Privacy Policy
Last updated: 25 January 2026
1. Who we are (Data Controller)
This website (“Site”) is operated by Kermit Plastik Sanayi ve Ticaret Anonim Şirketi (“Kermit Floor”, “we”, “us”).
- Data Controller (KVKK): Kermit Plastik Sanayi ve Ticaret Anonim Şirketi
- Address: Cumhuriyet Mh. Cihan Sk. No:4 ÇAYIROVA / KOCAELİ - TÜRKİYE
- Contact (privacy): info@kermit.com.tr
- Phone: +90 262 658 97 29
2. Scope
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you:
- visit the Site,
- contact us via forms, email, phone, or WhatsApp,
- request catalogs/technical documents,
- submit inquiries or RFQs,
- apply for distributorship/partnership,
- interact with embedded content (e.g., Instagram), and
- subscribe to updates (if offered).
3. Personal data we collect
Depending on how you use the Site, we may collect:
A. Data you provide
- Identity/contact: name, surname, company, title, email, phone
- Inquiry content: messages, product interests, project details, attachments
- Commercial details (B2B): company address, VAT/tax number, delivery preferences (if applicable)
B. Data collected automatically
- Device and usage: IP address, browser type, pages viewed, approximate location (city/country), timestamps, referring URLs
- Cookies and similar technologies (see Section 8)
C. Data from third parties (limited)
- Analytics/measurement providers (aggregated usage stats)
- Social platforms (when you interact with embedded content)
Note: We do not intentionally collect special categories of personal data (sensitive data). Please do not submit sensitive data via Site forms.
4. Purposes of processing
We process personal data for the following purposes:
- Responding to inquiries and providing quotations / product information
- Customer and relationship management (B2B communications, distributor onboarding)
- Providing requested resources (catalogs, technical sheets, installation guides)
- Site operation, security, and fraud prevention
- Improving the Site (performance, usability, analytics)
- Legal compliance (recordkeeping, responding to lawful requests)
- Marketing communications (only where permitted/consented; see Section 7)
These purpose disclosures are part of the transparency obligations under KVKK and GDPR.
5. Legal bases (KVKK / GDPR)
We rely on one or more legal grounds depending on the context:
Under KVKK (Law No. 6698):
- Processing is necessary for the establishment, exercise, or protection of a right (e.g., handling disputes, claims)
- Processing is necessary for the performance of a contract or pre-contract steps (e.g., preparing a quotation at your request)
- Processing is necessary for legitimate interests of the data controller (e.g., ensuring Site security), provided fundamental rights are not harmed
- Explicit consent where required (e.g., non-essential cookies, certain marketing)
KVKK requires that you disclose the collection method and legal reason.
Under GDPR (if applicable):
- Contract / pre-contract steps
- Legitimate interests
- Consent (e.g., non-essential cookies, direct marketing where required)
- Legal obligation
(Transparency items are derived from GDPR Articles 13/14.)
6. Who we share data with (Recipients / Transfers)
We may share personal data with:
- IT/hosting providers (e.g., hosting, CDN, website infrastructure)
- Analytics providers (only as configured; ideally with IP masking and consent where required)
- Communication tools (email service provider, CRM, customer support tools)
- Professional advisors (lawyers, accountants) where necessary
- Authorities / courts where legally required
We do not sell personal data.
International transfers: Your data may be processed in countries other than your own depending on our vendors’ infrastructure. Where required, we use appropriate safeguards (e.g., contractual protections and security measures).
7. Marketing communications
If we offer newsletters or promotional messages:
- We will send them only with your consent or another lawful basis permitted by applicable law.
- You can opt out at any time using the unsubscribe link or by emailing info@kermit.com.tr
8. Cookies and similar technologies
We use cookies and similar technologies to:
- keep the Site functional,
- measure usage and improve performance,
- remember preferences (if enabled),
- enable embedded content (e.g., social media).
Cookie choices: Where legally required, we present a cookie banner allowing you to accept/reject non-essential cookies. You can also manage cookies via browser settings.
(Optional table—populate with your actual tools)
- Essential cookies: required for basic functions
- Analytics cookies: [e.g., Google Analytics] (consent-based where required)
- Marketing cookies: [if any] (consent-based)
9. Data retention
We retain personal data only as long as necessary for the purposes listed above, then delete or anonymize it, unless a longer retention period is required by law or necessary for establishing/exercising legal rights (e.g., dispute handling). (Retention disclosure is a GDPR transparency item and good practice under KVKK.)
10. Security
We apply reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no system is 100% secure.
11. Your rights (KVKK Art. 11 / GDPR rights where applicable)
Under KVKK, you have rights including (summary): to learn whether your data is processed, request information, learn the purpose and whether it is used accordingly, know third parties to whom data is transferred, request correction/deletion where conditions are met, and object to certain results.
Under GDPR (if applicable) you may have rights such as access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent.
12. How to exercise your rights
To submit a request, contact us at:
- Email: info@kermit.com.tr
- Postal address: Cumhuriyet Mh. Cihan Sk. No:4 ÇAYIROVA / KOCAELİ - TÜRKİYE
Include sufficient information to verify your identity and clearly describe your request.
We may request additional information to confirm identity and process your request in line with applicable law.
13. Children’s privacy
The Site is not directed to children. We do not knowingly collect personal data from children.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date will change accordingly. Material changes will be posted on the Site.