Table of Contents
1. Data Controller
This website, ZZ Exporter (https://zzexporter.com), is operated by:
ZZ EXPORTER SAGLIK ÜRÜNLERI LTD. STI.
FATIH MAH. 22024 NOLU SK., NO: 25A IÇ KAPI NO: 6, 27060 Şehitkamil/Gaziantep, Türkiye
Email: [email protected]
For the purposes of applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK), ZZ Exporter acts as the Data Controller.
2. Scope of This Policy
This Privacy Policy explains:
- What personal data we collect
- Why we collect it
- The legal basis for processing
- How long we retain it
- With whom it is shared
- Your rights under GDPR and KVKK
This policy applies to all visitors, users, and business contacts of zzexporter.com.
3. Categories of Personal Data Collected
Depending on how you interact with our website, we may collect:
A. Contact Information
- Name
- Email address
- Phone number (if provided)
- Company name
- Message content
Collected via contact forms or direct email communication.
B. Technical & Usage Data
- IP address
- Browser type and version
- Device type
- Pages visited
- Date and time of visit
- Referring website
Collected automatically via cookies and analytics tools (subject to consent where required).
4. Purposes and Legal Basis for Processing
We process personal data for the following purposes:
A. Responding to Inquiries
Purpose: To respond to contact form submissions and business requests.
Legal Basis:
- GDPR Art. 6(1)(b) – Pre-contractual measures
- KVKK Art. 5/2(c) – Necessary for establishment or performance of a contract
B. Website Analytics and Performance Improvement
Purpose: To analyze website traffic and improve user experience.
Tool Used: Google Analytics (GA4).
Legal Basis:
- GDPR Art. 6(1)(a) – Consent
- KVKK – Explicit consent
Analytics cookies are only activated after user consent where legally required.
C. Security and Fraud Prevention
Purpose: To ensure website security and prevent abuse.
Legal Basis:
- GDPR Art. 6(1)(f) – Legitimate interest
- KVKK Art. 5/2(f) – Legitimate interest
5. Cookies and Tracking Technologies
We use cookies to:
- Ensure proper website functionality
- Analyze traffic
- Store user preferences
Detailed cookie information, including categories, duration, and consent management, is provided in the Cookie Policy section below via our consent management platform.
Analytics and non-essential cookies are only activated after user consent, where applicable.
6. Third-Party Services and Data Sharing
We do not sell personal data.
We may share data with the following service providers strictly for operational purposes:
A. Google Analytics
Provided by Google LLC (USA).
Used for traffic measurement and website improvement.
Google may process data on servers located outside Türkiye and the EU.
Data transfers are safeguarded through:
- Standard Contractual Clauses (SCCs), where applicable
- Additional security measures implemented by Google
B. Cloudflare
Used for website security and content delivery (CDN and firewall services).
Cloudflare may process IP addresses and technical data for security purposes.
C. Hosting Provider
Our hosting provider processes data necessary to operate the website infrastructure.
All service providers are bound by data processing agreements where required.
D. META
Used for direct contact through WhatsApp button.
7. International Data Transfers
Due to the use of global service providers (e.g., Google, Cloudflare), personal data may be transferred outside Türkiye and/or the European Economic Area (EEA).
Where such transfers occur, we ensure appropriate safeguards in accordance with:
- GDPR Chapter V
- KVKK cross-border transfer provisions
8. Data Retention Periods
We retain personal data only as long as necessary:
- Contact form submissions: up to 2 years
- Analytics data: according to Google Analytics retention settings
- Registered user accounts: until account deletion
- Security logs: as required for operational security
- Data may be transferred from the EEA to Türkiye and the USA.
We may retain data longer if required by law or for legitimate legal defense.
9. Your Rights
Under GDPR and KVKK, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion (“right to be forgotten”)
- Request restriction of processing
- Object to processing
- Request data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise your rights, contact us at:
[email protected]
10. Supervisory Authority
If you believe your data protection rights have been violated, you may lodge a complaint with:
For Türkiye:
Kişisel Verileri Koruma Kurumu (KVKK Authority)
For EU residents:
Your local Data Protection Authority within the European Union.
11. Security Measures
We implement appropriate technical and organizational measures to protect personal data against:
- Unauthorized access
- Alteration
- Disclosure
- Destruction
These measures include secure hosting infrastructure and encrypted connections (HTTPS).
12. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Updates will be published on this page with a revised effective date.
After this section, your Consent Plugin shortcode can continue unchanged starting from:
- Essential
- Statistics
- Google Analytics etc.