Skip to content
Dotpeenator™ Logo

Privacy Policy

Effective date: 28 July 2026

This Privacy Policy explains how SERMATEK MAKİNA SAN. VE DIŞ TİC. LTD. ŞTİ. ("the Company", "we") collects, uses, stores and protects your personal data on the website dotpeenator.com. It is designed to meet our obligations under Turkey's Personal Data Protection Law No. 6698 (KVKK), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).

1. Data controller

2. Personal data we process

  • Identity and contact: first/last name, salutation, e-mail, phone, company, country, address (source: quote/contact forms, customer account).
  • Request content: message, product of interest, subject, language (source: quote/contact forms).
  • Account and access: e-mail (login), password (hashed), role, language preference, sub-user relationship (source: customer portal).
  • Product ownership: serial number, purchase/warranty dates, service history, uploaded documents and service photos (source: customer portal).
  • Technical: IP address — transient only; not stored (see §5).

We do not collect special-category data (health, biometric, etc.).

3. Purposes and legal bases

  • Responding to quote/contact requests — KVKK Art. 5: contract, legitimate interest, explicit consent; GDPR Art. 6(1)(b) and (f).
  • Managing the customer portal account — KVKK Art. 5: performance of a contract; GDPR Art. 6(1)(b).
  • Warranty/service and reminders — KVKK Art. 5: contract, legal obligation; GDPR Art. 6(1)(b) and (c).
  • Security and abuse prevention (form spam protection) — KVKK Art. 5: legitimate interest; GDPR Art. 6(1)(f).
  • Legal obligations (tax, commercial) — KVKK Art. 5: legal obligation; GDPR Art. 6(1)(c).

4. Recipients / processors

We do not sell your data. We share it — only as needed to run the service — with these processors:

  • Our e-mail (SMTP) provider — to deliver notification and transactional e-mails.
  • Telegram (if enabled) — to notify company staff of new requests.
  • Cloudflare — the visitor's IP address and a token, to verify the contact form's bot protection (Turnstile); and hosting of training videos (no personal data).
  • Our hosting provider — storage of data on the server.

Some processors may be located outside Türkiye (EU/US); international transfers are made with appropriate safeguards under KVKK Art. 9 and GDPR Chapter V (e.g. standard contractual clauses).

5. IP address and cookies

Your IP address is used only transiently, in memory, for rate-limiting (spam protection) and the contact form's bot check; it is not written to your request record. For the cookies we use, see the Cookie Policy. The site sets no tracking or advertising cookies.

6. Retention

We keep your personal data for as long as necessary for the relevant purpose and for the minimum periods required by applicable law (commercial, tax, etc.). After that, or upon your request, your data is deleted, destroyed or anonymised.

7. Your rights

Under KVKK Art. 11, GDPR Arts. 15–22 and CCPA/CPRA you have the rights to access, rectify, erase, restrict/object to processing, data portability and to withdraw consent. For US/California residents: we do not sell or share your personal information. To exercise your rights, see the Data Subject Request page or e-mail kvkk@sermatek.com.

8. Security

Your data is held on our servers in Türkiye; passwords are stored only as hashes, and portal sessions use secure, HttpOnly cookies.

9. Changes

We may update this policy from time to time; the current version is published on this page with an updated effective date.