Last updated: 12 October 2026
1. Data controller and contact details
The data controller is Hisar Çelik Halat İth. İhr. San. ve Tic. Ltd. Şti. Address: Evliya Çelebi Mh. Rauf Orbay Cd. No:21/B İçmeler, Tuzla / Istanbul. Phone: +90 850 888 19 80. Email: info@hisarcelikhalat.com. Tax Office: Tuzla; Tax Number: 463 017 4978.
2. Categories of personal data
Forms process your name, company, email address, optional phone number, subject, message and, where applicable, quote list products, quantities and dimension notes. Technical information such as IP address, bot verification result, submission time and enquiry reference may be used for security. IP addresses are converted into salted one-way hashes for submission counters; the security provider may receive the IP address for verification.
3. Collection methods and purposes
Information is collected electronically when a visitor completes a form and through website security services. Purposes include responding to product and technical questions, preparing requested quotations, contacting the enquirer, managing communication and supply processes, preventing spam and misuse, and protecting rights where necessary.
4. Legal grounds
Depending on the enquiry, processing is assessed on grounds directly relating to entering into or performing a contract, the establishment, exercise or protection of a right, or the controller’s legitimate interests without prejudicing fundamental rights and freedoms. Records subject to statutory duties are processed on the relevant obligation. The form’s read acknowledgement records provision of this notice; it is not explicit consent to marketing or international transfers.
5. Recipients and service providers
Form notifications are sent to the company’s selected addresses, info@hisarcelikhalat.com and bilgi@isaozturk.com, to assess the enquiry and manage related communication. Resend provides email delivery; Cloudflare provides hosting, security, Turnstile verification and submission counters. Data is shared with authorised recipients and service providers within the scope required for the service. Disclosure to competent authorities is made under the relevant legal requirement and a duly submitted request.
6. International data transfers
Resend and Cloudflare services may process personal data on infrastructure outside Türkiye. International transfers must satisfy the transfer conditions and appropriate safeguards under the current Article 9 of Law No. 6698. The applicable mechanism is finalised during live form setup, taking account of provider processing terms and the controller’s obligations. Acknowledging the notice in the form does not by itself authorise an international transfer.
7. Retention and security
The retention policy selected for this website provides for completed contact and quotation enquiries to be retained for no more than 2 years after the enquiry closes. Records relating to a contract, commercial transaction, statutory obligation or dispute are separately subject to applicable legal periods and the need to protect rights. Data is deleted, destroyed or appropriately anonymised once its processing purpose and retention need end. Form content is not stored in a separate customer database; authorised company staff manage retention and deletion in email inboxes. IP counters expire after approximately 2 hours and daily counters after approximately 48 hours; expired rows are removed on subsequent successful submissions. HTTPS, server validation, restricted API keys and submission limits provide technical safeguards.
8. Your rights as a data subject
Under Article 11, you may ask whether your data is processed, request information about processing, learn its purpose and whether use is consistent with that purpose, learn domestic and international recipients, request correction of incomplete or incorrect data, request erasure or destruction when the applicable conditions are met, and request notification of those actions to recipients. You may also object to an adverse outcome resulting from automated analysis and seek compensation for damage caused by unlawful processing.
9. How to submit a request
You may submit a written request to the company’s postal address above. Include enough information to establish your identity and understand the request; do not send unnecessary identity or sensitive data. Electronic requests follow the methods specified in applicable rules and the channel to be confirmed by the company. For general communication, contact info@hisarcelikhalat.com; identity and procedural requirements for a formal request are assessed separately.