verified Legal

Data Processing Policy

This Data Processing Policy describes in more detail the processing activities summarised in our Privacy Policy, as required by KVKK and GDPR (information obligation and record of processing).

schedule Last updated: 2 October 2026

01 Controller and contact

Stalroc Industrial, Ankara, Türkiye. Data protection requests: export@stalroc.com.

02 Processing activities

  • check_circle Contact form
    data
    name, email, phone, company, message
    Purpose
    answering enquiries
    Legal basis
    pre-contractual steps / legitimate interest
    Retention
    up to 5 years
  • check_circle Quotation (RFQ) form
    data
    name, email, phone, company, selected product, message
    Purpose
    preparing and following up quotations and orders
    Legal basis
    pre-contractual steps / contract
    Retention
    up to 5 years, longer where tax or commercial law requires
  • check_circle WhatsApp button statistics
    data
    page, language, referrer, browser string and a one-way hash of the IP address
    Purpose
    understanding how often the button is used
    Legal basis
    legitimate interest
    Retention
    as long as needed for statistics
  • check_circle Spam protection (reCAPTCHA)
    data
    IP address, browser and interaction signals processed by Google
    Purpose
    preventing abuse of forms
    Legal basis
    legitimate interest
  • check_circle Website analytics (Google Analytics, Tag Manager; Yandex Metrika for Russian pages)
    data
    pseudonymous identifiers, pages viewed, device and approximate location
    Purpose
    improving the site
    Legal basis
    consent

03 Processors and recipients

Hosting and infrastructure providers, email delivery providers, Google LLC / Google Ireland Limited and Yandex LLC act as processors or independent controllers for the activities above. We only use providers that offer appropriate data protection commitments.

04 Where data is stored

Form data is stored in our database and in our mailboxes. Providers may process data outside Türkiye and the EEA; transfers are covered by the safeguards required by KVKK Article 9 and GDPR Chapter V.

05 Security measures

  • check_circle Encrypted connections (HTTPS) for all pages and forms.
  • check_circle Access to the admin area limited to authorised staff with password authentication.
  • check_circle Rate limiting and reCAPTCHA against automated abuse.
  • check_circle IP addresses in statistics are stored only as salted hashes.

06 Automated decisions

We do not make decisions that produce legal effects on you solely by automated means or profile visitors for advertising.

07 Exercising your rights

Send a request to export@stalroc.com with your name and the email address you used. We may ask for proof of identity. We answer within 30 days, free of charge unless the request is clearly excessive.

Questions about your data?

Write to us and we will reply within 30 days.

mail export@stalroc.com