1. Who we are
ALTADFI ("we", "us", "our") is a Turkey-based export and import company headquartered in Istanbul. For the purposes of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR"), ALTADFI is the data controller for the personal data described in this policy.
Public office address: Kuyumcukent, Istanbul, Turkey
Contact: international@altadfi.com
This policy covers KVKK and GDPR together. For the standalone KVKK Article 10 disclosure notice required under Turkish law, see our KVKK Notice.
2. What data we collect
We only collect data you choose to give us, through our contact form:
- Name — so we know who's writing to us.
- Email address or phone number — so we can reply.
- Message content — whatever you write to us.
- Language — which version of the form you used (English or Arabic), to route your message correctly.
We do not use cookies, analytics, or tracking technologies of any kind on this website — see ourCookie Policy for details. A hidden "honeypot" field in our contact form exists purely to catch automated spam submissions; it is always empty for real visitors and is never used to identify or track anyone.
3. Why we process your data
We use the data you submit only to:
- Respond to your enquiry or request;
- Communicate with you about a potential business relationship; and
- Keep a record of business correspondence where a relationship follows.
4. Legal basis
Under KVKK Article 5, we process your data based on: (a) your explicit consent, where required — for example, for the cross-border transfer described below; and (b) our legitimate interest in responding to business enquiries sent to us, where this does not harm your fundamental rights and freedoms.
Under GDPR Article 6(1), where applicable, we rely on: (b) steps taken at your request prior to entering into a contract, and (f) our legitimate interests in operating a business enquiry channel.
5. Who we share your data with
We do not sell or share your data for marketing purposes. Your data may be processed by:
- Netlify, Inc. — our website hosting provider and the processor of our contact form submissions. Netlify's infrastructure may store and process data outside Türkiye (see Cross-Border Transfers below).
- WhatsApp / Meta Platforms, Inc. — only if you choose to contact us via the WhatsApp links on this site. That conversation is governed by WhatsApp's own privacy policy, not this one; we do not control what WhatsApp/Meta does with your data once you message us there.
6. Cross-border data transfers
Because our hosting and form-processing provider (Netlify) operates infrastructure outside Türkiye, submitting our contact form involves transferring your personal data outside the country. Under KVKK Article 9, we ask for your explicit consent to this transfer via a separate, unticked checkbox on the contact form before you submit it. If you'd rather not consent, please contact us directly by phone, WhatsApp, or email instead.
7. How long we keep your data
We retain contact form submissions for 12 months from the date of your enquiry, unless a business relationship follows — in which case we retain relevant records for as long as necessary for that relationship and any applicable legal obligations — or longer retention is required by law.
8. Security
We use reasonable technical and organizational measures, including secure hosting infrastructure, to protect your data against unauthorized access, loss, or misuse.
9. Your rights under KVKK
Under KVKK Article 11, you have the right to:
- Learn whether your personal data is being processed;
- Request information about it if it has been processed;
- Learn the purpose of processing and whether it is used in accordance with that purpose;
- Know the third parties to whom your data is transferred, in Türkiye or abroad;
- Request correction of incomplete or inaccurate data;
- Request deletion or destruction of your data, subject to legal conditions;
- Request that any correction or deletion be notified to third parties your data was shared with;
- Object to a result that is to your detriment, arising solely from automated analysis of your data; and
- Claim compensation for damages arising from unlawful processing.
10. Your rights under GDPR
If GDPR applies to you (for example, if you are in the EU), you additionally have the right to: access your data; rectify inaccurate data; erase your data; restrict processing; receive your data in a portable format; object to processing; and withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
11. How to exercise your rights
To exercise any of the rights above, email us at international@altadfi.com with a description of your request, or use the link below to start a pre-addressed email. We will respond within the timeframes required by KVKK and/or GDPR.
Email us about your data rights
12. Right to complain
If you believe we have not handled your data properly, you have the right to lodge a complaint with:
- In Türkiye: the Personal Data Protection Board (Kişisel Verilerin Korunması Kurulu).
- In the EU: the data protection supervisory authority in your country of residence.
13. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.
Questions about this policy? Contact us.