KVKK Notice · Boztaş Makina

Data controller

This notice has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 (the “Law”). It explains how we process your personal data when you fill in the forms on boztas.com, write us an e-mail or call us. The Turkish version of this notice is the authoritative one.

The data controller is Boztaş Makina Sanayi ve Dış Ticaret A.Ş. Address: Uzay Sok. 2/1, 34736 Kadıköy / Istanbul, Türkiye. Telephone: +90 212 211 22 66. E-mail: info@boztas.com.

How we collect data

We receive your data only from you: through the forms on the website, by e-mail and by telephone. Forms and e-mail are processed electronically, by automated means.

The website sets no cookies and loads nothing from third-party servers unless you consent; it contains no advertising tools. If you consent, Google Analytics is used for visit statistics (see “Visit statistics” below).

Which data, for which purpose, on which legal basis

Request form (machine quote, spare parts, service, other topics). Your name, company, telephone, e-mail, machine brand and model, machine serial number, your message and the files you attach (photos, PDFs, drawings) are processed to answer your request, prepare a quotation, source parts and plan service. The legal basis is the establishment or performance of a contract (Article 5/2-c of the Law). If you send the request on behalf of the company you work for, the legal basis is our legitimate interest in answering the request (Article 5/2-f). Form data is not stored on the web server; it reaches our company mailbox as an e-mail. You receive a confirmation e-mail that contains only the request number.

Catalogue request. Your name, company, e-mail and, if you wish, telephone number are processed to send you the catalogue you asked for and, where needed, to contact you about that request. A download link valid for 7 days is sent to your e-mail address. We are notified who requested which catalogue and when it was downloaded. The legal basis is legitimate interest (Article 5/2-f).

Book request. When you ask for our founder’s book, your name and telephone number reach us by e-mail and are used only to get the book to you. The legal basis is our legitimate interest in fulfilling your request (Article 5/2-f).

Technical records. To prevent abuse, the form service keeps your IP address in temporary memory only; it is not written to disk. The web server may keep standard access logs (IP address, date and time, page requested, browser information). The legal basis is our legitimate interest in keeping the website secure (Article 5/2-f).

Visit statistics (only with your consent). If you accept in the cookie consent notice, Google Analytics 4 processes a cookie identifier, the pages opened, the source you came from, approximate location, and device and browser information to measure how the website is used. The legal basis is your explicit consent (Article 5/1 of the Law). You can withdraw your consent at any time with the “Cookie settings” link at the very bottom of the page; withdrawal does not affect processing up to that point. If you do not consent, this data is not collected at all.

Legal obligations. Commercial correspondence is kept because we are legally obliged to retain it (Article 5/2-ç) and, in the event of a dispute, for the establishment, exercise or protection of a right (Article 5/2-e).

Job applications and CVs

Job applications are made through the “job application” topic of the request form or by e-mail. Your name, telephone, e-mail, the text you write and the information in your CV (education, work experience, skills, references) are processed solely to assess your application and to contact you about it.

The legal basis is carrying out the process of establishing an employment contract with you (Article 5/2-c).
Your application is seen only by the people in our company who carry out the assessment.
Your application is not stored on the web server; it reaches us as an e-mail. Because our e-mail service is hosted in Germany, your application is stored on servers in Germany (see the section on transfers below).
Your application is kept for the duration of the assessment process; it is deleted when the process ends or when you ask us to.
Please do not include special categories of personal data such as health, religion, trade union membership or criminal record in your CV. We do not need this information for the assessment; such data may only be processed with your explicit consent (Article 6).

Book of memories

With the form on the “About our founder” page you choose where your words may appear: in the book being prepared, in the book of memories on the website, or for the family to read only. Everything you write reaches the family by e-mail.

If you tick “In the book of memories on the website”, your name, the note on how you knew our founder and what you wrote (including your answers to the questions) are stored on the web server. Your entry is published on that page, with your name, only after the family has approved it, and can then be read by anyone. Entries that are not approved are deleted. With “Only his family should read it”, your words are not stored on the web server and are not published anywhere.

Giving an e-mail address and a telephone number is optional. They are used only to contact you; they are neither stored on the web server nor published.

The legal basis is your explicit consent (Article 5/1). You may withdraw your consent at any time: simply write to info@boztas.com and your published entry will be corrected or removed.

Question form. The answers you give in the “Write in the book” window on our founder’s page, your name and your optional e-mail address and telephone number reach our family by e-mail; the full set of answers is not stored on the server. Your answers are published in the book being prepared and in the book of memories on the site only with the explicit consent you give separately for each (Article 5/1 of the Law), together with your name; without consent only our family reads them. You may withdraw your consent at any time.

Recipients and transfers abroad

Your data is passed on only to the following recipients, for the purpose stated:

Our e-mail service provider (Germany). Our e-mail service is hosted in Germany. All messages and attachments that reach us through the forms or by e-mail are therefore stored on servers in Germany. The provider processes this data only to provide the e-mail service, on our behalf.
Boztas Deutschland (Hindenburgstr. 62, 73760 Ostfildern, Germany). Our sister company handles the sourcing and shipping of spare parts. Your spare parts request may be shared with this company so that the part can be sourced.
The manufacturer of the machine. Where your quotation, spare parts or service request requires it, and only to that extent. If the manufacturer is abroad, this is also a transfer abroad.
Transport, customs and financial institutions. If a sales or service contract is concluded between us, to the extent necessary to perform it.
Our web hosting provider. Book of memories entries and access logs are kept on the server that hosts the website.
Google (visit statistics, only with your consent). Google Analytics data is processed on servers of Google LLC (USA) and its group companies outside Türkiye. This data is transferred only if you accept in the cookie consent notice.
Authorised public authorities. Only where the law requires it.

Transfers abroad are subject to Article 9 of the Law. We do not share your data with anyone else and we do not sell it.

Retention periods

Quotation, spare parts and service correspondence is commercial correspondence and is kept for 10 years under Article 82 of the Turkish Commercial Code.
Catalogue and book requests and other messages that do not lead to a business relationship are deleted once the purpose no longer exists.
Job applications are deleted when the assessment process ends.
Book of memories entries are kept for as long as they are published or until you ask for them to be removed.
Visit statistics are kept in Google Analytics for no more than 14 months; the cookies remain in your browser for no more than 13 months.
IP addresses are not stored permanently by the form service. Server access logs are kept for a limited period.

Data whose retention period has expired is deleted, destroyed or anonymised (Article 7 of the Law).

Your rights and how to apply

Under Article 11 of the Law you may apply to us and ask: to learn whether your data is processed and, if so, to receive information about it; to learn the purpose of the processing and whether the data is used in line with that purpose; to know the third parties in Türkiye and abroad to whom it has been transferred; to have it corrected if it is incomplete or inaccurate, to have it erased or destroyed where the conditions in the Law are met, and to have the recipients notified of these operations; to object to a result that arises against you from analysis carried out solely by automated systems; and to claim compensation if you suffer damage because of unlawful processing.

You may apply in one of the following ways:

in writing and signed, to the postal address above;
with a secure electronic signature or mobile signature, to info@boztas.com;
from the e-mail address you have previously given us and that is in our records, to info@boztas.com.

Your application must contain your name and surname, your Turkish ID number (for foreign nationals: nationality and passport number), your address for notifications, your e-mail address and telephone number if any, and the subject of your request.

We answer your application as soon as possible and within 30 days at the latest, free of charge. A fee set by the Personal Data Protection Board may be charged only if the answer exceeds 10 pages or is provided on a recording medium such as a CD or memory stick.

If your application is rejected, if you find the answer insufficient or if you receive no answer in time, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning of the answer and in any case within 60 days of the date of your application (Article 14 of the Law).

Last updated: 14 November 2026.