Privacy notice

Effective date: 2 September 2026

This notice explains how Sorkunlu Tekstil San. Tic. A.Ş. (“Sorkunlu”, “we”) processes personal data relating to visitors, prospective customers, customer representatives and other people who contact us through this website. Sorkunlu is the data controller for the processing described below.

1. Data controller and contact

Sorkunlu Tekstil San. Tic. A.Ş.
Bozburun Mah. 7045 Sok. No: 35, Merkezefendi / Denizli / Türkiye
info@sorkunlu.com.tr
+90 (258) 371 30 70

2. Personal data we process

Depending on how you use the website, we may process:

• identity and contact data, such as your name, business email, telephone number, country and delivery address;
• business and professional data, such as company, website, role and preferred contact method;
• project and sample information, including product interests, quantities, timing, target market, material and artwork status, compliance requirements, notes and reference links;
• communication records and our responses;
• marketing preference, only where you choose the optional marketing box; and
• limited technical and security data, including IP address and submission time. The form service uses an IP address temporarily for abuse prevention and does not keep a separate form database.

Please do not submit special-category personal data, confidential artwork or third-party personal data through a free-text field or reference link unless this is necessary and you are authorised to do so.

3. Purposes and legal grounds

We process the data above to:

• receive, assess and respond to project briefs and sample requests;
• prepare proposals, samples and steps requested before entering into a contract;
• manage business correspondence and maintain appropriate records;
• protect the website, forms and mail service against misuse; and
• send relevant business news or collection updates where you have separately consented.

Under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), the principal legal grounds are that processing is necessary for steps requested before or in connection with a contract (Article 5/2-c), for compliance with legal obligations (Article 5/2-ç), for the establishment, exercise or protection of a right (Article 5/2-e), or for our legitimate interests provided your fundamental rights are not harmed (Article 5/2-f). Marketing is based on your separate consent (Article 5/1) where consent is required. Where the GDPR applies, the corresponding grounds are Articles 6(1)(b), 6(1)(c), 6(1)(f) and, for consent-based marketing, 6(1)(a).

4. How data is collected

Data is collected electronically when you complete a project or sample form, contact us by email or telephone, or interact with the website. Form submissions are transmitted over the site’s own domain to our form receiver and then delivered to the Sorkunlu Microsoft 365 mailbox. They are not written to a separate customer or form database.

5. Recipients and international transfers

Data may be available, to the extent required for the stated purposes, to authorised Sorkunlu personnel; hosting, information-security and email providers; professional advisers; and competent public bodies where disclosure is legally required. Our email workflow uses Microsoft Graph and Microsoft 365/Exchange Online. Only where you have given consent, Google Ireland Limited (Google Analytics 4) processes visitor analytics; without consent no data reaches Google. Depending on the configured service location and support operation, cloud providers may process data outside Türkiye.

An international transfer is made only where a condition under KVKK Article 9 is met, including an adequacy decision, an appropriate safeguard such as the applicable standard contractual clauses, or a statutory exceptional circumstance. Where the GDPR applies, transfers are protected by an applicable adequacy decision, standard contractual clauses or another lawful safeguard.

6. Retention

• Form data remains in memory only until it is delivered by email; the form service does not keep a separate persistent copy.
• Business enquiries and related email correspondence are normally retained for up to two years after the last meaningful contact.
• If an enquiry becomes a commercial relationship or dispute, relevant records may be retained for the applicable statutory, accounting and limitation periods.
• Marketing preference and related contact data are retained until consent is withdrawn or the purpose ends, subject to records needed to demonstrate an opt-out.
• IP addresses held by the form service for rate limiting expire after approximately ten minutes.

Data may be deleted or anonymised sooner when it is no longer needed.

7. Browser storage

The website stores your language choice in local storage and your temporary sample list in session storage. These values remain on your device and are not sent to Sorkunlu until you submit a related form. See our Cookie Notice for details.

8. Your rights

Under KVKK Article 11, you may ask whether your personal data is processed; request information about processing; learn its purpose and whether it is used accordingly; learn the recipients in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where the legal conditions are met; request notification of correction or deletion to recipients; object to an outcome produced exclusively by automated analysis; and claim compensation where unlawful processing causes damage. Where the GDPR applies, you may also have rights to restriction, portability and to lodge a complaint with a competent supervisory authority.

Send a request to info@sorkunlu.com.tr or to our postal address above. Please describe the request and provide only the information reasonably necessary to verify your identity. You may withdraw marketing consent at any time without affecting earlier lawful processing.

9. Security, children and updates

We apply proportionate administrative and technical controls, including encrypted transport, restricted mailbox access, input limits and abuse controls. No internet service can guarantee absolute security. This B2B website is not directed at children and we do not knowingly collect children’s data through its forms.

We may update this notice when our processing or legal obligations change. The current version and effective date will always appear on this page.