Privacy Policy

1. Data controller

The data controller for this website is [ALWIDOR Machinery — full legal / trade name], [trade registry number], with its registered address at [full company address], Bursa, Türkiye ("ALWIDOR", "we", "us"). For any question about this policy or your personal data, contact us at info@alwidor.com or [KVKK-specific contact / data protection contact, if any].

2. What personal data we collect

We collect personal data in the following ways:

• Contact form. When you submit the quote/enquiry form, we receive the name, company, email address, phone number, topic of interest and message you provide, plus (if you selected any) the machine and options you were viewing.
• Automatically, from your visit. Standard web server / hosting logs (IP address, browser type, pages visited, date and time) collected by our hosting provider [Cloudflare Pages or your host] for security and performance purposes.
• Third-party embeds. Pages with a Google Map, a YouTube video, or the Google reCAPTCHA widget cause your browser to contact Google directly, which may set cookies or collect data under Google’s own privacy policy — see Section 5.

3. Why we process your data

We use the data described above to:

• Respond to quote, service, spare-parts, dealership and general enquiries submitted through the contact form;
• Provide after-sales technical support for machines you have purchased;
• Maintain the security, availability and technical functioning of the website;
• Comply with legal obligations (e.g. accounting/invoicing records once a commercial relationship exists).

4. Legal basis for processing

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), we process your data based on your explicit consent (given by submitting the form) and, where applicable, because processing is necessary to take steps at your request prior to entering into a contract, or for our legitimate interests in operating and improving our business (KVKK Art. 5). For visitors in the European Economic Area, the equivalent legal bases under the GDPR are Art. 6(1)(a) (consent), 6(1)(b) (pre-contractual steps) and 6(1)(f) (legitimate interests).

5. Third-party services we use

This website uses the following third-party services, each of which may process data under its own privacy policy:

• Google reCAPTCHA — protects the contact form from spam and automated abuse. See Google’s Privacy Policy.
• Google Maps — embedded on the Contact page to show our location. See Google’s Privacy Policy.
• YouTube (Google) — embedded on product pages to show machines in operation. See Google’s Privacy Policy.
• Google Fonts — loads the website’s typefaces from Google’s servers.
• [Form processing service, e.g. Formspree/Web3Forms] — receives and forwards contact-form submissions to our inbox. See [provider]’s own privacy policy.
• [Hosting provider, e.g. Cloudflare Pages] — hosts this website and processes basic connection logs.

6. Cookies

This website itself does not set marketing or tracking cookies. A small amount of information (such as your chosen language) may be stored in your browser’s local storage to remember your preference — this is not shared with us or any third party. The third-party services listed in Section 5 (particularly Google Maps, YouTube and reCAPTCHA) may set their own cookies when their embedded content loads, governed by their own cookie policies.

7. How long we keep your data

We retain contact-form submissions for as long as necessary to respond to and, where relevant, act on your enquiry, and for [X months/years — to be confirmed] afterwards for our legitimate business records, unless a longer retention period is required by applicable law (for example, invoicing and accounting records, which Turkish law requires us to keep for 10 years).

8. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including [describe measures — e.g. restricted access, secure hosting, encrypted transmission]. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your rights

Under KVKK Article 11, and under the GDPR for visitors in the European Economic Area, you have the right to:

• Learn whether we process your personal data, and request information about it;
• Learn the purpose of processing and whether it is used in line with that purpose;
• Know the third parties to whom your data is transferred, in Türkiye or abroad;
• Request correction of incomplete or inaccurate data;
• Request deletion or destruction of your data, where the legal grounds for processing no longer apply;
• Object to a result arising solely from automated analysis of your data;
• Claim compensation for damage arising from unlawful processing.

10. How to exercise your rights

To exercise any of the rights above, write to us at info@alwidor.com or [full postal address for KVKK data-subject applications]. We will respond within the timeframe required by applicable law (under KVKK, no later than 30 days).

11. Children’s privacy

This website is directed at business professionals and is not intended for, and does not knowingly collect data from, children.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, and material changes will be reflected here.