy

This privacy policy explains how EDK Building Materials collects, uses and protects information when you visit our website. We operate a product information website — we do not sell products online, do not maintain customer accounts and do not store personal data in a database.

1. Data Controller

The data controller responsible for this website is:

For any enquiry related to your personal data or this policy, you may contact us using the details above.

2. Scope and Purpose of This Policy

This website (edkbuildingmaterials.com) is an informational platform that presents our building materials product range to prospective wholesale customers. It does not include any online shopping functionality, user registration system, membership area, or customer database.

The purpose of this policy is to inform you — in accordance with Turkey's Personal Data Protection Law (KVKK, Law No. 6698), the EU General Data Protection Regulation (GDPR), and other applicable data protection legislation — about what information may be collected during your visit, why it is collected, how long it is retained, and what rights you have in relation to that information.

3. Information We Collect

Since this is a non-transactional informational website, the data we process is limited to:

3.1 Server Log Data (Automatic)

When you access any page on this website, our web hosting infrastructure automatically records standard server log entries. This is a technical function of all web servers and occurs without any action on your part. The data recorded may include:

  • IP address
  • Date and time of the request
  • Pages visited and HTTP status codes
  • Browser type and version
  • Operating system
  • Referring URL (the page you visited before arriving on our site)

This data is not linked to any individual identity, is not stored in any customer database, and is not used for profiling or marketing purposes. Server logs are maintained solely for the purpose of ensuring website security, diagnosing technical issues, and generating anonymous aggregate usage statistics.

3.2 Contact Information (Voluntary)

If you choose to contact us — via email, telephone, or WhatsApp — you voluntarily provide personal information such as your name, email address, phone number, company name, and the content of your message. We process this information solely to respond to your enquiry and, where relevant, to discuss product availability or technical specifications. We do not add this information to any database, mailing list, or marketing system.

3.3 Cookies

This website uses only technically necessary (essential) cookies that are required for the basic functionality of the site — for example, session management and security. These cookies do not collect personal data, do not track browsing behaviour across websites, and do not require your consent under either KVKK or GDPR, as they fall within the "strictly necessary" exemption.

We do not use analytics cookies, advertising cookies, or third-party tracking cookies. If this changes in the future, this policy will be updated and appropriate consent mechanisms will be implemented before any such cookies are deployed.

4. Legal Basis for Data Processing

Under both KVKK (Article 5) and GDPR (Article 6), every instance of personal data processing must have a lawful basis. The legal bases applicable to this website are:

  • Legitimate interest (KVKK Art. 5/2(f); GDPR Art. 6/1(f)) — Processing of server log data is necessary for the legitimate interest of maintaining website security and functionality. This processing is proportionate and does not override your fundamental rights.
  • Performance of a contract or pre-contractual measures (KVKK Art. 5/2(c); GDPR Art. 6/1(b)) — When you contact us to enquire about products or services, we process the information you provide in order to respond to your request and, if applicable, to take steps towards a commercial arrangement.
  • Legal obligation (KVKK Art. 5/2(ç); GDPR Art. 6/1(c)) — In limited circumstances, we may be required to retain certain records to comply with Turkish commercial, tax, or regulatory obligations.

5. Data Retention

We retain personal data only for as long as it is necessary for the purpose for which it was collected:

  • Server logs: Automatically deleted after a maximum of 90 days by our hosting provider.
  • Contact correspondence: Retained for the duration of the commercial relationship or enquiry, and thereafter for as long as required by applicable Turkish commercial and tax legislation (currently up to 10 years under the Turkish Commercial Code, Law No. 6102, Article 82). If no commercial relationship is established, correspondence is deleted within 12 months of the last communication.
  • Essential cookies: Expire at the end of the browser session or within 24 hours, depending on the specific cookie.

6. Data Sharing and International Transfers

We do not sell, rent, trade, or otherwise share your personal data with third parties for their own purposes.

Your data may be accessible to our web hosting provider as a data processor, solely for the purpose of operating and maintaining the server infrastructure on which this website runs. Our hosting provider is contractually obligated to process data only on our instructions and in accordance with applicable data protection laws.

If our hosting infrastructure is located outside Turkey or outside the European Economic Area, any transfer of data is safeguarded by appropriate mechanisms — including Standard Contractual Clauses (SCCs) approved by the European Commission, and the adequacy decisions or undertakings required under KVKK Article 9. We will provide details of the specific transfer mechanism upon request.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

  • SSL/TLS encryption for all data transmitted between your browser and our server
  • Access controls limiting server and administrative access to authorised personnel
  • Regular security updates and patches applied to server software
  • Secure communication channels for business correspondence

8. Your Rights

Under KVKK (Article 11) and GDPR (Articles 15–22), you have the following rights in relation to your personal data:

  • Right to be informed: You have the right to know whether your personal data is being processed and, if so, to request information about that processing.
  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request the correction of inaccurate or incomplete personal data.
  • Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (where consent was the legal basis).
  • Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances.
  • Right to data portability: Where technically feasible, you may request your data in a structured, commonly used, machine-readable format.
  • Right to object: You may object to the processing of your personal data where it is based on legitimate interest.

To exercise any of these rights, please contact us at info@edkbuildingmaterials.com. We will respond to your request within 30 days, as required by KVKK. Under GDPR, we will respond without undue delay and in any event within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK — kvkk.gov.tr) or, if you are located in the EU, with the supervisory authority in your country of residence.

9. Third-Party Links

This website may contain links to external websites (for example, WhatsApp, Google Maps). These third-party services operate under their own privacy policies, which we do not control and for which we are not responsible. We encourage you to review the privacy policies of any external service before providing personal information.

10. Children's Privacy

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact us and we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, the updated policy will be published on this page with a revised effective date. We encourage you to review this page periodically.

12. Governing Law

This privacy policy is governed by the laws of the Republic of Turkey, including the Personal Data Protection Law (KVKK, Law No. 6698) and the Turkish Commercial Code (Law No. 6102). Where the GDPR applies due to the location of the data subject, the provisions of the GDPR shall apply concurrently.

Effective date: 5 April 2026

Last updated: 5 April 2026