Legal — Privacy

Personal Data Protection Notice

Information on how your personal data is processed under Türkiye's Personal Data Protection Law (KVKK No. 6698). This is a courtesy English translation; the Turkish version is the legally binding text.

Last updated: 2026-05-06

This text is a draft sample; the final version will take effect after legal counsel review. The page will be updated before launch.

1. Data Controller

Under KVKK Law No. 6698, the data controller is: Kleppa Teknoloji Makina Sanayi ve Ticaret Limited Şirketi Address: İkitelli O.S.B. Heskoop B Block No:16, Başakşehir / Istanbul Phone: +90 212 608 08 08 Email: info@kleppa.com.tr

2. Personal Data Processed

When you use our website, the following personal data may be processed: • Identity (first name, last name) • Contact (email, phone, address) • Company information (company name, country) • Account information (username, hashed password) • Transaction data (orders, quote requests, payment method selection) • Payment data (processed via Iyzico; card number and CVV are not stored by us) • Usage data (page views, cookies, IP address) • Communication records (email, WhatsApp, phone calls)

3. Purposes of Processing

Your personal data is processed for the following purposes: • Execution of order and quote processes • Provision of products and services • Customer relationship management • Payment processing (via Iyzico) • Sending order confirmation, dispatch and delivery notifications (via Resend) • Fulfilling legal obligations (invoicing, tax legislation) • Improving website performance • Ensuring information security

4. Transfers to Third Parties

Your personal data may be transferred to authorised public authorities, business partners (Iyzico payment infrastructure, Resend email infrastructure, Supabase database infrastructure, courier companies) and suppliers, within the conditions of KVKK Articles 8 and 9, with your explicit consent or as required by law. International transfers (Resend, Supabase USA; Iyzico EU) are subject to your explicit consent under KVKK Article 9.

5. Retention Period

Your personal data is retained limited to the periods foreseen in the relevant legislation and for as long as required by the purpose of processing: • Membership information: as long as the account is active + 5 years (Turkish Commercial Code) • Order and invoice information: 10 years (Tax Procedure Law) • Communication records: 2 years • Cookie data: session duration or 12 months Upon expiry, your data is deleted, destroyed or anonymised.

6. Your Rights

Under KVKK Article 11, as a data subject you have the right to: • Learn whether your personal data is processed • Request information about processed personal data • Request correction • Request deletion or destruction • Object to processing • Request notification to recipients of any transfers • Object to outcomes resulting from automated analysis • Claim compensation for damages caused by unlawful processing

7. Cookies

Our website uses essential, functional and performance cookies to improve user experience and analyse site performance. You can manage cookies via your browser settings. Third-party analytics tools (Vercel Analytics, Google Analytics — to be activated after Phase 6 LAUNCH-03) collect anonymous usage statistics.

8. Application and Contact

To exercise your rights, you may submit a written application to info@kleppa.com.tr. Your application will be evaluated and responded to within 30 days at the latest. A processing fee may be charged in accordance with the Communique on the Procedures and Principles of Application to the Data Controller. Alternatively, applications are accepted via our registered electronic mail (KEP — to be shared before launch).