Privacy
Privacy Notice
As data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), Umut İnşaat PVC Doğrama San. ve Tic. Ltd. Şti. explains below how we process the personal data you share when using our website and our enquiry and quote forms. This English version is provided for information; in case of any discrepancy, the Turkish version prevails.
1. Data controller
Umut İnşaat PVC Doğrama San. ve Tic. Ltd. Şti.. Address: Gümüşhane Cd. No:42 B, 4. Levent, 34415 Beşiktaş/İstanbul. Email: umutpen@umutpen.com. Phone: 0212 270 07 33.
2. Personal data we process
| Category | Data |
|---|---|
| Identity | First and last name |
| Contact | Phone number, email address (optional), address or district |
| Request details | Type of request (measurement, complaint, suggestion, quote), product, sizes and quantities, series, colour and glass preferences, the content of your message |
| Images | Photos of openings or products you attach to your request |
| Security | An irreversible hash of your IP address (kept for up to 24 hours) and browser and device signals processed during bot verification |
3. Purposes and legal grounds
| Purpose | Legal ground |
|---|---|
| Assessing your measurement, survey or quote request, scheduling and preparing a quote | Necessary for entering into or performing a contract (KVKK Art. 5/2-c) |
| Recording, investigating and resolving your complaint | Performance of a contract (Art. 5/2-c) and our legitimate interest (Art. 5/2-f) |
| Assessing your suggestion and replying to you | Our legitimate interest (Art. 5/2-f) |
| Preventing automated abuse of the forms and keeping the website secure | Our legitimate interest (Art. 5/2-f) |
| Exercising and defending our rights in a possible dispute | Establishment, exercise or protection of a right (Art. 5/2-e) |
4. How we collect data
Your data is collected electronically through the information you enter in the enquiry and quote forms on our website and, for security purposes, partly by automated means.
5. Transfers
Your data is not sold, not used for marketing and not shared with advertising or marketing companies. It may be disclosed to legally authorised public authorities upon request.
Our website uses the infrastructure of the following service providers. As their servers are located abroad, the data listed below is transferred outside Türkiye:
- Cloudflare, Inc. (USA): website hosting, storage of enquiry records and photos, Cloudflare Turnstile bot verification.
- Resend, Inc. (USA): email notification of new enquiries to our team. The notification contains your name, phone, email, address or district, message and quote details; photos are not sent by email.
- Google LLC (USA): the map in the contact section loads only when you click "Show map"; your IP address and browser information are then sent to Google.
6. Cookies and visitor statistics
Our website does not use cookies or similar tracking technologies on visitors' devices, so no cookie consent is requested.
We count page views and referring websites only as daily totals. No IP address, device identifier or any information that could identify you is stored for this purpose.
7. Retention
- Enquiry and quote records and attached photos are automatically and permanently deleted 30 days after submission. Email notifications about these records are deleted within the same period.
- If your request leads to a contract, the information needed to conclude and perform it is transferred to our contract and accounting records and kept for the periods required by law.
- The IP address hash kept for security is deleted after at most 24 hours.
8. Your rights (KVKK Art. 11)
By applying to the data controller, you have the right to:
- learn whether your personal data is processed,
- request information about the processing,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Türkiye or abroad to whom data is transferred,
- request correction of incomplete or inaccurate data,
- request erasure or destruction of data under the conditions of KVKK Art. 7,
- request that third parties to whom data was transferred be notified of such correction, erasure or destruction,
- object to a result against you arising from analysis exclusively by automated systems,
- claim compensation for damage arising from unlawful processing.
9. How to apply
You may send your request in writing to our address above, or from the email address you previously gave us and that is registered in our system to umutpen@umutpen.com, including information that allows us to identify you (name, Turkish ID number or, for foreign nationals, nationality and passport number, address, contact details and the subject of your request).
We will respond free of charge within 30 days at the latest, depending on the nature of the request. If the action requires an additional cost, the fee set by the Personal Data Protection Board may apply. If your request is rejected, the answer is insufficient or no answer is given in time, you may file a complaint with the Personal Data Protection Board.
10. Updates
This notice may be updated following changes in legislation or in our processing activities. The current version is always published on this page.
Last updated: October 2026
Back to the enquiry form