Protection of personal data

Privacy Notice

Updated: 7 October 2026. This notice explains personal data processing arising from visits to konay.org and use of the site's contact channels.

1. Data controller and contact details

Data controller:KON-AY-PET SAN KONYA AYAKKABI VE PET. ÜRN. SAN. TİC. A.Ş.(Konay Adhesives).

Postal address: Fevzi Çakmak Mahallesi, 10690. Sokak, Aykent Ayakkabıcılar Sanayi Sitesi No: 4, Karatay/Konya
Email for requests and enquiries:Email
Phone: +90 332 346 02 94

2. Data processed, purposes and legal bases

Activity	Data and purpose	Legal basis
Web server security and access logs	IP address, request time, requested URL, HTTP status code and browser information; identifying security incidents and ensuring the service operates.	Necessity for the legitimate interests of the data controller, provided the data subject's fundamental rights and freedoms are not harmed: Article 5(2)(f) of Turkey's Personal Data Protection Law (KVKK). Article 5(2)(ç) applies to lawful requests from competent authorities.
Contact and quotation requests	Name, company, phone number, email and request content you share; responding to enquiries and conducting quotation discussions.	Article 5(2)(c) of the KVKK where the request directly concerns entering into or performing a contract; Article 5(2)(f) for appropriate legitimate interests in other communications; Article 5(2)(e) for establishing, exercising or defending rights in disputes.
Administrator sessions and login security	Administrator account identifier, session details, summary records of failed login attempts and verification results; preventing unauthorised access.	Article 5(2)(f) of the KVKK and the obligation to ensure data security.

Data is collected automatically through the web server and local administrator session, and electronically or verbally through email and phone communications that you initiate. Please do not send special-category personal data. The public site has no membership, payment or contact form that collects personal data.

3. Recipients and services abroad

Data is accessible only as needed for its purpose by authorised company employees and technical support or hosting providers. It may be shared with competent public authorities and courts where legally required.

Google Analytics and IP-based location enquiries are disabled. Google Maps on the contact page loads automatically when the map section approaches the visible area. Your IP address, browser/device information and map request may then be sent to Google, and Google's cookies or similar technologies may be used. As Google may process data abroad, the company must separately verify safeguards for transfers under Article 9 of the KVKK. If you do not want the map to load, you can avoid reaching the map section or using its link. Instagram and WhatsApp links open the provider's site only when clicked; processing there is subject to that provider's policies.

4. Retention and deletion

No new visitor profiles or persistent visitor identifiers are created. Web server logs are rotated daily and up to 30 rotated files are retained. Login-attempt summaries are included in regular cleanup after 24 hours. The administrator session is used for the browser session; the application applies a 30-minute inactivity limit and a maximum session duration of 8 hours.

Retention of quotation and contract correspondence in company email is determined separately according to the relationship's purpose and applicable statutory retention or limitation requirements. Data is deleted, destroyed or anonymised when its processing purpose ends. Records required for legal obligations or documented disputes may be retained only to that extent.

5. Your rights under the KVKK

Under Article 11 of the KVKK, you may learn whether your data is processed; request information if it is; learn the purpose and whether it is used accordingly; learn recipients in Turkey or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where statutory conditions apply; request that corrections and deletions be notified to recipients; object to an adverse result arising solely from automated analysis; and seek compensation for harm caused by unlawful processing.

6. How to submit requests

You may send a signed written request to the postal address above or email it using an electronic method that meets the requirements of the Communiqué on the Procedures and Principles for Applications to Data Controllers. Include your name, the identity and contact information required by the Communiqué, your request and relevant supporting documents. Do not send unnecessary identity documents or special-category data. Only necessary additional information may be requested for identity verification.

Requests are resolved as soon as possible and within 30 days. They are normally free; if additional costs arise, the tariff determined by the Board may apply. If your request is rejected, the response is insufficient or no timely response is received, you may complain to the Board within 30 days of learning of the response and, in all cases, within 60 days of your request.

This notice provides information; it is neither a request for explicit consent nor a condition of using the service.Cookie Policy