PERSONAL DATA PRIVACY NOTICE

Data controller

Netpa Tüketim Ürünleri Pazarlama ve Ticaret Ltd. Şti. (Mimar Sinan Mahallesi Üsküdar Caddesi, Yedpa Ticaret Merkezi B Caddesi No: 71, 34779 Ataşehir İstanbul). Telephone: 0216 471 09 50. Email: bilgi@netpatuketim.com.tr.

Zerobite is a Netpa brand. This notice covers website visits and direct communications only; it is not a request for explicit consent.

Which personal data may be processed?

The form requires your name, email address, subject and message; the phone number is optional. The form does not accept file uploads. Submitting it does not give consent to advertising or commercial electronic messages.

The website has a contact form, but no membership or user account system. The site does not create visitor profiles or use Google Analytics, Meta Pixel, advertising or remarketing tracking code.

When you contact us through the form, by email or by phone, the name, email address, phone number and information in your enquiry may be processed as necessary to respond. Please do not share unnecessary personal information or special categories of personal data.

Serving the website may generate limited technical hosting and network logs, including IP address, access time, requested page, response/error information and browser details. The site application does not collect these separately for visitor profiling.

Purposes of processing

We use contact data to answer your questions and requests and communicate with you. Technical logs may be processed to keep the site secure, identify errors and maintain its operation. If a legal obligation or specific dispute arises, relevant records may be processed to fulfil that obligation or establish, exercise or protect legal rights. We do not create marketing profiles through this website.

Collection methods and legal bases

Data is collected through your contact form submission, email or telephone communications, electronically and, where relevant, through written records forming part of a filing system; technical records are generated automatically during your visit.

Answering questions and conducting communications relies on Netpa’s legitimate interests, provided your fundamental rights and freedoms are not harmed (KVKK Article 5(2)(f)). If your communication directly concerns entering into or performing a contract, Article 5(2)(c) applies only to necessary information. Necessary security and continuity records rely on Article 5(2)(f); processing required by a legal obligation on Article 5(2)(ç); and protection of a specific right on Article 5(2)(e). Explicit consent is not the default legal basis.

Recipients and purposes of transfers

Hosting and technical infrastructure providers may process technical data necessary to serve and secure the site. Email/communications providers process communication records only as needed to deliver and answer messages.

Necessary records may be transferred to competent public authorities where legally required, or to authorised legal advisers and necessary service providers to establish, exercise or protect a specific legal right, only to the necessary extent. The site application is not configured to send visitor data to analytics or advertising platforms. Following an external link may initiate the destination site’s independent data processing.

Retention and deletion

Form messages are sent through Yandex to the bilgi@netpatuketim.com.tr mailbox and retained there. The website does not store form messages in a separate database or delete messages from the mailbox. No automatic email deletion schedule is currently in place.

Under the KVKK, personal data must be retained only for the period required by applicable law or necessary for its processing purpose. When the grounds for processing cease to apply, the KVKK requires deletion, destruction or anonymisation. You can request information about your records, correction or deletion using the contact methods below.

Spam and rate-limit checks use a pseudonymous identifier derived from the IP address with a secret key, together with submission times, rather than the message content. Submissions within the past hour are counted; expired counter entries are cleared on subsequent requests. These records are not stored as cookies in your browser.

Service providers and international processing

Yandex is used for email and Hostinger for website hosting. The name, email address, optional phone number, subject and message submitted in the form are processed through the email service as needed for delivery and response. The hosting service may process technical data necessary to serve and secure the website.

These services may involve storage on servers abroad or access from outside Türkiye. International data transfers are subject to the conditions in Article 9 of the KVKK. You can request information about the parties receiving your data using the contact methods below.

Your rights under the KVKK

Under KVKK Article 11, you have the following rights:

• To learn whether your personal data is processed and request information if it has been processed.
• To learn the purpose of processing and whether the data is used accordingly.
• To know the third parties receiving your data in Türkiye or abroad.
• To request correction of incomplete or inaccurate data.
• To request erasure or destruction under the conditions specified by law.
• To request that recipients be notified of corrections, erasure or destruction.
• To object to an adverse result arising solely from analysis by automated systems.
• To claim compensation for damage caused by unlawful processing.

Submitting a request

If your request is rejected, the response is insufficient or no response is provided in time, you may complain to the Personal Data Protection Board within thirty days of learning of the response and, in any event, within sixty days of your original request.

You may submit KVKK requests in writing to the address above, in accordance with the Communiqué on the Procedures and Principles for Applications to Data Controllers. You may also email bilgi@netpatuketim.com.tr from an email address previously supplied to Netpa and registered in our systems. Contact us by telephone or email for general guidance; a telephone conversation does not replace a written request.

Include the information about your identity and request required by the Communiqué. Do not send more identification documents than necessary. Requests are dealt with as soon as possible and within thirty days at the latest, depending on their nature. Requests are normally free of charge. If responding incurs an additional cost, the tariff set by the Board may apply.