Data Protection

Privacy Notice and Cookie Policy

On this page
  1. Data controller
  2. Privacy notice
  3. Cookie policy
  4. Cookie inventory
  5. Third parties and international transfers
  6. Consent records
  7. Your rights
  8. Documents

Data Controller

Data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”):

Kayteks Örme Giyim San. ve Tic. A.Ş.

Hürriyet Mah. Hacı Kundak Cad. No:49, Pamukkale / Denizli, Türkiye

[email protected] · +90 258 213 11 11

Privacy Notice

This section is the privacy notice for visitors of www.kayteks.com, prepared under Article 10 of the Turkish Personal Data Protection Law (KVKK) and the related Communiqué. Separate notices covering our customer, supplier and security camera processes are listed in the Documents section at the end of this page.

Data category Purpose of processing Legal basis Retention
Identity and contact data — name, e-mail, phone, company name, message content Responding to the requests, quotations and complaints you submit through the contact form; establishing and maintaining the business relationship KVKK Art. 5/2-c (directly related to the conclusion or performance of a contract) and Art. 5/2-f (legitimate interest) 2 years after the request is closed
Transaction security data — random consent identifier generated in your browser, anonymised IP address Storing your cookie preference and being able to evidence your consent KVKK Art. 5/2-ç (legal obligation) and Art. 5/2-f 180 days
Anti-spam data — IP address (on our own servers only, for rate limiting) Protecting the contact form against bots and abuse KVKK Art. 5/2-f (legitimate interest) Rate-limit counter 1 minute; not stored permanently
Usage data — page views, session information, device and browser type Measuring how the site is used and improving the content KVKK Art. 5/1 — your explicit consent (if you accept analytics cookies) Until you withdraw your consent
Server access logs — IP address, date and time, requested address Ensuring information security, detecting errors and attacks KVKK Art. 5/2-ç and Art. 5/2-f 7 days

How we collect it

Your personal data is collected electronically, by fully or partly automated means, while you browse our website and when you complete the contact form. Apart from strictly necessary cookies, no cookie runs without your explicit consent; if you do not consent, analytics and third-party content cookies are not loaded.

Transfers

Your data may be transferred only for the purposes above. Within Türkiye: our hosting provider Netinternet Veri Merkezi Teknolojileri A.Ş. (Denizli) and, upon request, public authorities legally entitled to it. Abroad: Cloudflare, Inc. (USA) for secure and fast delivery of the site; Microsoft (Microsoft 365) for forwarding contact form messages by e-mail; and, only with your explicit consent, Google LLC (USA) for analytics and map services. See the “Third Parties and International Transfers” section of this page for details.

Cookie Policy

Cookies are small text files placed in your browser by the website you visit. This policy explains which cookies www.kayteks.com uses, for what purpose and for how long; which data is transferred to third parties; and how you can manage your preferences.

How we obtain your consent

No cookie other than strictly necessary ones is loaded until you explicitly allow it (opt-in). In the cookie notice shown on your first visit all categories are off by default; “Reject All” and “Accept All” are equally visible, and “Settings” lets you choose per category.

You can change or withdraw your choice at any time via the button below or the “Cookie Preferences” link in the footer. When you withdraw consent, analytics cookies are deleted from your browser and the related scripts stop running from the next page load.

Cookie categories

  1. Strictly necessaryTechnically required for the site to work: session management, form security (CSRF), language preference and your cookie preference itself. No consent is required; the legal basis is the legitimate interest of the controller and the performance of the service under Art. 5/2 KVKK. The spam protection on the contact form runs on our own servers; it uses no cookies and shares no data with third parties.
  2. Functional / third-party contentLoads third-party content such as the embedded Google Maps map on the contact page. Loaded only with your explicit consent; providers may set their own cookies.
  3. AnalyticsStatistics on how the site is used, via Google Analytics 4 (page views, contact form conversions). Runs only with your explicit consent; not used for advertising or personalisation.

No marketing or advertising cookies are used on this site.

Cookie Inventory

Cookie Owner Category Purpose Retention Data transfer
kayteks_session Kayteks (first party) Strictly necessary Session management, language preference, form submission Session / 120 minutes No transfer
XSRF-TOKEN Kayteks (first party) Strictly necessary Form security (CSRF protection) 120 minutes No transfer
kayteks_consent Kayteks (first party) Strictly necessary Stores your cookie preferences and an anonymous consent identifier 180 days No transfer
_ga Google Analytics 4 (third party) Analytics Random identifier to distinguish visitors 2 years (per Google) Google LLC (USA)
_ga_QNY0QC9JP7 Google Analytics 4 (third party) Analytics Keeps session state 2 years (per Google) Google LLC (USA)
Google Maps cookies (e.g. NID, CONSENT) Google LLC (third party) Functional Displays the embedded map on the contact page Set by Google Google LLC (USA)

Retention periods of third-party cookies are set by the respective provider; see the provider’s cookie policy for current information.

Third Parties and International Transfers

The servers of the providers below are located abroad. Google Analytics and Google Maps load only if you give explicit consent to the relevant category; in that case data such as your IP address, browser information and the page you visit is transferred to Google LLC’s servers in the USA. Possible risks: the USA may not offer a level of protection equivalent to the KVKK, and its authorities may access this data under their own laws. You can withdraw your consent at any time. Cloudflare (secure and fast delivery of the site) and Microsoft (forwarding contact form messages by e-mail) are used to deliver the service securely on the basis of legitimate interest (Art. 5/2-f KVKK) and are therefore listed as necessary components rather than consent categories.

Provider Service Category Privacy policy
Google LLC (USA) Google Analytics 4 Analytics policies.google.com/privacy
Google LLC (USA) Google Maps (embedded map) Functional policies.google.com/technologies/cookies
Cloudflare, Inc. (USA) Content delivery network and security (all visits) Necessary (infrastructure) www.cloudflare.com/privacypolicy/
Microsoft (Microsoft 365) Forwarding contact form messages by e-mail Necessary (communication) privacy.microsoft.com/

Fonts, stylesheets and scripts are served from Kayteks servers; no request is sent to Google Fonts or any other CDN for these resources. The site is hosted in Türkiye on servers of Netinternet Veri Merkezi Teknolojileri A.Ş. (Denizli). The Cloudflare layer processes the IP address and request information of every visit for security and acceleration and may set a technical security cookie when required.

Consent Records

Every cookie decision you make is recorded on our servers to meet our burden of proof: date and time, selected categories, policy version, page language, a random identifier generated in your browser and an anonymised IP address (last part removed). These records are not linked to your identity and your full IP address is not stored. Your preference is kept in the “kayteks_consent” cookie for 180 days; after that you will be asked again.

Browser settings

You can also delete or block cookies in your browser settings. Blocking strictly necessary cookies may prevent features such as the contact form from working.

Your Rights and Requests

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose of processing and whether data is used accordingly; to know the third parties to whom data is transferred domestically or abroad; to request correction of incomplete or inaccurate data; to request erasure or destruction; to request that these operations be notified to third parties; to object to a result against you produced by automated analysis; and to claim compensation for damage suffered.

You may submit requests in writing to the address above, with a secure electronic or mobile signature, or by e-mail. Your request should state your name, Turkish ID number (for foreign nationals: nationality and passport number), postal address, e-mail or phone and the subject of your request. Requests are concluded free of charge within 30 days at the latest.

Kayteks Örme Giyim San. ve Tic. A.Ş. — Hürriyet Mah. Hacı Kundak Cad. No:49, Pamukkale / Denizli, Türkiye

[email protected]

You can download the data subject application form from the Documents section below.

Documents

Documents published by our company under Law no. 6698. All of them are dated 15 April 2022.

The document marked “Archive” was superseded on 8 September 2026 by the cookie policy on this page; it is kept online for historical transparency.