FROM TÜRKİYE TO THE WORLD
info@galmetsan.com.tr+90 322 394 46 86
Galmetsan
PROTECTION OF PERSONAL DATA

KVKK and Privacy

Information regarding the processing of your personal data when you visit our website and contact us.

Website and communication channelsLast update · September 28, 2026
Scope of the text

This notice is intended for website visitors and people who contact us by telephone or email, under the Personal Data Protection Law No. 6698 (KVKK). Separate privacy notices are required for employees, job applicants, facility visitors and other processing activities specific to business relationships. Reading this page or using the website does not constitute explicit consent.

Our website is offered for corporate promotion and information purposes. There is no membership, user account, online sales, payment or form to send personal information. Personal data is not requested through the site for these purposes.

01

Data controller

The data controller is Galmetsan Galvaniz ve Çelik Konstrüksiyon San. Tic. Ltd. Şti. (“Galmetsan”).

Contact address
Hacı Sabancı OSB, Nilüfer Sk. No: 3, Yakapınar / Adana, Türkiye
02

Data and ways of collection

  • Contact and request information: The name, surname, company and job title, contact information, message, project and proposal request content and attachments you share via phone or e-mail.
  • Technical access information: IP address, request time, requested page, browser and error records that can be processed by the hosting and security infrastructure when accessing the site.
  • Preference information: Your choice of light or dark theme is kept in local storage in your browser.

Data is obtained directly from the information you provide and from automatic technical processes required by internet access. There is no contact form on the site; Email and phone links open your device's corresponding app. Do not submit identification documents, health data or other sensitive information that is not necessary for your request.

03

Purposes and legal bases

Within the scope of the technical operation of the website and telephone and e-mail communication outside the site, the following legal bases apply to the extent required by the relevant activity:

Answering your request

Evaluation of general questions and conduct of communication: legitimate interest, provided that it does not harm your fundamental rights and freedoms, KVKK art. 5/2-f.

Offer and contract negotiations

Information directly related to and necessary for entering into or performing a contract: KVKK Article 5/2-c. For the contact details of company representatives, Article 5/2-f is assessed according to the circumstances.

Obligations and protection of rights

Requests from competent authorities and statutory obligations: Article 5/2-ç; records necessary to establish, exercise or protect a right in a dispute: Article 5/2-e.

Technical operation and safety

Operation of the site, remembering the requested appearance preference, error detection and prevention of abuse: legitimate interest, taking into account the balance with your rights and freedoms, art. 5/2-f.

In the case of a separate activity that requires explicit consent, a specific and separate consent based on free will must be obtained by prior information. Establishing contact is not considered approval of advertising messages.

04

Data transfer

Hosting, technical support and email services may involve service providers processing the data required to deliver their services. Data may be transferred to competent public authorities in response to legally binding requests, or to legal advisers where necessary to protect rights, limited to the relevant purpose. Domestic transfers must meet the conditions of KVKK Article 8.

The website is hosted in data centers at home and abroad and uses Cloudflare infrastructure. For this reason, technical data processed for access and security may also be processed by hosting and infrastructure service providers abroad. The contact page includes Google Maps embedded map and map links; When this service is loaded, Google may also process technical data.

International transfers are subject to the processing conditions and transfer mechanisms in KVKK Article 9. Depending on the nature of the transfer, the applicable mechanism, such as an adequacy decision or appropriate safeguards including a standard contract, must be in place. Hosting abroad does not itself establish a legal basis. You may ask Galmetsan for information about the recipients of your data and the safeguards for its transfer.

05

Storage and security

Site cookies under Galmetsan’s control are retained for a maximum of 90 days. The theme preference is also stored for use for up to 90 days. This is not a general retention period for email correspondence or server access logs. Retention of requests submitted outside the website and technical records depends on the purpose of processing, applicable legal obligations and the period necessary to protect a right. When the conditions for processing no longer apply, data is deleted, destroyed or anonymised under KVKK Article 7.

You may send questions about retention of your personal data to our contact address. Under KVKK Article 12, the data controller is responsible for taking appropriate technical and organisational measures to prevent unauthorised access and unlawful processing.

06

Cookies and external services

No advertising or visitor analytics cookies are used in the site's application code. This statement does not mean that external services do not process data at all.

Theme preference
galmetsan-themestores the light/dark theme selection in your browser's localStorage area. Your preference is valid for up to 90 days from your last selection; The expired registration will be cleared the next time you open the site. You can delete site data earlier through browser settings. This record is not a cookie, but local storage data; It is not sent to the server by the site.
Google Maps
A direct connection to Google can be made when the embedded map on the contact page is loaded; IP address and browser information may be transmitted, Google may use its own technologies. The duration of cookies used by Google in its own domains is not determined by Galmetsan; these are described in the relevant provider's policy. Google Privacy Policy ↗
External links
Directions links open Google Maps; Email and phone links open applications on your device. For these services, the relevant provider's terms apply.

If non-mandatory tracking technologies are added, the necessary notification and choice mechanism must be provided before they are enabled. Continuing to browse the site cannot be considered consent.

07

Your rights

Under KVKK Article 11, you may apply to the data controller to:

  • You can find out whether your data is being processed or not, and if so, you can request information.
  • You can ask about the purpose of the processing and whether the data is used in accordance with this purpose.
  • You can learn about the third parties to whom your data is transferred at home and abroad.
  • Correction of incomplete or inaccurate data; You may request its deletion or destruction under the conditions stipulated by the Law.
  • You may request that correction, deletion and destruction be notified to third parties to whom the data has been transferred.
  • You may object to an outcome that adversely affects you and results solely from analysis by automated systems.
  • You can request compensation for the damage you have suffered due to unlawful processing.
08

Application and complaint

For information and requests, contact us at info@galmetsan.com.tr . When applying by email under the Communiqué, you must use the email address you previously provided to Galmetsan and that is registered in its system. Otherwise, you may apply in writing or use another method specified in the Communiqué. Necessary and proportionate additional information may be requested to verify your identity.

Your written request must include your first and last name, signature, Turkish identification number (for foreign nationals, your nationality and passport or identification number, if any), address for correspondence, email/telephone/fax details if available, and your request. Attach any relevant documents. You may send written requests to the contact address above.

30 days at the latest

Applications are concluded as soon as possible and within thirty days at the latest, depending on the nature of the request. The process is, as a rule, free; Additionally, if it causes costs, a fee may only be charged according to the tariff determined by the Board. If the application is due to the error of the data controller, the fee charged will be refunded.

If your application is rejected, the response is insufficient, or a response is not given in time, you can complain to the Board by first fulfilling the requirement of contacting the data controller. If a response is given in a timely manner, you must exercise your right to complain within thirty days from the date you learned the response, and in any case within sixty days from the first application. If no response is given within thirty days, a period of sixty days from the first application applies; A late response will not extend this period.

KVKK Complaint Module ↗