Data controller
Kalida Halı San. ve Tic. A.Ş. is the data controller for the contact, quotation and sample forms on www.kalida.com.tr.
- Address: Dr. Mehmet Akarsu Mh. Ahi Evran Sanayi Sitesi Yağcıbedir Sokak No:1, Demirci, Manisa.
- Email: info@kalida.com.tr · Telephone: +90 236 462 10 60.
- Registered electronic mail (KEP): kalida.hali@hs01.kep.tr · Central Registration System (MERSİS) number: 0492054036300001.
This notice also covers your cookie preferences, security checks and optional site measurement.
What information do we collect, and how?
We collect information directly from you through electronic forms and email correspondence about your enquiry. Depending on the form, we process your full name, company/organisation, country, email, phone/WhatsApp, project or product type, estimated carpet area, target delivery country, preferences and message. The detailed sample form also collects recipient and delivery address details. Required fields are marked on the form; you may leave optional fields blank.
Do not enter identity numbers, identity documents or special categories of personal data in the forms. If you provide another person's delivery details, share only what is necessary and make this notice available to them.
The form server uses your IP address briefly, in memory only, to limit unwanted submissions; it does not create a persistent IP record. Vercel also keeps its own short-term access logs. The application's error logs do not include form field values.
Cookies and optional measurement
Your cookie preference is stored in the kalida_consent cookie in your browser. The record contains your Analytics/Advertising measurement choice, the policy version, recording time and expiry time; it contains no personal identifier.
Vercel Inc. (hosting and security) uses the necessary _vcrcs cookie, lasting 1 hour and set only when the security check screen is shown, to verify that the visit comes from a real browser.
Google Analytics 4 is used through Google Tag Manager only with your Analytics consent. We measure page views, form starts, form errors using fixed codes, requests accepted by the server, clicks on WhatsApp/phone/email links and quotation/sample buttons. A link click does not mean that a call or message took place.
In Google Analytics 4, Google Signals and user-provided data collection are disabled; the site does not send a User-ID. Enhanced measurement is disabled; only events sent by the site are measured.
Measurement data comprises the page URL with its query and # parts removed, page title, safe previous-page information, page language and type, and project type, form type, error and link codes. The project type code comes only from the project type selection or page path. Names, company details, email addresses, phone numbers, addresses, city/postcode, the country entered in a form, carpet area in m², messages/notes/preferences and other form content, and link destination addresses or numbers are not sent to Google measurement tools. Google also processes technical information such as cookie identifiers, browser/device details and approximate location derived from IP addresses.
No requests are sent to Google before Analytics consent or when Analytics is rejected. Interactions without consent are not sent later. There is no advertising tag or cookie in the Advertising measurement category; your choice is sent to Google solely as a consent signal when Analytics is on. Advertising personalisation is not offered in the preference panel; the site always marks the corresponding consent signal as denied when sending it to Google.
You can change your choices or withdraw consent through Cookie preferences in the footer. When Analytics consent is withdrawn, Google Analytics is disabled, Google analytics and advertising cookies are deleted and the page reloads. The cookie list and further details are on the Cookie Policy page: /en/cookie-policy.
Purposes and legal grounds
| Purpose | Legal ground under Turkish Law No. 6698 |
|---|---|
| Assessing and answering a quotation or sample request you make on your own behalf, and arranging any necessary sample delivery. | Article 5(2)(c): Where processing is necessary for establishing or performing a contract, directly relates to that contract and concerns a party to it. |
| Handling a business enquiry with an organisation's representative, answering general questions and keeping the forms secure. | Article 5(2)(f): Our legitimate interests in responding to enquiries and protecting the service, provided that processing does not harm your fundamental rights and freedoms and is limited to necessary information. |
| Keeping legally required documents and responding to KVKK rights requests and binding official requests. | Article 5(2)(ç): Fulfilling legal obligations. |
| Using relevant records as evidence in a dispute. | Article 5(2)(e): Processing necessary to establish, exercise or protect a right. |
| Storing and applying your cookie preferences; verifying real browser visits through security checks. | Article 5(2)(f): Our legitimate interests in applying your preferences and protecting the site, provided your fundamental rights and freedoms are not harmed. |
| Measuring site use and interactions through Google Analytics 4. | Article 5(1): Your explicit consent for the Analytics category. |
| Sending the Advertising measurement choice to Google as a consent signal only when Analytics is on. | Article 5(1): Your separate explicit consent for the Advertising measurement category. |
Submitting a form does not create a marketing subscription.
Sharing and international transfers
Kalida staff access your enquiry where necessary for their duties. The flow through external services is as follows:
| Recipient and country | Purpose and information shared |
|---|---|
| Vercel Inc. — United States | Processing the form on the server; form data and the service's short-term access logs. |
| Resend — US company; sending region Ireland, EU | Emailing form information to info@kalida.com.tr and keeping sending records. |
| Google (Google Workspace) — based in the United States; data may be processed in Google's data centres abroad | Receiving, storing and responding to the enquiry email in the info@kalida.com.tr mailbox. |
| Yurtiçi Kargo — Türkiye; UPS — the delivery country outside Türkiye | Recipient name, phone and delivery address if a sample is dispatched. |
| Google LLC / Google Ireland — transfers to the United States | Only with Analytics consent, Google Analytics 4 and Google Tag Manager receive the measurement data and technical information described above, and consent signals according to your choices. |
Necessary information may also be shared with authorised public bodies and courts in response to legally binding requests. Domestic disclosures are subject to the conditions in KVKK Article 8.
International transfers are carried out on the basis of the relevant processing condition and safeguards under KVKK Article 9, such as standard contracts published by the Board. Regular transfers through these services are not based on explicit consent.
The standard contract and notification process under KVKK Article 9 for Google Analytics 4 and Google Tag Manager has not yet been completed. Analytics consent does not replace an international transfer safeguard.
Retention periods
| Record group | Retention period |
|---|---|
| Correspondence for enquiries that do not proceed | 2 years after the last correspondence; legally required commercial correspondence falls within the group below. |
| Commercial documents relating to enquiries that become contracts, and commercial correspondence subject to mandatory retention | 10 years from the end of the calendar year in which the document was created or the correspondence was received/sent. |
| Recipient and delivery details used solely for sample dispatch | 1 year after delivery or closure of the shipment, excluding commercial documents subject to mandatory retention. |
| KVKK rights requests and response records | 3 years after the request is concluded. |
| Cookie preference — kalida_consent | 6 months (183 days); a new choice is requested if the policy version changes. |
| Vercel security check cookie — _vcrcs | Set only when the security check screen is shown; 1 hour. |
| Analytics cookies — _ga and _ga_9R5W8TXDH0 | 2 years; Google's default, unchanged on the site. Deleted if Analytics consent is withdrawn. |
| Event-level and user-level data in the Google Analytics 4 property | 14 months; a new visit from the same browser restarts the period for user-level data. Separate from the 2-year browser cookie lifetime; aggregated standard reports are not affected by this setting. |
Enquiry records are kept as emails in the company mailbox rather than in a separate persistent database. Vercel access logs and Resend sending records are subject to the providers' own retention periods. At the end of a retention period, data is deleted, destroyed or anonymised unless another legal ground for retention applies. In an ongoing dispute, only necessary records are kept until the relevant legal ground for retention ceases to apply.
Your rights and how to apply
Under KVKK Article 11, you may find out whether your data is processed and, if so, request information about the processing, its purpose, whether data is used in accordance with that purpose, and recipients in Türkiye or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction when the conditions in Article 7 are met, and notification of these actions to recipients. You may object to an adverse result arising solely from automated analysis and seek compensation for damage caused by unlawful processing.
You may submit a signed written request to our company address, use our KEP address, or email info@kalida.com.tr using a secure electronic or mobile signature. You may also email info@kalida.com.tr from an email address previously given to Kalida and recorded in our systems.
Include your full name, signature for a written request, Turkish identity number or, for foreign nationals, nationality and passport number or identity number if any, address for service, any notification email/phone/fax details, and the subject of your request. Attach relevant information and documents. These details are not requested in ordinary quotation/sample forms.
Requests are answered as soon as possible and within 30 days at the latest. The process is normally free; the Board's tariff may apply if additional costs arise. Any fee collected is refunded if the request arises from Kalida's error.