Personal Data Protection
Think of your data like our knitting craft: held within a protective weave, and moving only with your consent. This page explains — in one place and in plain language — what data we process and why, how we use cookies, your rights under Turkey’s data protection law (KVKK), and how to reach us.
- Data controller
- Fersan Tekstil
- Last updated
- 29 June 2026
- Basis
- KVKK (Law No. 6698)
- Our principle
- Your data is never sold
In short
Before the detail, quick answers to the most common questions. The full, binding explanations are in the sections below.
What data do we process?
Identity, contact and financial details in customer and supplier dealings; your request, quotation and message content; CV information in job applications; security-camera footage for visitor and premises security; and limited log and cookie data on site usage.
Why do we process it?
To run request, sample and quotation processes, manage our contractual relationship, meet legal obligations, ensure information security, and evaluate job applications.
Do you sell data?
No. Your personal data is never sold or rented to third parties for marketing.
How long do you keep it?
Only as long as needed for the purpose and for the periods required by law (e.g. the Commercial Code and Tax Code). Afterwards your data is deleted, destroyed or anonymized.
You stay in control
You can exercise your rights under Art. 11 of the KVKK at any time, and withdraw consent where processing is based on it.
Who processes your data?
Under Law No. 6698, your personal data is processed as data controller by:
- Data controller
- Fersan Tekstil Tic. ve San. Ltd. Şti.
- Address
- Bakırcılar Sanayi Sitesi, Mustafa Kurdoğlu Caddesi No:24, Yakuplu, Beylikdüzü / İstanbul, Türkiye
- Phone
- +90 212 875 43 13
Our official registry details — trade name, MERSİS and tax info — are on our Information Society Services page.
Privacy Notice
In short: we process your personal data only for specific, legitimate purposes and on a concrete legal ground — each of which we set out clearly below.
As Fersan Tekstil, acting as data controller, we process your personal data lawfully and fairly under Turkey’s Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Disclosure Obligation.
A privacy notice and explicit consent are separate: this notice is one-way information and does not require your approval. Explicit consent is collected separately only for processing with no other legal ground (e.g. job applications, opt-in commercial messages or non-essential cookies).
Data Processed, Purpose and Legal Ground
By data-subject group (customer, supplier, job candidate, visitor), the table below shows which data category we process for which purpose, on which concrete legal ground under the KVKK, and how long we keep it.
| Data category | Purpose of processing | Legal ground (KVKK) | Retention |
|---|---|---|---|
| Customers & prospectsName, national ID, contact, company/title, tax no, financial details (card, cheque, bank account) | Sales, export–import and after-sales support; physical-premises security | Art. 5/2-a (provided by law) · 5/2-c (contract) · 5/2-f (legitimate interest) | Statutory periods (Commercial/Tax Code) |
| SuppliersName, national/tax no, contact, bank account, driver & vehicle details, OHS documents | Procurement processes; occupational health & safety | Art. 5/2-c (contract) · 5/2-f (legitimate interest) | Statutory periods (Commercial/Tax/OHS) |
| Job candidate (application)CV: identity, contact, education/diploma, skills, experience, references, photo, driving licence | Evaluating applications and recruitment | Explicit consent (Art. 5/1 and Art. 6) | While consent stands; not shared with third parties |
| Visitors & CCTVSecurity-camera (CCTV) footage; visitor log | Building and premises security; visitor registration | Art. 5/2-ç (legal obligation) · 5/2-f (legitimate interest) | Short term; only to judicial/law-enforcement on request |
| Website & contactForm/email: name, company, email, phone, message; log and cookie data | Request, sample and quotation processes; information security | Art. 5/2-c (contract) · 5/2-f (legitimate interest) | Relationship term + limitation |
| Marketing & e-messagesOpt-in advertising, campaign and promotion preferences | Information/marketing messages where you opt in | Explicit consent (Art. 5/1) | Until consent is withdrawn |
Method of collection
Your personal data is collected by fully or partly automated and non-automated means through the contact and application forms on our website, email, telephone, physical and electronic documents, and the security cameras at our buildings and premises (entrances, façade, interior, parking, corridors).
Transfer
Within our legal obligations and contractual relationship, your data may be transferred — in line with Art. 8 of the KVKK — to authorized public bodies in Türkiye, to our business partners, and, on request and to resolve legal disputes, to judicial authorities and law-enforcement units. Job-candidate and visitor (CCTV) data is not shared with third parties. Your data is never sold or shared with third parties for marketing. Should any cross-border transfer occur, the Art. 9 regime in force since 1 June 2024 applies (appropriate safeguards such as an adequacy decision or the standard contract).
Special categories of personal data
In our ordinary business we do not process special categories of personal data (e.g. health or biometric data). Where limited processing is necessary in occupational-health-and-safety and employment processes (e.g. psychotechnical/health documents of supplier drivers), it is based on the conditions in Art. 6 of the KVKK — in particular occupational health and safety and employment obligations.
Retention and destruction
Your personal data is retained for the period necessary for the purpose and required by the relevant legislation — notably the Commercial Code (6102), Tax Procedure Law (213), Labour Law (4857), Social Security Law (5510), OHS Law (6331), Code of Obligations (6098) and Law 5651. At the end of these periods, or once the processing conditions cease, it is deleted, destroyed or anonymized under our Personal Data Retention and Destruction Policy, with periodic destruction applied.
Notices by Group
Detail of the data we process depending on which group you belong to. Your rights and how to apply are the same for all groups.
Customers & prospects Those who buy or may buy our products
- Data processed
- Name, national ID, address, phone, email, company name and title, tax ID, credit-card, cheque and bank-account details, security-camera footage.
- Purpose
- Sales of goods and services, export–import processes, and ensuring physical-premises security.
- Legal ground
- KVKK Art. 5: provided by law, conclusion/performance of a contract, and legitimate interest.
- Transfer
- To competent public authorities for statutory obligations and legal disputes; to business partners for contractual obligations. If you use the sample/quotation form on our website, the details you provide (name, company, email, phone, request content and any file you attach) pass through the third-party form relay service Web3Forms in order to reach us by email; as the provider is based outside Türkiye, this constitutes an international transfer.
Suppliers Those who supply us goods and services
- Data processed
- Name, national ID, tax ID, address, phone, email, company name and title, bank-account details, driver name and phone, vehicle plate, psychotechnical assessment report, ID-card copy, residence document, occupational-safety certificate and SRC certificate.
- Purpose
- Procurement of goods and services, and occupational health and safety activities.
- Legal ground
- KVKK Art. 5: conclusion/performance of a contract and legitimate interest.
- Transfer
- To authorized public bodies for legal obligations and disputes.
Job candidates Those who apply for a job with us
- Data processed
- Name, national ID, date of birth, nationality, age, phone, address, email, photo, diploma, skills, software knowledge, work experience, references and driving licence.
- Purpose
- Running job-candidate application processes.
- Legal ground
- KVKK Art. 5 and 6: explicit consent (via the application form).
- Transfer
- If you send your application through the form on our website, the details you provide and the CV file you upload pass through the third-party form relay service Web3Forms in order to reach us by email; as the provider is based outside Türkiye, this constitutes an international transfer. Beyond this, these data are not shared with third parties. If you prefer to avoid that transfer, you may send your application by email or post.
Visitors Those who visit our premises
- Data processed
- Security-camera (CCTV) footage.
- Purpose
- Ensuring building security and creating a visitor record.
- Legal ground
- KVKK Art. 5: legitimate interest and compliance with a legal obligation.
- Transfer
- This data is not transferred to third parties.
Your rights (KVKK Art. 11) and the application method are common to all groups: Your Rights · Apply
Cookie Policy
In short: this site writes no cookies of its own to your browser. We only keep your cookie preference in your browser’s local storage (localStorage). No non-essential component — including Google Maps — loads without your explicit consent.
Strictly necessary cookies
No consent neededRequired for core site functions and security, including remembering your cookie preference. If blocked, some parts may not work.
Functional cookies
Personalize the experience by remembering preferences such as language and appearance.
Performance / analytics cookies
Measure visit statistics to help improve the site.
Advertising / targeting cookies
Build a profile from online behavior to show targeted ads; typically third-party.
This site uses no analytics or advertising cookies and writes no cookie on its own domain. A measurement dated 16 August 2026 found one exception: hCaptcha, which loads when you interact with a contact or application form, sets a security cookie on its own domain (see the table below). If we start using analytics we will update this table.
Cookies used on this site
| Name | Type | Purpose | Duration | Party |
|---|---|---|---|---|
| fersan-consent (localStorage) | Necessary — a local entry, not a cookie | Remember your cookie preference; avoid re-showing the notice | Until you clear it | First party |
| NID | Third party | Google Maps — loads only if functional consent is given; Google may set cookies at that point | ~6 months | |
| CONSENT / SOCS | Third party | Google Maps — only if functional consent is given; Google service preferences / consent state | ~13 months – 2 years | |
| Cloudflare (no cookie) | Hosting / CDN | Delivery and security of the site; connection data is processed, no cookie is written to your browser | — | Cloudflare, Inc. (USA) |
| __cf_bm (hcaptcha.com) | Necessary — third party | Form security (hCaptcha bot filter); loads only when you interact with a contact or application form | ~30 minutes | Intuition Machines, Inc. (USA) |
The Google Maps component on our contact page loads only once you give functional cookie consent; if you give no consent or decline, no request is sent to Google at all. Once loaded, Google may set third-party cookies, and the set of cookies Google places can change over time.
Hosting and international transfer
This site is published through the infrastructure of Cloudflare, Inc. (USA). Your requests pass through Cloudflare’s global server network; in doing so your IP address, browser information and request time are processed by Cloudflare in order to deliver the content and to protect against attacks. Cloudflare does not write cookies to your browser on this site. Your browser may additionally send Network Error Logging (NEL) reports about connection errors to Cloudflare. Because the servers are located abroad, this processing constitutes an international transfer; its legal basis is legitimate interest under Article 5/2-f of the Turkish Data Protection Law (KVKK).
Managing cookies
You can change or withdraw your preferences (functional, analytics) at any time via the “Cookie settings” link at the bottom of every page. Your preference is stored locally in your browser under the key “fersan-consent”; it is not transmitted to our servers. You can delete this entry and any cookies from your browser’s “Settings → Privacy and security” section.
Your Rights
By applying to us as data controller, you can exercise the following rights.
Be informed
Learn whether your data is processed and, if so, request related information.
Learn the purpose
Learn the purpose of processing and whether data is used accordingly.
Know transfers
Know the third parties to whom data is transferred at home or abroad.
Rectification
Request correction of incomplete or inaccurate data.
Erasure
Request deletion or destruction once the conditions in the Law are met.
Notification
Request that correction and erasure be notified to third parties the data was transferred to.
Object
Object to an adverse result arising solely from automated analysis.
Compensation
Claim compensation if you suffer damage due to unlawful processing.
Where processing is based on explicit consent, you may withdraw it at any time.
Exercise Your Rights
You can send your request using the form below or through the official channels. We resolve applications within 30 days at the latest. The form below uses the third-party form relay service Web3Forms to deliver its content to us by email; if you would rather your request did not pass through that service, please use email, post or the official electronic channels.
Request form
We update this notice as legislation and our processes change; the current version always lives on this page. Last updated: 29 June 2026
Have a question?
We’re here for any question about data processing or the application process.
- ISO + OEKO-TEX
- Within 1 business day we get back to you