1. Data controller
The controller is Europa Climate İklimlendirme Sanayi ve Dış Ticaret Limited Şirketi, located at Fatih Mah. 66. Sok., Gürfer Sanayi Sitesi No: 7A, Kapaklı / Tekirdağ, Türkiye. Privacy contact: Berat DURAK, +90 850 606 01 09, info@europaclimate.com. This contact designation does not by itself constitute the formal appointment of a Data Protection Officer under Article 37 GDPR.
2. Scope
This Policy covers visits to the website, information entered into contact and project-enquiry forms, email correspondence, document downloads, cookie preferences and interactions with measurement or advertising technologies implemented on the site. Separate contractual notices may apply to customers, suppliers, employees or candidates.
3. Categories of data
Depending on your interaction, we may process the following information:
- Form, identity and contact data: name, business email, telephone, country, company and the contents of the message you submit.
- Business and enquiry data: product interest, project requirements, expected quantities, correspondence and request history.
- Marketing preference data: whether and when you chose to receive product introductions and commercial communications, and any later withdrawal or objection.
- Technical materials: drawings, specifications or files you voluntarily send by email.
- Device and usage data: IP address, timestamp, requested URL, referrer, browser, device, operating system, language, approximate location and security logs.
- Cookie and advertising data: consent status, pseudonymous identifiers, page interactions, campaign source, conversion events and preferences when the relevant optional category is accepted.
- Public interaction data: information visible when you interact with our social-media pages, subject to the platform’s own rules.
4. Sources of data
Data is obtained directly from you, automatically from your browser or device, from correspondence with our personnel, from authorized business representatives, and—when enabled with the required permissions—from analytics, advertising and social-media providers. Search engines may crawl public pages and send technical request data to our hosting infrastructure.
5. Purposes and legal bases
We process personal data only for specified purposes and on an applicable legal basis under the GDPR and Law No. 6698.
- Responding to form submissions, maintaining customer communication, preparing quotations and taking pre-contractual steps: contract necessity or your request before a contract; KVKK Article 5/2(c).
- Presenting products relevant to an active enquiry within the response and relationship: the requested communication, pre-contractual steps or a balanced legitimate interest, as applicable.
- Sending recurring product introductions, news or commercial electronic communications: the separate optional consent shown beneath the form, or another lawful basis expressly permitted by applicable commercial-message rules.
- Managing customer and supplier relationships, protecting systems, preventing misuse and improving business operations: legitimate interests, balanced against your rights; KVKK Article 5/2(f) where applicable.
- Accounting, recordkeeping, regulatory requests and legal claims: compliance with legal obligations and establishment, exercise or defence of rights.
- Analytics, session measurement, advertising attribution and personalized marketing technologies: prior, specific and withdrawable consent where required.
6. Recipients and hosting
Access is limited according to role and necessity. Data may be disclosed to authorized Europa Climate personnel, hosting and security providers, business email providers, IT support, professional advisers, logistics or production partners involved in a request, and public authorities where legally required. Google, Meta and Microsoft may receive device or event data only when their technologies are installed and the relevant consent or other lawful condition is satisfied.
Website and form correspondence records are stored on Europa Climate servers hosted at the Datacasa Tier 3 data centre, Kayabaşı Mahallesi, Ulubatlı Hasan Caddesi, D Blok No:3, 34494 Başakşehir/İstanbul, Türkiye. The data centre location is in Türkiye; access to the servers remains limited to authorized operational and technical personnel.
7. International transfers
Some infrastructure, email, analytics, advertising or social-media providers may process data outside Türkiye or the European Economic Area. International transfers are made only under an applicable mechanism, such as an adequacy decision, standard contractual clauses, binding corporate rules, an approved undertaking or another method permitted by GDPR Chapter V and KVKK Article 9. Optional tracking remains disabled until the required consent and technical configuration are present.
8. Retention
We retain data for no longer than necessary for the stated purpose and legal obligations.
- General enquiries, form submissions and quotation correspondence: up to 3 years after the last substantive contact, unless a contract or dispute requires longer retention.
- Product-promotion contact data: until consent is withdrawn, an objection is received or the relationship becomes inactive; records are reviewed at least every 3 years.
- Contracts, invoices and legally required commercial records: generally 10 years or the period required by applicable law.
- Security and access logs: normally up to 12 months, unless an incident requires preservation.
- Consent and withdrawal records: up to 5 years after the consent is withdrawn or expires, to demonstrate compliance.
- Cookie and analytics data: according to the periods listed in the Cookie Policy and the configured provider retention settings.
- Unsolicited technical files: deleted or returned when no longer required for the evaluation, subject to legal holds.
9. Security
We use proportionate technical and organizational measures, including access controls, role limitation, authentication, update management, logging, backups and confidentiality obligations. No internet transmission is risk-free; suspected incidents are assessed and notified to authorities or affected persons when required by law.
10. Your choices and rights
Depending on the applicable law, you may request access, information, correction, deletion, restriction, objection, portability, withdrawal of consent and review of decisions based solely on automated processing. You may also complain to the Turkish Personal Data Protection Authority or a competent EEA supervisory authority. Withdrawing consent does not affect prior lawful processing.
- Send requests to info@europaclimate.com with the subject “Data Protection Request”.
- You may also contact Berat DURAK at +90 850 606 01 09.
- We may request proportionate information to verify identity and authority before responding.
- Requests are answered within the period required by the applicable law.
11. Automated decisions and children
Europa Climate does not use website data to make decisions producing legal or similarly significant effects solely by automated means. The site is a business-to-business service and is not directed to children. Do not submit information about minors unless necessary and lawfully authorized.
12. Cookies, crawlers and third-party platforms
The Cookie Policy describes local storage, analytics, Meta Pixel, Google technologies and Microsoft/Bing technologies. Search-engine crawlers access public content according to their own technical and privacy rules; their requests can appear in server logs. Social-platform links do not by themselves authorize optional tracking on this site.
13. Updates
Material changes will be reflected by updating the effective date and, where legally required, by providing a prominent notice or requesting renewed consent. The version displayed on this page is the current website privacy notice.