Privacy notice

Viaforta is the data controller under the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and, where the GDPR applies to you, under Article 4(7) of Regulation (EU) 2016/679.

Enquiries about your data reach a named person, not a queue.

Only the fields on the enquiry form, plus the technical details a web request carries. There is no account, no tracking profile and no data bought from anyone else.

To answer your enquiry, to quote, and to fulfil and invoice an order if one follows. That is the whole list.

We do not send a newsletter, we do not profile you, and we do not pass your details to anyone who would market to you.

Under the GDPR, answering an enquiry you sent and performing a contract that follows from it rest on Article 6(1)(b). Keeping the form usable — the abuse checks — rests on our legitimate interest under Article 6(1)(f). Keeping invoices rests on our legal obligation under Article 6(1)(c).

Under the KVKK, the same processing is grounded in Article 5(2)(c) — necessary for the establishment or performance of a contract — and Article 5(2)(f), our legitimate interest, for the abuse checks.

Six suppliers process data on our behalf, each under a contract that limits them to that purpose. None of them may use your details for anything of their own.

An enquiry that does not become an order is kept while it is live and for a period after, so that a buyer who comes back months later is not starting again. After that it is deleted.

Where an order follows, the commercial and accounting records are kept for as long as Turkish tax and commercial law requires, which is longer than we would otherwise choose.

The abuse counter expires by itself within minutes. Server logs roll over on our host’s own schedule.

We are in Türkiye. Our suppliers operate infrastructure in the European Union and the United States, so answering you involves your details leaving your country and, if you are in the EU or the UK, leaving that area.

Those transfers are made under the Standard Contractual Clauses the suppliers publish, and under the KVKK on the basis that the transfer is necessary to perform the contract you asked us to enter into.

You can ask what we hold about you, have it corrected, have it deleted, ask us to restrict or stop a particular use, and ask for a copy in a portable form. Under the KVKK you may also ask whether your data has been transferred abroad and to whom.

Write to the address below and we will answer within thirty days — in practice, much sooner. There is no charge.

If you are not satisfied, you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu) or, in the EU or UK, to your national supervisory authority.

This site sets one kind of cookie, and only if you say yes to it. Google Analytics counts page views and where visitors arrive from, so we know which part numbers bring buyers here. Accept and it sets its own cookies; decline and it is never loaded. Until you choose, nothing is written to your device and the counter runs without identifying you. There is no advertising tag and no social embed.

Your answer is remembered so you are not asked again, and a refusal is remembered exactly as an acceptance is. Clearing your browser data forgets it and the question comes back.

One other thing is stored on your device: the quotation list you build by adding parts, held in your browser’s local storage so it survives moving between pages. It never leaves your device until you press send, it contains only part numbers and quantities, and clearing your browser data removes it.

Write to the address below with "data request" in the subject line and it will reach the person who can act on it.