Website KVKK Clarification Text
ANB Trading & Depoculuk Limited Şirketi - www.anbtrading.com.tr
This Clarification Text has been prepared to inform data subjects, pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation, about the personal data processing activities carried out through the contact form, request and quotation processes, site security, and use of the www.anbtrading.com.tr website operated by ANB Trading & Depoculuk Limited Şirketi.
This text has primarily been prepared under KVKK. Where a given processing activity falls within the territorial scope of the EU General Data Protection Regulation ("GDPR"), the relevant GDPR obligations shall additionally apply.
1. Data Controller
| Data Controller | ANB Trading & Depoculuk Limited Şirketi |
| MERSİS No | 0069134810500001 |
| Tax Office / Tax No | Ziyapaşa Vergi Dairesi / 0691348105 |
| Trade Registry | Adana Ticaret Sicil Müdürlüğü / 88403 |
| Head Office Address | Cemalpaşa Mah. 63009 Sok. Us Apt. Blok No:19 İç Kapı No:09 Seyhan / Adana / Türkiye |
| Website | www.anbtrading.com.tr |
| E-posta | info@anbtrading.com.tr |
2. Scope
This text is addressed to individuals visiting the website, as well as prospective customers, suppliers, business partners submitting questions, requests, or quotation inquiries via the contact form, their representatives, and other relevant data subjects.
For detailed information on processing activities carried out through cookies, localStorage, Google Analytics 4, and similar technologies, please review the Cookie & Similar Technologies Policy.
3. Personal Data Processed
| Data Category | Data Elements Processed |
|---|---|
| Identity Information | First and last name |
| Contact Information | Email address, phone number |
| Request / Transaction Information | Company/business title (to the extent associable with the relevant individual), message subject and content, question/request details, and any explanations regarding a quotation request |
| Transaction Security Information | IP address, browser/device signals, verification tokens, and similar technical security data collected for site and form security purposes; this data may in particular be processed via Cloudflare Turnstile. |
| Cookie / Online Identifier & Preference Information | Cookie or localStorage preference records, preference timestamps, and, where explicit consent has been given, analytics online identifiers. Details are set out in the Cookie & Similar Technologies Policy. |
| Clarification / Transaction Log | A timestamp record, within the contact form, of the Clarification Text having been presented to or viewed by the data subject. This record is not a consent record; the IP address is not stored in the Company database for this purpose. |
No special category personal data is requested via the contact form. Please refrain from including any special category personal data in the message field that is not necessary for the evaluation of your request.
4. Purposes of Processing Personal Data
- Receiving, evaluating, and responding to questions, requests, and messages submitted via the contact form;
- Preparing a quotation for the specific request, where requested, and conducting pre-contractual negotiations;
- Evaluating and following up on concrete applications or business relationships regarding warehousing, logistics, foreign trade, supply, and related services;
- Operating the website and contact form securely; preventing spam, bot activity, misuse, and unauthorized access risks;
- Fulfilling legal obligations and responding to requests from competent authorities;
- Preventing legal disputes, establishing, exercising, or protecting a right, and, where necessary, conducting evidentiary activities;
- Where explicit consent has been given, measuring website usage and performance through analytics tools.
Contact information provided via the contact form is used primarily to respond to the relevant question/request/quotation process. Should any advertising, campaign, or marketing-related commercial electronic communication be sent, the necessary consent, exemption, opt-out, and Message Management System ("İYS") obligations under Law No. 6563 on the Regulation of Electronic Commerce and related secondary legislation shall be separately assessed.
5. Collection Method and Legal Grounds for Personal Data
Personal data is obtained, wholly or partly through automated means, via the website's contact form, form submission and transaction logs, server and security infrastructure, Cloudflare Turnstile, cookie/localStorage preference mechanism, and, where explicit consent has been given, analytics tools.
| Processing Activity | Purpose / Scope | KVKK Legal Ground |
|---|---|---|
| Receiving and responding to contact requests | Evaluation of the data subject's question or request | Art. 5/2(c) where directly related to the formation/performance of a contract; otherwise Art. 5/2(f) |
| Preparing quotations and pre-contractual negotiations | Conducting the quotation and pre-negotiation process upon the data subject's request | Art. 5/2(c); Art. 5/2(f) to the extent necessary |
| Legal obligations and official requests | Fulfilling statutory record-keeping and obligations | Art. 5/2(a) and/or Art. 5/2(ç) |
| Disputes, evidence, and protection of rights | Establishing, exercising, or protecting a right | Art. 5/2(e); Art. 5/2(f) to the extent necessary |
| Site/form security and spam/bot prevention | Information security and prevention of misuse and unauthorized access | KVKK m.5/2(f) |
| Timestamp evidencing that the clarification was provided | Evidencing fulfillment of the clarification obligation and the transaction flow | Art. 5/2(ç); Art. 5/2(e) where a dispute/evidentiary need arises |
| Maintaining cookie preference records | Applying the visitor's preference and recalling it on subsequent visits | KVKK m.5/2(f) |
| Analytics measurement via Google Analytics 4 | Measuring site usage and performance | Art. 5/1 explicit consent |
6. Transfer of Personal Data
Personal data, limited to and proportionate with the purposes above, may be transferred to the following recipients or recipient groups only to the extent necessary:
| Recipient / Recipient Group | Transfer Purpose |
|---|---|
| Supabase Inc. / Supabase altyapısı | Hosting and storage of contact form data in the database; the current technical configuration uses the Germany/Frankfurt region. |
| Resend Inc. | Delivering the contact form submission as an email notification to the Company representative and enabling follow-up on the request. |
| Cloudflare, Inc. (Turnstile) | Ensuring form and site security to prevent spam, bots, and misuse. |
| Analytics service providers (Google Analytics 4) | Measuring site usage and conducting analytics activities, only where explicit consent has been given to analytics/performance cookies. |
| Lawyers, financial advisors, consultants, and IT/security service providers | To the extent necessary for obtaining legal and technical support, managing disputes, information security, and operating systems. |
| Competent public authorities and judicial/administrative bodies | Where required by law or upon a duly made official request. |
The data processing activities carried out by third-party service providers such as Google Analytics 4, Cloudflare Turnstile, Supabase, and Resend on behalf of the Company are subject to the relevant service and data processing terms. Where such providers process data for their own independent purposes, this is carried out under the provider's own applicable privacy and data protection policies.
7. Cross-Border Transfer
Because some service providers used in the website's technical infrastructure are located abroad, or data is processed via infrastructure located abroad, personal data may be transferred outside Turkey. The current technical configuration, including the use of Supabase, Resend, Cloudflare, and other analytics service providers, may also give rise to cross-border data flows.
Cross-border transfer of personal data is carried out within the framework of the conditions set out in KVKK Art. 9. Where an adequacy decision does not exist or is not applicable to the specific transfer, an appropriate safeguard mechanism suited to the transfer relationship shall be established; where a standard contract is used, the notification obligation to the Board prescribed by legislation shall additionally be fulfilled.
Should the service provider or technical infrastructure used change, data flows and cross-border transfer mechanisms shall be reassessed and this Clarification Text updated as necessary.
8. Retention Periods
| Data / Record | Retention Criterion |
|---|---|
| Contact form records and correspondence | For the period necessary to conclude the request; where a commercial or legal relationship is established, taking into account applicable legislation, evidentiary needs, and statutory limitation periods. |
| Quotation and pre-contractual records | For the duration required by the relevant quotation/pre-negotiation process and, where a legal relationship arises, for the applicable statutory retention and limitation periods. |
| Clarification / transaction timestamp | For the period necessary to evidence fulfillment of the clarification obligation; deleted, destroyed, or anonymized once the processing purpose and legal necessity cease to exist. |
| Security and technical records | For the technical period necessary for information security and misuse prevention purposes. |
| Cookie and analytics records | In accordance with the periods specified in the Cookie & Similar Technologies Policy and the user's preferences. |
Once the retention period or processing purpose ends, personal data is deleted, destroyed, or anonymized in accordance with KVKK and related legislation.
9. Data Subject Rights and Application Procedure
You have the rights set out in Article 11 of KVKK. Accordingly, you may request information regarding the processing of your personal data and, where the conditions prescribed by law are met, submit requests to the Data Controller under KVKK Art. 11 — including correction, deletion, or destruction of your personal data, notification of these actions to third parties to whom the data has been transferred, objection to outcomes produced by automated systems, and compensation for damages arising from unlawful processing.
You may submit your requests in writing to the Company\'s head office address above, or, if using an email address previously registered with the Company, to info@anbtrading.com.tr. Applications will be concluded as soon as possible and within thirty days at the latest; where the process requires an additional cost, the fees prescribed by legislation may apply.
10. Updates
This Clarification Text may be updated in line with legislative changes, updates to the website infrastructure, or changes in personal data processing activities. The current text is published at www.anbtrading.com.tr.
Last updated: 11.08.2026