OKTACHEM
Legal

Data Protection

This notice provides general information about personal data processing related to the OKTACHEM website. It is an information notice and does not replace the consent checkbox text on forms.

Last updated: August 11, 2026

Data controller information

For visitor information about personal data processing on this site, the brand name “OKTACHEM” is used as the data controller reference. Official trade-registry title, tax identity, or similar registry details are not fixed in this notice.

Public contact details used for communication are phone, email, and the Gaziantep address.

Categories of personal data processed

Processed data is limited to information you submit in forms and technical records needed to handle the request securely. Typical categories include:

  • Identity and contact: full name, email, phone
  • Business context: company name (on the quote form)
  • Request content: subject, message, request type, product/service selection or free-text request name, target country/location note
  • Consent and preference records: form consent, optional WhatsApp message preparation preference
  • Technical security signals: Turnstile verification outcome and records related to honeypot/rate-limit checks

Purposes of processing

Personal data may be processed for the following purposes:

  • Receiving and responding to contact and quote requests
  • Providing preliminary product/service information and running pre-contract processes
  • Reducing spam and abuse
  • Keeping records to the extent required by legal obligations
  • Following up requests within legitimate business needs

Methods of collection

Data is collected mainly through:

  • Submitting contact and quote forms
  • Form security checks (Turnstile, honeypot, rate limit)
  • Clicking a WhatsApp link
  • Interacting with the map on the contact page

General legal bases

Processing may rely on legal bases that can vary by activity. The points below are a general framework and do not mean the same basis applies to every data item in every case:

  • Receiving and responding to a request
  • Carrying out pre-contract processes
  • Complying with legal obligations
  • Legitimate interests (for example security and spam prevention)
  • Explicit consent where required

Transfer of personal data

Personal data may be shared to the extent needed to handle your request, carefully and for related purposes. Typical transfer contexts include:

  • OKTACHEM staff authorized to respond to requests
  • Infrastructure providers (for example database hosting; email service if notification is configured)
  • Technical third-party services such as security and maps (Cloudflare Turnstile, Google Maps)
  • WhatsApp/Meta services when you choose to follow a redirect

Cross-border / technical infrastructure

Some technical services may process data within their own infrastructure. This notice does not make a general claim that cross-border transfers always do or do not occur; any transfer depends on the service and configuration.

Retention and security

Form records are stored in PostgreSQL through Payload CMS. Data is kept for the processing purpose and for as long as applicable law requires; this notice does not state a fixed retention year.

Security measures include access control, server-side validation, Turnstile, honeypot, and rate limiting. No system can guarantee absolute security.

Rights of the data subject

Under Türkiye’s Personal Data Protection Law No. 6698, you may generally have rights such as the following (within the legal framework):

  • Learn whether personal data is processed
  • Request information about processing if it occurs
  • Learn the purpose of processing and whether it is used accordingly
  • Learn third parties to whom data is transferred domestically or abroad
  • Request correction of incomplete or inaccurate data
  • Request deletion or destruction within the applicable legal framework
  • Request that the above operations be notified to third parties to whom data was transferred
  • Object to outcomes arising from exclusively automated analysis that are unfavourable to you
  • Request compensation for damage caused by unlawful processing

How to submit a request

You may submit requests about your rights using the publicly listed contact details on this site. The details below are published for general communication and, by themselves, are not asserted to be a registered or exclusive KVKK / data-controller application channel. This notice does not claim additional channels such as Registered Electronic Mail (KEP), notary filings, or VERBIS registration.

Contact details

For questions about your personal data, you may use the public contact details below. These are general communication details and are not claimed to be the sole formal application channel: