Personal Data Protection
Think of your data like our knitting craft: held within a protective weave, and moving only with your consent. This page explains — in one place and in plain language — what data we process and why, how we use cookies, your rights under Turkey’s data protection law (KVKK), and how to reach us.
- Data controller
- Fersan Tekstil
- Last updated
- 29 June 2026
- Basis
- KVKK (Law No. 6698)
- Our principle
- Your data is never sold
In short
Before the detail, quick answers to the most common questions. The full, binding explanations are in the sections below.
What data do we process?
Identity, contact and financial details in customer and supplier dealings; your request, quotation and message content; CV information in job applications; security-camera footage for visitor and premises security; and limited log and cookie data on site usage.
Why do we process it?
To run request, sample and quotation processes, manage our contractual relationship, meet legal obligations, ensure information security, and evaluate job applications.
Do you sell data?
No. Your personal data is never sold or rented to third parties for marketing.
How long do you keep it?
Only as long as needed for the purpose and for the periods required by law (e.g. the Commercial Code and Tax Code). Afterwards your data is deleted, destroyed or anonymized.
You stay in control
You can exercise your rights under Art. 11 of the KVKK at any time, and withdraw consent where processing is based on it.
Who processes your data?
Under Law No. 6698, your personal data is processed as data controller by:
- Data controller
- Fersan Tekstil Tic. ve San. Ltd. Şti.
- Address
- Bakırcılar Sanayi Sitesi, Mustafa Kurdoğlu Caddesi No:24, Yakuplu, Beylikdüzü / İstanbul, Türkiye
- Phone
- (0212) 875 43 13
Our official registry details — trade name, MERSİS and tax info — are on our Information Society Services page.
Privacy Notice
In short: we process your personal data only for specific, legitimate purposes and on a concrete legal ground — each of which we set out clearly below.
As Fersan Tekstil, acting as data controller, we process your personal data lawfully and fairly under Turkey’s Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Disclosure Obligation.
A privacy notice and explicit consent are separate: this notice is one-way information and does not require your approval. Explicit consent is collected separately only for processing with no other legal ground (e.g. job applications, opt-in commercial messages or non-essential cookies).
Data Processed, Purpose and Legal Ground
By data-subject group (customer, supplier, job candidate, visitor), the table below shows which data category we process for which purpose, on which concrete legal ground under the KVKK, and how long we keep it.
| Data category | Purpose of processing | Legal ground (KVKK) | Retention |
|---|---|---|---|
| Customers & prospectsName, national ID, contact, company/title, tax no, financial details (card, cheque, bank account) | Sales, export–import and after-sales support; physical-premises security | Art. 5/2-a (provided by law) · 5/2-c (contract) · 5/2-f (legitimate interest) | Statutory periods (Commercial/Tax Code) |
| SuppliersName, national/tax no, contact, bank account, driver & vehicle details, OHS documents | Procurement processes; occupational health & safety | Art. 5/2-c (contract) · 5/2-f (legitimate interest) | Statutory periods (Commercial/Tax/OHS) |
| Job candidate (application)CV: identity, contact, education/diploma, skills, experience, references, photo, driving licence | Evaluating applications and recruitment | Explicit consent (Art. 5/1 and Art. 6) | While consent stands; not shared with third parties |
| Visitors & CCTVSecurity-camera (CCTV) footage; visitor log | Building and premises security; visitor registration | Art. 5/2-ç (legal obligation) · 5/2-f (legitimate interest) | Short term; only to judicial/law-enforcement on request |
| Website & contactForm/email: name, company, email, phone, message; log and cookie data | Request, sample and quotation processes; information security | Art. 5/2-c (contract) · 5/2-f (legitimate interest) | Relationship term + limitation |
| Marketing & e-messagesOpt-in advertising, campaign and promotion preferences | Information/marketing messages where you opt in | Explicit consent (Art. 5/1) | Until consent is withdrawn |
Method of collection
Your personal data is collected by fully or partly automated and non-automated means through the contact and application forms on our website, email, telephone, physical and electronic documents, and the security cameras at our buildings and premises (entrances, façade, interior, parking, corridors).
Transfer
Within our legal obligations and contractual relationship, your data may be transferred — in line with Art. 8 of the KVKK — to authorized public bodies in Türkiye, to our business partners, and, on request and to resolve legal disputes, to judicial authorities and law-enforcement units. Job-candidate and visitor (CCTV) data is not shared with third parties. Your data is never sold or shared with third parties for marketing. Should any cross-border transfer occur, the Art. 9 regime in force since 1 June 2024 applies (appropriate safeguards such as an adequacy decision or the standard contract).
Special categories of personal data
In our ordinary business we do not process special categories of personal data (e.g. health or biometric data). Where limited processing is necessary in occupational-health-and-safety and employment processes (e.g. psychotechnical/health documents of supplier drivers), it is based on the conditions in Art. 6 of the KVKK — in particular occupational health and safety and employment obligations.
Retention and destruction
Your personal data is retained for the period necessary for the purpose and required by the relevant legislation — notably the Commercial Code (6102), Tax Procedure Law (213), Labour Law (4857), Social Security Law (5510), OHS Law (6331), Code of Obligations (6098) and Law 5651. At the end of these periods, or once the processing conditions cease, it is deleted, destroyed or anonymized under our Personal Data Retention and Destruction Policy, with periodic destruction applied.
Notices by Group
Detail of the data we process depending on which group you belong to. Your rights and how to apply are the same for all groups.
Customers & prospects Those who buy or may buy our products
- Data processed
- Name, national ID, address, phone, email, company name and title, tax ID, credit-card, cheque and bank-account details, security-camera footage.
- Purpose
- Sales of goods and services, export–import processes, and ensuring physical-premises security.
- Legal ground
- KVKK Art. 5: provided by law, conclusion/performance of a contract, and legitimate interest.
- Transfer
- To authorized public bodies for legal obligations and disputes; to business partners for contractual obligations.
Suppliers Those who supply us goods and services
- Data processed
- Name, national ID, tax ID, address, phone, email, company name and title, bank-account details, driver name and phone, vehicle plate, psychotechnical assessment report, ID-card copy, residence document, occupational-safety certificate and SRC certificate.
- Purpose
- Procurement of goods and services, and occupational health and safety activities.
- Legal ground
- KVKK Art. 5: conclusion/performance of a contract and legitimate interest.
- Transfer
- To authorized public bodies for legal obligations and disputes.
Job candidates Those who apply for a job with us
- Data processed
- Name, national ID, date of birth, nationality, age, phone, address, email, photo, diploma, skills, software knowledge, work experience, references and driving licence.
- Purpose
- Running job-candidate application processes.
- Legal ground
- KVKK Art. 5 and 6: explicit consent (via the application form).
- Transfer
- This data is not shared with third parties.
Visitors Those who visit our premises
- Data processed
- Security-camera (CCTV) footage.
- Purpose
- Ensuring building security and creating a visitor record.
- Legal ground
- KVKK Art. 5: legitimate interest and compliance with a legal obligation.
- Transfer
- This data is not transferred to third parties.
Your rights (KVKK Art. 11) and the application method are common to all groups: Your Rights · Apply
Cookie Policy
In short: our site uses strictly necessary cookies it needs to work and a local record that remembers your cookie preference. Non-essential cookies run only with your explicit consent.
Strictly necessary cookies
No consent neededRequired for core site functions and security, including remembering your cookie preference. If blocked, some parts may not work.
Functional cookies
Personalize the experience by remembering preferences such as language and appearance.
Performance / analytics cookies
Measure visit statistics to help improve the site.
Advertising / targeting cookies
Build a profile from online behavior to show targeted ads; typically third-party.
This site currently uses no analytics or advertising cookies; if we start using analytics, we will update this table.
Cookies used on this site
| Name | Type | Purpose | Duration | Party |
|---|---|---|---|---|
| cookie-consent (local store) | Necessary / functional | Remember your cookie preference; avoid re-showing the notice | Until you clear it | First party |
| NID | Third party | Google Maps — map display and Google security | ~6 months | |
| CONSENT / SOCS | Third party | Google Maps — service preferences / consent state | ~13 months – 2 years |
The Google Maps component on our contact page may set third-party cookies via Google when displayed; the exact set Google places can change over time.
Managing cookies
Using the “Cookie settings” link in the footer of every page, you can change or withdraw your cookie preferences (functional, analytics) at any time. You can also delete or block cookies via your browser’s “Settings → Privacy and Security → Cookies”. We store your cookie preference only locally in your browser and do not send it to our servers.
Your Rights
By applying to us as data controller, you can exercise the following rights.
Be informed
Learn whether your data is processed and, if so, request related information.
Learn the purpose
Learn the purpose of processing and whether data is used accordingly.
Know transfers
Know the third parties to whom data is transferred at home or abroad.
Rectification
Request correction of incomplete or inaccurate data.
Erasure
Request deletion or destruction once the conditions in the Law are met.
Notification
Request that correction and erasure be notified to third parties the data was transferred to.
Object
Object to an adverse result arising solely from automated analysis.
Compensation
Claim compensation if you suffer damage due to unlawful processing.
Where processing is based on explicit consent, you may withdraw it at any time.
Exercise Your Rights
Send your request via the form below or use the official channels. We conclude requests within 30 days at the latest.
Request form
We update this notice as legislation and our processes change; the current version always lives on this page. Last updated: 29 June 2026
Have a question?
We’re here for any question about data processing or the application process.
- ISO + OEKO-TEX
- Within 1 business day we get back to you