Personal Data Protection (KVKK) Privacy Notice

This privacy notice is provided under Article 10 of the Personal Data Protection Law No. 6698 (the "Law" or "KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. It is addressed to everyone who visits our website (mekra.com), registers an account, requests a quote, places an order or contacts us.

1. Data controller

Your personal data is processed by the following company as the data controller:

2. Personal data we process

We do not store your payment card details (card number, expiry date, CVV). Card payments are processed by a licensed payment institution or bank; we only receive the result of the transaction and the information needed for the order.

3. How we collect data and legal grounds

We collect data through forms on the website (membership, cart and checkout, quote, contact, newsletter, applications), live chat, e-mail and phone calls, and cookies, by wholly or partly automated means. Our processing relies on the following grounds in Article 5 of the Law:

• Necessity for the conclusion or performance of a contract (Art. 5/2-c): membership, orders, delivery, returns and quotes.
• Compliance with a legal obligation (Art. 5/2-ç): invoicing and accounting records, and retention and proof obligations under consumer law and commercial electronic message legislation.
• Establishment, exercise or protection of a right (Art. 5/2-e): keeping evidence for potential disputes.
• Our legitimate interests (Art. 5/2-f): information security, preventing abuse and fraud, measuring service quality, provided that your fundamental rights and freedoms are not harmed.
• Your explicit consent (Art. 5/1): analytics and marketing cookies, promotional e-mail and SMS, personalised recommendations. You may withdraw consent at any time; withdrawal does not affect the lawfulness of earlier processing.

4. Purposes of processing

• Creating and managing your account and verifying your identity.
• Receiving your order, collecting payment, delivering the product and issuing invoices.
• Handling withdrawal, return, defective product and warranty requests.
• Evaluating quote requests and running the site survey and project process.
• Providing customer support and answering live chat, Q&A and contact requests.
• Sending campaigns, newsletters and maintenance tips by e-mail and SMS where you have consented.
• Keeping the website secure, preventing abuse and fixing errors.
• Producing visit statistics and ad measurement in line with your cookie preferences.
• Meeting our legal obligations, informing competent authorities and protecting our rights.

5. Live chat and Q&A

When you start a live chat, your name, optionally your e-mail address and the messages you write are processed by our support team in order to reply; a chat identifier cookie is placed in your browser so that your session can continue. Chat records are kept for 180 days after the conversation is closed and are then deleted. Please do not share card numbers, passwords or other sensitive information in the chat. If the live chat is provided through a third-party chat provider, that service is loaded only after you allow the relevant category in your cookie preferences, and the provider may use its own cookies and device information (see the Cookie Policy). Your product questions and reviews are checked before publication; published content is visible to everyone and carries your name if you chose to display it.

6. Transfer of personal data

Within the limits of the purposes above and in accordance with Articles 8 and 9 of the Law, your data may be transferred to the following groups of recipients:

Some service providers we use (for example analytics, ad measurement, security verification, e-mail infrastructure or chat) may host their servers abroad. In that case the transfer relies on one of the mechanisms provided in Article 9 of the Law (an adequacy decision, appropriate safeguards or the exceptional cases listed in the Law). Transfers for analytics and ad measurement take place only if you allow them in your cookie preferences.

7. Retention periods

Your data is kept for as long as the purpose requires and for the retention and limitation periods set by the relevant legislation. At the end of that time it is deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

8. Your rights

Under Article 11 of the Law you may apply to the data controller to:

• Learn whether your personal data is processed and request information about it.
• Learn the purpose of processing and whether it is used accordingly.
• Know the third parties in Turkey or abroad to whom your data is transferred.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction within the conditions of Article 7, and request that correction, deletion and destruction be notified to third parties to whom the data was transferred.
• Object to a result against you arising from analysis of the processed data exclusively by automated systems.
• Claim compensation if you suffer damage because of unlawful processing.

9. How to apply

You may submit your request in accordance with the Communiqué on the Procedures and Principles of Applications to the Data Controller, with information identifying you and a petition stating your request clearly: in writing to Tarabya Mah., Aydınevler Yıldırım Çıkmazı Sk., No: 2/2, 34457, Sarıyer, İstanbul, through our registered e-mail address [email protected], with a secure electronic signature, or from the e-mail address registered in our system to [email protected]. Depending on the nature of your request, we conclude it free of charge within thirty days at the latest; if the process requires a separate cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If you find the reply insufficient, if no reply is given in time or if your request is rejected, you may complain to the Personal Data Protection Board within thirty days of learning the reply and in any case within sixty days of your application.

10. Data security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss and alteration: encrypted connections (HTTPS), irreversible storage of passwords, role-based access, log records and confidentiality obligations for staff. We remind you that no transmission over the internet is entirely risk-free.

11. Updates

This notice may be updated to reflect changes in legislation or in our services; the current version is published on this page. Last updated: 18.10.2026.