1. What this policy explains
This Privacy Policy explains in plain language what Extra Plastik San. Tic. A.Ş. (“Extra Plastik”) does with your information when you use our factory website. Legal details, controller information and your rights are set out in the KVKK Privacy Notice; additional information for EEA visitors is in the GDPR Notice. For cookies see the Cookie Policy.
2. Our principles
- Little data: we ask only for what an operation really needs. Phone and company are optional in every form.
- No sales, no ads: nothing is sold on the Site and no payment data is collected. Your data is not sold or shared for advertising.
- No tracking: there is no analytics, advertising or social media tracking code on the Site; tools such as Google Analytics or Facebook Pixel are not used.
- You are in control: you can change your profile, notification settings and consent to commercial messages in the user panel at any time, and delete your account.
3. What we collect, and when
When you visit the Site
As with any website, your browser sends your IP address and browser data with each request. We use them to show you the Site, keep it secure (for example to block repeated failed sign-in attempts) and detect errors. Error logs are deleted automatically after 14 days. Your language choice is kept in a cookie.
When you create an account
First name, last name, e-mail address and password are required; company and phone are optional. A 6-digit code is sent to confirm that the e-mail address is yours; it is valid for 15 minutes. Your password is never stored in plain text, only as an irreversible hash; nobody, including our staff, can see it.
When you use the contact form
Your name, e-mail address, chosen department, subject and message, and optionally your company and phone, are stored and forwarded to the e-mail address of the department. The IP address from which the form was sent is recorded with the message to prevent abuse. We do not use your message for anything other than answering it.
When you turn on notifications
Notifications about your account are shown on the Site. If you allow browser notifications, the subscription address and encryption keys created by your browser are stored, and notifications are delivered to your device in encrypted form through your browser vendor's push service. If a notification is not read within 5 minutes, it is sent as a browser notification or by e-mail, according to your settings.
When you consent to commercial messages
If you give consent at registration or on the “Communication Preferences” page, we may contact you by e-mail, SMS or phone about product news and announcements. The date of your consent is recorded. You can withdraw it on the same page at any time.
4. Who we share it with
Only with service providers needed to run the Site (server hosting and e-mail infrastructure), with competent authorities where required by law, and with your browser's push service if you turn on browser notifications. Details are in section 5 of the KVKK Privacy Notice.
5. How we protect it
- All communication with the Site is encrypted with HTTPS.
- Passwords are hashed irreversibly with a strong algorithm.
- Sign-in, registration, password reset and contact forms are protected against automated attacks by a captcha and rate limiting; verification codes have an attempt limit.
- Suspended accounts cannot sign in; only authorised administrators can access the admin panel.
- Your session is renewed when you change your password; “remember me” tokens are invalidated when your password is reset.
6. Children's privacy
The Site is a corporate website and is not directed at persons under 18. We do not knowingly collect personal data from persons under 18; if we become aware of such a case, the account is deleted.
7. Your rights and contacting us
To exercise your rights of access, rectification, erasure and objection, write to bilgi@extraplastik.com or use the contact form with the “Personal data (KVKK / GDPR) requests” department. The procedure and deadlines are explained in section 9 of the KVKK Privacy Notice.
8. Changes
We may update this policy as the Site changes. Significant changes will be announced on the Site; the current version is always on this page.