KVKK Privacy Notice

Legal

Last updated: 01.12.2025

This page is for informational purposes only. The legally binding text is the original Turkish version.

1. Data Controller

Within the scope of the Law No. 6698 on the Protection of Personal Data ("KVKK" — Turkish Personal Data Protection Law), your personal data is processed by Norm Bitkisel Ürünler Paz. San. ve Tic. Ltd. Şti. ("Company") as the data controller, to the extent described below.

Address: Mecidiye Mah. Selçuk Cad. No:85, 34930 Sultanbeyli/İstanbul
Phone: +90 (216) 399 41 34
E-mail: info@normbitkisel.com

2. Personal Data Processed

The following categories of personal data may be processed by our Company:

Identity information: First name, last name, title
Contact information: Phone number, e-mail address, postal address
Customer transaction information: Order details, payment information, delivery information
Digital footprint data: IP address, cookie data, browser information, pages visited, session durations
Legal transaction information: Contract details, invoice information

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

Providing and improving our products and services
Managing customer relations and conducting communication activities
Managing order processes
Fulfilling legal obligations
Carrying out statistical analyses
Conducting information security processes
Conducting marketing and campaign activities (subject to your explicit consent)
Ensuring that Company operations are conducted in compliance with applicable legislation

4. Legal Basis for Processing Personal Data

Your personal data is processed on the following legal grounds specified in Articles 5 and 6 of KVKK (Turkish Personal Data Protection Law):

Explicit provision in the law
Direct relation to the establishment or performance of a contract
Necessity for fulfilling our Company's legal obligation
Necessity for our legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject
Existence of your explicit consent

5. Transfer of Personal Data

Your personal data may be transferred, for the purposes stated above, to:

Our business partners and suppliers
Cargo and logistics companies
Our legal advisors
Authorised public institutions and organisations
Payment service providers

Such transfers are made within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of KVKK (Turkish Personal Data Protection Law).

6. Method of Collecting Personal Data

Your personal data is collected through:

Forms completed via our website
E-mail, phone, and other communication channels
Cookies and similar technologies
Social media platforms
In-person meetings

by both automated and non-automated means.

7. Your Rights under KVKK

Pursuant to Article 11 of KVKK (Turkish Personal Data Protection Law), you have the following rights:

To learn whether your personal data is being processed
To request information if your personal data has been processed
To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose
To know the third parties to whom your personal data has been transferred, domestically or abroad
To request correction of incomplete or inaccurate personal data
To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of KVKK
To request notification of the correction, deletion, or destruction of personal data to third parties to whom it has been transferred
To object to any outcome arising against you as a result of analysis performed exclusively through automated systems
To claim compensation for damages in case your personal data is processed unlawfully

You may submit your applications in writing to info@normbitkisel.com.

8. Retention Period of Personal Data

Your personal data is retained for as long as required by the processing purpose and for the statutory limitation periods prescribed by applicable legislation. Upon expiry of the retention period, your personal data will be deleted, destroyed, or anonymised.

Use of Artificial Intelligence in Support Requests

Messages you send to our support channels are processed with the help of artificial intelligence so that we can answer you faster and more accurately. Your message is classified by subject, used to prepare a draft reply for our representative, and translated if it is written in another language.

Your reply is always sent by a human representative. Artificial intelligence only suggests a draft to our representative; no draft is sent to you without being reviewed and approved. For this reason, no decision producing a legal effect or similarly significant adverse effect is taken about you solely by automated means.

For this processing, the text of your message is transferred to servers of our service provider Google located in the European Union. The transfer is made with the least data possible: your name, username, e-mail address and telephone number are not sent as separate information; only the text of the last few messages of the conversation is transmitted. Google processes this data solely on our instructions and does not use it to train its own artificial intelligence models; limited logging (about 30 days) may be kept for abuse monitoring.

Please do not share information about your health in support messages unless it is necessary to resolve your request.

For the purpose of handling your support requests, the content of your messages is transferred to Google Cloud EMEA Limited (Ireland). The process of signing the standard contract published by the Personal Data Protection Board and notifying the Personal Data Protection Authority — so that this transfer abroad rests on appropriate safeguards under Article 9 of the Law — is under way; once it is complete this notice will be updated and you may request a copy of the standard contract free of charge from the application address given in this notice.

Depending on the channel your support request arrives through, your messages also reside on that platform's own infrastructure: Instagram and Facebook messages are processed by Meta Platforms, e-mails by our e-mail service provider, and Trendyol questions and answers by Trendyol.

Support correspondence is retained for as long as needed to resolve your request and for the statute of limitations applicable to possible disputes. Message texts transferred to the artificial intelligence service provider may be kept only for a limited period (about 30 days) for abuse monitoring; they are not otherwise retained by that provider.

Data Controller Contact

Norm Bitkisel Ürünler Paz. San. ve Tic. Ltd. Şti.
info@normbitkisel.com | +90 (216) 399 41 34