Legal
Privacy notice.
This notice explains what personal data this website collects, why it is processed and how you can exercise your rights under Turkish data protection law (KVKK No. 6698) and, where applicable, the GDPR.
Privacy notice
Last updated · 17 September 2026
Who is responsible
The data controller is the legal entity behind Stocklot Group, whose registered details appear in the footer of every page. You can reach the controller through the contact channels listed on the contact page.
What data is collected
Only what you type into a form: your name, e-mail address and, if you provide them, company, phone number, country, product or material, quantity, subject and message. Stock offer forms may also carry the files you attach (price-free stock lists, packing lists, photos).
The website sets no analytics, advertising or profiling cookies and embeds no third-party trackers. Server access logs kept by the hosting provider for security and troubleshooting may contain your IP address.
Why it is processed
To read your enquiry, reply to it and, where it leads somewhere, to carry out the trade or project discussion that follows. Nothing is used for automated decision-making or profiling.
Legal basis: processing necessary for the conclusion or performance of a contract, and the legitimate interest of responding to an enquiry addressed to us (KVKK art. 5/2; GDPR art. 6/1-b and 6/1-f).
Where it goes
The site is hosted on infrastructure located in the European Union (Frankfurt). Form submissions are delivered to the systems the company uses to follow up enquiries; attachments are not published and are not stored on the web server. Data is not sold, rented or shared for marketing purposes.
How long it is kept
Enquiry data is kept for as long as the commercial relationship it belongs to requires, and afterwards only for the periods that tax and commercial legislation impose. When neither applies any more, it is deleted or anonymised.
Your rights
Under KVKK art. 11 you may ask whether your personal data is processed, request information about it, ask for correction of inaccurate data, request deletion, and object to results produced solely by automated analysis. Under the GDPR you additionally have the rights of access, portability and restriction.
Write to the contact address on the contact page. Requests are answered at the latest within thirty days.
Cookies
One functional cookie is used: it remembers the language you picked so the site does not switch back on your next visit. It carries no identifier, is not shared, and the site works without it.
This page is a plain-language notice, not a contract. If a point below needs to be read against the statute, the Turkish text of KVKK No. 6698 prevails.
