Personal Data Notice
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (the "Law") by Saba Su Armatürleri Sanayi ve Ticaret Limited Şirketi ("Saba Armatür") as data controller, to inform people who visit the website published at sabaarmatur.com and sabaarmatur.com.tr (the "Site") and people who contact us.
1. Data controller
- Company
- Saba Su Armatürleri Sanayi ve Ticaret Limited Şirketi
- Address
- İstiklal Mah. Kavaklıdere Cad. No: 43/A Ümraniye / Istanbul
- MERSIS No
- 0735195217700001
- Tax Office / No
- Ümraniye / 7351952177
- Phone
- +90 532 410 03 46
- sabaarmatur@gmail.com
2. Personal data we process
- Security data: when you visit the Site, your IP address, browser and device details, the page you visit and the time of your visit are written to server logs.
- Contact data: the name, phone number, email address and message content you share when you call or email us or fill in the contact form on the Site.
- Transaction data: if you make a payment on the Site, the amount, transaction reference, date and result.
Saba Armatür never receives, sees or stores your card details. Card details are processed directly on the secure payment page of the licensed payment institution iyzico Ödeme Hizmetleri A.Ş.
3. Purposes and legal grounds
- Running the Site securely and preventing abuse and attacks: our legitimate interest under Article 5(2)(f) of the Law.
- Answering your requests, questions and order discussions: Article 5(2)(c), as necessary for entering into or performing a contract, and our legitimate interest under Article 5(2)(f).
- Receiving payments and keeping accounting and invoice records: performance of a contract under Article 5(2)(c) and our legal obligations under Article 5(2)(ç).
- Responding to requests from competent authorities and protecting our rights in disputes: Article 5(2)(ç) and (e).
4. How we collect data
Your data is collected electronically: automatically through server logs when you visit the Site, when you contact us by phone, email or the contact form on the Site, and when you use the payment page.
5. Transfers
Limited to the purposes above, your data may be shared with:
- iyzico Ödeme Hizmetleri A.Ş., to process payments,
- the infrastructure providers that host, deliver and protect the Site (server hosting and Cloudflare),
- Google (Gmail), the email service we use to receive messages sent through the contact form,
- our accounting and financial advisers,
- competent public authorities on request.
As our infrastructure and email service providers may operate servers outside Türkiye, security data and the contact data you send through the contact form may be transferred abroad in line with Article 9 of the Law.
6. Retention
Server access logs are kept for no more than 14 days and then deleted. Payment and accounting records are kept for the periods required by the Turkish Commercial Code and tax legislation (10 years for commercial books and records). Contact records are deleted or anonymised within a reasonable time after your request is resolved.
7. Your rights
Under Article 11 of the Law you have the right to learn whether your data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties it is transferred to in Türkiye or abroad, to request correction of incomplete or inaccurate data, to request deletion or destruction under Article 7 and notification of these actions to third parties, to object to a result against you arising solely from automated analysis, and to claim compensation for damage caused by unlawful processing.
8. How to apply
You can send your request in writing, in line with the Communiqué on the Procedures and Principles of Applications to the Data Controller, to İstiklal Mah. Kavaklıdere Cad. No: 43/A Ümraniye / Istanbul or to sabaarmatur@gmail.com. We will respond free of charge within 30 days at the latest. If the request involves an additional cost, the fee set by the Personal Data Protection Board may be charged.