Last updated: 12 October 2026
This notice is provided by TBM Matbaa Malzemeleri ve Kağıtçılık A.Ş. under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) about personal data processed through this website. The Turkish version prevails in case of any discrepancy.
1. Data controller
TBM Matbaa Malzemeleri ve Kağıtçılık A.Ş.
Ana Giriş, Tuna Mah. 5617 Sk. No:6/5-7, 35090 Bornova / İzmir, Türkiye
Telephone: +90 232 457 86 69
2. Personal data processed
- Identity: name and surname.
- Contact: email address, telephone number, company name, location (city or delivery place).
- Customer transaction: enquiry type (quotation or contact), products and options, quantity, unit, size, grammage, your message, items in your quote list, the page and language of the form.
- Transaction security: IP address and technical access records kept by the hosting and content delivery services.
- Analytics (only with your permission): Google Analytics cookie identifiers, pages visited, links clicked, device and browser information.
Forms are not stored on this website. The details you enter in the quotation and contact forms are not sent to our server; pressing “Send via WhatsApp” prepares a WhatsApp message on your device, which reaches us when you send it.
Please do not include identity documents, national ID numbers, card details or special categories of personal data such as health data in the forms; we do not need them to respond. Card payments are sent directly to the payment institution, not to this website.
3. Purposes
- Receiving, assessing and responding to your quotation and contact enquiries,
- Providing product, stock and supply information, preparing quotations and handling pre-contract steps,
- Notifying the relevant team and following up your enquiry,
- Securing the website and information systems, preventing spam and abuse,
- Responding to authorised bodies and protecting our rights in potential disputes,
- With your permission, analysing and improving website use.
4. Collection method and legal grounds
Data is collected electronically and partly automatically through the WhatsApp messages you send us (including those prepared with the website forms), telephone calls, and cookies and similar technologies. Legal grounds (KVKK Article 5):
- Establishment or performance of a contract (5/2-c): assessing your quotation and supply enquiries.
- Legitimate interest (5/2-f): responding to enquiries, website and system security.
- Legal obligation (5/2-ç): information requests from authorities and statutory retention.
- Establishment, exercise or protection of a right (5/2-e): use as evidence in potential disputes.
- Explicit consent (5/1): analytics cookies. You can change your choice at any time with the “Cookie preferences” link in the footer; declining does not limit use of the website.
5. Transfers
Within the purposes above and in line with KVKK Articles 8 and 9, personal data may be transferred to:
- Business partners providing hosting and content delivery (Cloudflare) services for the website (as data processors, only as required for the service),
- Our legal, financial and technical advisers,
- Authorised public bodies and courts upon request.
Messages sent via WhatsApp travel over WhatsApp (Meta) infrastructure under WhatsApp's own privacy terms and may be processed on servers abroad. Where a service provider's servers are located abroad, transfers are made with one of the appropriate safeguards set out in KVKK Article 9. If you allow analytics cookies, the related data is transferred to Google's servers abroad under the same safeguards. Personal data is not sold or shared with third parties for marketing.
Links to Kağıtçınız, WhatsApp, Google Maps and the payment institution lead to separate services governed by their own notices and privacy terms.
6. Retention
- Quotation and contact correspondence via WhatsApp is kept for 2 years after the enquiry is concluded. If an enquiry becomes a commercial relationship, related records are kept for the periods required by the Turkish Commercial Code and tax legislation.
- Server access records are kept for security purposes and for the period required by law.
Data whose retention period has expired or whose purpose no longer applies is deleted, destroyed or anonymised.
7. Your rights under KVKK Article 11
By applying to the data controller you may:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties in Türkiye or abroad to whom it is transferred,
- Request correction of incomplete or inaccurate data,
- Request deletion or destruction under the conditions of KVKK Article 7,
- Request notification of correction, deletion or destruction to third parties who received the data,
- Object to a result against you arising exclusively from automated analysis,
- Claim compensation for damage caused by unlawful processing.
8. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, submit your request in writing with information identifying you:
- With a wet-signed letter to the address above, in person, by registered mail with return receipt or through a notary,
- By registered electronic mail (KEP), secure electronic signature, mobile signature, or from an email address you previously notified to us and which is registered in our systems.
Requests are concluded free of charge within 30 days at the latest; if the action requires an additional cost, the fee set by the Personal Data Protection Board may be charged. If your request is rejected, you find the response insufficient or no response is given in time, you may file a complaint with the Personal Data Protection Board under KVKK Article 14.