Privacy
Version 1.1 · effective October 7, 2026
This Privacy Policy and Information Notice explains, under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, how your personal data is processed when you visit the ransawhite.com website (the “Site”) and when you contact us.
Data controller
Your personal data is processed by RANSA WHITE DEMİR TİCARET İTHALAT İHRACAT LİMİTED ŞİRKETİ (the “Company”) as the data controller.
Address: Rüstem Paşa Mah. Dere Sk. No: 6 İç Kapı No: 4 Merkez / Yalova / Türkiye. Email: info@ransawhite.com. Phone: +90 506 892 78 79. MERSİS No: 0734235220700001.
What the Site is
The Site is an information-only catalogue presenting our products. It has no customer accounts, cart, online ordering, payment, contact form, newsletter, analytics or advertising tools. No account, order, delivery or payment information is collected through the Site, and your personal data is not processed for marketing or profiling.
If any of these services is offered in the future, this notice will be updated before the related processing begins.
Personal data processed, purposes and legal grounds
1) Providing the Site and technical records. When you visit the Site, your browser sends the technical information needed to show you its pages: your IP address, the address of the page requested (if you searched, your search term is part of that address), the date and time, browser and device information, your browser’s language setting and, where there is one, the address of the page that referred you. This information is processed to provide the Site to you, to keep it secure and to detect and fix errors, and is kept as technical records in the systems of our hosting and application providers. Legal ground: our legitimate interest in operating and securing the Site (KVKK Art. 5/2-f).
2) Request limiting. To prevent misuse of the Site through excessive or automated requests, your IP address is signed within the Site’s infrastructure, sent to the application server that provides the product information, and used in a short-lived request counter. For this purpose your IP address is not written to any other record, and it is masked in the application server’s logs. Legal ground: our legitimate interest in the Site’s security (KVKK Art. 5/2-f).
3) Search statistics. A simplified form of the term you type into the search box, the search language, the number of results and the filters you choose are recorded as statistics to improve our product range. These records contain nothing that identifies you (such as an IP address, a cookie or account details) and are not personal data unless you yourself type personal information into the search term. Please do not type personal information into the search box. If a search term does contain personal data, the legal ground is our legitimate interest (KVKK Art. 5/2-f).
4) When you contact us. The Site has no contact form. When you contact us by email or phone, your name, email address or phone number, the content of your message and any other information you give us are processed to answer your enquiry and to inform you about our products, their availability and prices. Legal grounds: our legitimate interest in answering your enquiry (KVKK Art. 5/2-f); where your enquiry concerns entering into a sales contract outside the Site, its direct connection with entering into that contract (KVKK Art. 5/2-c); and fulfilling our legal obligations (KVKK Art. 5/2-ç).
Please do not send us special categories of personal data (for example health information). No decision affecting you is made solely on the basis of analysis by automated systems.
How data is collected
Data for technical records, request limiting and search statistics is collected by fully automated means while you visit the Site. Enquiries are collected partly by automated means through the emails you send us, and by non-automated means through phone calls.
Recipient groups and purposes of transfer
Your personal data is transferred only to the extent needed to provide the following services, to providers acting as data processors on the Company’s behalf:
Hosting, content delivery and server services — Netlify, Inc. (based in the USA; global server network): requests to the Site and technical records.
Application server, database and cache services — Railway Corporation (USA): providing product information, request-limiting counters and application logs.
Domain name (DNS) and email routing services — Cloudflare, Inc. (based in the USA; global server network): forwarding the emails you send to info@ransawhite.com.
Email mailbox service — Google (based in the USA): receiving and storing enquiry emails.
Your personal data may also be disclosed to legally authorised public authorities on request and to the extent required by law (KVKK Art. 5/2-ç). Your personal data is not sold and is not shared with third parties for advertising or marketing.
Transfers abroad
Because the servers of the providers above are outside Türkiye, these transfers are transfers abroad under Article 9 of KVKK. The Personal Data Protection Board has issued no adequacy decision for these countries. Of the appropriate safeguards listed in KVKK Art. 9/4, the standard contract (Art. 9/4-(c)) has been chosen for these transfers. Signing the standard contract announced by the Board and notifying it to the Authority has not yet been completed for Netlify, Inc., Railway Corporation, Cloudflare, Inc., Google.
You can exercise the rights described below for personal data transferred abroad as well.
Retention
Request-limiting counters: 60 seconds; deleted automatically when the period ends.
Technical records: kept in the systems of our hosting and application providers under those providers’ log-retention arrangements, and deleted by the provider when that period ends. The Company does not copy these records into its own systems and uses them only for security and troubleshooting. Because the retention period depends on the provider and the service plan, no specific period is promised here.
Search statistics: may be kept without a time limit as statistical records that contain no personal data. If you tell us that a search term contains your personal data, the record is deleted or anonymised.
Enquiry correspondence: kept until your enquiry is resolved and afterwards for as long as needed to meet retention obligations under the law and to protect rights in case of a dispute.
Personal data whose retention period has ended is deleted, destroyed or anonymised.
Your rights under KVKK
Under Article 11 of KVKK you have the right to learn whether your personal data is processed; to request information if it has been; to learn the purpose of processing and whether the data is used accordingly; to know the third parties in Türkiye or abroad to whom it has been transferred; to request correction if it is incomplete or inaccurate; to request its deletion or destruction under the conditions of Article 7 of KVKK; and to request that these actions be notified to the third parties to whom it was transferred.
You also have the right to object to a result against you arising from analysis of the data exclusively by automated systems, and to claim compensation if you suffer damage because your personal data was processed unlawfully.
Making a request
Under the Communiqué on the Procedures and Principles of Applications to the Data Controller, you can send requests about these rights in writing to our address above, or signed with a secure electronic signature or mobile signature, or from an email address you have previously given us and that is registered with us, to info@ransawhite.com.
Your request must include your name and surname; your signature, for written requests; your Turkish ID number if you are a citizen of the Republic of Türkiye (otherwise your nationality and passport number, or ID number if any); your residential or business address for notifications; your email address and phone number for notifications, if any; and the subject of your request.
Requests are answered as soon as possible and within thirty days at the latest, free of charge; if the action involves an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If your request is refused, you find the answer insufficient, or no answer is given in time, you may complain to the Personal Data Protection Board within thirty days of learning of the answer, and in any case within sixty days of your request (KVKK Art. 14).
Cookies
The Site sets no cookies for visitors. Only when you switch to another language using the Site’s language links is a language preference cookie used, to remember the language you chose for the session. Details are on the Cookie information page.
Changes
This notice is updated when needed. The current version number and effective date are shown at the top of this page.
This English translation is provided for information; if there is any discrepancy, the Turkish text prevails.