Privacy Policy

Data controller

Mazaka Otomotiv ve Mühendislik Sanayi Ticaret Limited Şirketi (Mazaka Grup) — Süksün Zafer Mahallesi Sedef Bulvarı No: 197A, 38560 İncesu / Kayseri, Türkiye. Email: info@mazakagrup.com

What data do we process, and why?

You do not need to register or create an account to browse the site. We only collect data if you fill in the contact form:

• Form data: full name, phone, email (optional), vehicle make/model (optional), purpose of use and your message. Purpose: to evaluate your request and get back to you.
• Consent record: the time at which you accepted the KVKK disclosure text and the version of the text you accepted.
• Security record: your IP address is not stored directly; a value hashed with a secret key is kept for rate limiting, to prevent abuse and bot traffic. Similar hashed values may also be kept to limit repeated submissions from the same phone number or with the same message.
• Server logs: Firebase Hosting and Cloud Functions, which host the site, may keep standard request logs for technical operation and security.

Cookies and third-party content

Our site does not use its own cookies and does not perform analytics or advertising tracking. Fonts are loaded from our own server.

The Google Maps content on the contact page is not loaded until you click "Show Map". When the map loads, Google may set cookies and processes data about your visit (e.g. IP address, browser information) under its own policies. This processing takes place on Google infrastructure.

If you click the WhatsApp link on the site and send a message, your message and phone number are processed under WhatsApp's (Meta's) own privacy policy; this processing takes place outside our site.

Hosting and transfer abroad

Your form data is processed and stored on Google Firebase infrastructure. The Firestore database and Cloud Functions run in Google data centres in Europe; the notification email is delivered to info@mazakagrup.com via Gmail. Because the service provider is located abroad and data is processed in data centres outside Türkiye, this processing may constitute a transfer abroad under Article 9 of the Turkish Personal Data Protection Law (KVKK). To obtain information about the basis of the transfer, you can contact info@mazakagrup.com.

[TO BE VERIFIED: the legal basis of the transfer abroad — to be added once received from legal counsel.]

Retention periods

• Contact requests (form data and consent record): 24 months from the date the request was received. Records that were not processed because of spam, repetition or exceeding rate limits are deleted automatically after 30 days.
• Rate-limiting counters: short-lived technical records that are deleted automatically.
• Server/request logs: Google Cloud Logging keeps logs for 30 days by default. Care is taken not to write personal data to these logs.
• Email correspondence: kept for 24 months after the request is concluded. If a commercial relationship is established, the statutory retention periods under the relevant legislation apply.

Security

The site is served over HTTPS only. Form data is validated on the server and limited against spam and abuse. No payment or identity information is requested.

Your rights and applications

Under Article 11 of Law No. 6698 you have the right to learn whether your data is being processed, to request its correction or deletion, and to object to its processing. You can send applications to info@mazakagrup.com; they are answered within 30 days at the latest. See the KVKK Disclosure Text (/en/kvkk/) for details.

Changes

This policy may be updated; the current version is always published on this page.