Privacy Policy & Data Protection | GDPR · KVKK

🏭

About Global Trading Ltd. Co.

Global Trading Ltd. Co. is a B2B industrial equipment and raw materials supplier based in Ataşehir, Istanbul, Turkey (established 2001). Our website (globaltrding.com) serves industrial buyers, procurement managers, and engineers in more than 40 countries. We do not operate a consumer retail service. All data collected through this website relates to business-to-business commercial enquiries and correspondence.

A

Data Controller

Who is responsible for your data — and how to reach us

The entity responsible for processing your personal data as described in this notice ("data controller") is:

Data Controller

Global Trading Ltd. Co.
Al Zambak Sokağı, Varyap Meridian A Blok
34746 Ataşehir / Istanbul, Türkiye

Web: globaltrding.com
E-mail: privacy@globaltrding.com

Data Protection Contact

For all requests concerning your personal data — including access, rectification, erasure, objection, and complaints — please contact us in writing:

Subject line: "Personal Data Request"
E-mail: privacy@globaltrding.com
Post: Global Trading Ltd. Co., Ataşehir, Istanbul 34746, Türkiye

We will respond within 30 days (GDPR) / 30 days (KVKK).

Global Trading Ltd. Co. is registered with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu — KVKK) as a data controller as required under Law No. 6698. For visitors and customers based in the European Economic Area (EEA), data processing is also governed by EU Regulation 2016/679 (GDPR).

B

Data Processing

What data we collect, for what purposes, on what legal basis, and for how long

The following table summarises all categories of personal data we process on this website. Detailed explanations of the contact form and cookie processing appear in Sections D and C respectively.

Data category	Data collected	Purpose	Legal basis	Retention
Server log files	IP address, browser type, OS, page URL, referrer URL, date & time, HTTP status, data volume	Website delivery, security monitoring, error tracing. No profiling of individuals.	Art. 6(1)(f) GDPR — Legitimate interest	7 days. Beyond 7 days: IP last octet anonymised.
Strictly necessary cookies	Session token, CSRF token, language preference, cookie consent record	Website functionality, security, GDPR/KVKK consent record	Art. 6(1)(f) GDPR — Legitimate interest	Session (session cookies) or up to 12 months (preference cookies)
Analytics cookies	Anonymised page views, session duration, traffic source, device type (no personal identifiers stored)	Website performance measurement and improvement	Art. 6(1)(a) GDPR — Consent	Up to 13 months from last activity, then deleted
Contact form	Name, company name, country, e-mail address, telephone (optional), enquiry message	Processing and responding to your commercial enquiry or general question	Art. 6(1)(b) GDPR — Pre-contractual / Art. 6(1)(f) GDPR — Legitimate interest	3 years from last contact, then deleted. Extended if a commercial relationship develops.
Request for Quotation (RFQ)	Name, company, country, telephone, e-mail, technical specifications, quantities, delivery requirements	Preparing and issuing a commercial quotation; follow-up correspondence	Art. 6(1)(b) GDPR — Pre-contractual / Contract performance	7 years from the date of the quotation (statutory commercial record obligation under Turkish Commercial Code Art. 82)
Direct e-mail correspondence	Sender name, e-mail address, company, message content, attachments	Processing your enquiry; maintaining the commercial relationship	Art. 6(1)(b) GDPR — Contract / Art. 6(1)(f) GDPR — Legitimate interest	7 years (Turkish Commercial Code statutory retention)

✅

We do not process special category data

Global Trading Ltd. Co. does not intentionally collect or process any special categories of personal data (Art. 9 GDPR / KVKK Art. 6) — including health data, biometric data, racial or ethnic origin, political opinions, religious beliefs, or criminal history — through this website. If you believe you have submitted such data, please contact us immediately so we can delete it.

C

Cookies

Cookies — what we set, why, and how to control them

Cookies are small text files stored in your browser. We use only the categories below. No advertising or third-party tracking cookies are set on globaltrding.com.

Cookie category	Consent required?	Purpose	Examples	Duration
Strictly necessary	No — essential	Session management, CSRF security token, cookie consent record, language selection	laravel_session, XSRF-TOKEN, cc_consent, lang	Session / 12 months
Analytics (performance)	Yes — consent	Aggregated, anonymised page view statistics for website improvement. No cross-site tracking. IP anonymised before storage.	_ga, _gid (Google Analytics with IP anonymisation enabled) or equivalent privacy-first analytics	13 months
Functional	Yes — consent	Optional user preferences (e.g. saved product enquiry parameters)	gt_prefs	12 months
Marketing / advertising	Not used	Not set. We do not use advertising networks or third-party retargeting on this website.	—	—

Social media links

Our website contains hyperlinks to our LinkedIn company page. These links are stored on our own servers as standard HTML hyperlinks — no LinkedIn scripts, pixels, or embedded content are loaded when you visit our pages. No data is transferred to LinkedIn until and unless you click the link and navigate to LinkedIn's own website. At that point LinkedIn's own privacy policy applies.

How to manage cookies

You can withdraw consent to non-essential cookies at any time by clearing your browser cookies or by contacting us. You may also set your browser to block all cookies, but this may impair the functionality of the website (for example, language selection may not be remembered between sessions). Your browser's Help section contains instructions for managing cookies.

D

Contact & RFQ Forms

Contact forms and Request for Quotation (RFQ)

Our website contains a general contact form and product-specific Request for Quotation (RFQ) forms. When you submit either form, the data you provide is transmitted to us securely over TLS-encrypted HTTPS.

Mandatory vs. voluntary fields

Fields marked with an asterisk (*) are mandatory — without them we cannot process your enquiry. All other fields (for example telephone number) are voluntary and improve our ability to respond efficiently.

How RFQ data is used

Preparing a technical and commercial quotation for the products or services you requested
Following up on the quotation by e-mail or telephone if you do not respond within a reasonable period
Maintaining a record of our correspondence in case of any later dispute about what was agreed
Internal record-keeping under our statutory commercial obligations (Turkish Commercial Code Art. 82 — 10-year retention for contracts; 7-year minimum for correspondence)

📧

No unsolicited marketing

Submitting a contact form or RFQ does not constitute consent to receive marketing communications from Global Trading Ltd. Co. We will only contact you in response to your specific enquiry and, if a commercial relationship develops, in connection with that relationship. We will not add your details to any marketing mailing list without your separate, explicit consent.

Retention period

RFQ data and related correspondence is retained for 7 years from the date of the last document in the enquiry file. This retention period reflects the statutory commercial record-keeping obligation under Turkish Commercial Code Article 82 and is necessary for the legitimate purpose of defending any legal claims arising from the supply of goods. After the retention period expires, the data is securely deleted from our systems.

E

Provision of Data

Are you required to provide us with your personal data?

Providing personal data to Global Trading Ltd. Co. is voluntary in all cases — we cannot compel you to do so. However:

Log files and strictly necessary cookies are processed automatically when you visit our website. If you do not wish this, please do not visit the website.
Contact and RFQ form fields marked (*) must be completed for us to respond to your enquiry. Without a name, company, country and e-mail address, we cannot issue a quotation or reply to your message.
Voluntary fields (telephone number, additional technical details) are optional — their omission may delay or limit the detail of our response.
Analytics cookies are optional. Declining them has no effect on your ability to use the website or submit enquiries.

F

Data Recipients

Who receives your personal data?

Within Global Trading Ltd. Co., access to personal data is restricted to the staff members who need it to perform their functions — principally sales, procurement, and logistics personnel working on the enquiry or order to which your data relates.

Data processors (service providers)

We engage the following categories of data processors — third-party service providers who act on our instructions and are contractually obliged to comply with applicable data protection law:

Processor category	Purpose	Location
Web hosting provider	Hosting of globaltrding.com on a dedicated server. Processes log files and form submissions on our behalf.	Türkiye
E-mail service provider	Transmission and delivery of enquiry e-mails and notifications	Türkiye / EU
Analytics provider	Aggregated, anonymised website traffic analysis (only if you consent to analytics cookies)	EU / EEA (data processed in EU data centres)
CRM / ERP software	Storage of enquiry records, quotation history, and customer correspondence in our business management system	Türkiye

No sale of data

🚫

We never sell your personal data

Global Trading Ltd. Co. does not sell, rent, or otherwise transfer your personal data to any third party for their own commercial purposes. We do not share your data with brokers, data marketplaces, or advertising networks.

Disclosure under legal obligation

We may disclose your personal data to public authorities or regulators (for example, the Turkish tax authority — Gelir İdaresi Başkanlığı, or customs authority) where we are legally required to do so under Turkish law or other applicable law. We will only disclose the minimum data required and, where permitted by law, will notify you of any such disclosure.

G

International Transfers

International transfers of personal data

Global Trading Ltd. Co. is based in Türkiye. Türkiye is not yet designated as a country with an adequate level of data protection under GDPR Article 45 (European Commission adequacy decision). However, all international transfers of personal data we make are subject to the following safeguards:

EU/EEA visitors: When we process personal data of individuals in the EU/EEA (for example, an engineer in Germany submitting an RFQ), that data is transferred to our servers in Türkiye. The legal basis for this transfer is the performance of a pre-contractual or contractual relationship with you (GDPR Art. 49(1)(b)) — i.e., responding to your RFQ.
Analytics provider: Where we use a third-party analytics provider with EU data centres, your anonymised analytics data remains within the EU/EEA. No personally identifiable data is transferred outside the EU for analytics purposes.
No transfers to US surveillance-risk services: We do not use services that transfer personal data to the United States without appropriate safeguards (Standard Contractual Clauses or equivalent).
KVKK Article 9: Cross-border transfers of personal data under Turkish law require either the explicit consent of the data subject or the existence of an adequate level of protection in the recipient country, or adequate guarantees from the data controller. Our cross-border transfers comply with these requirements.

H

Security Measures

How we protect your personal data

Global Trading Ltd. Co. implements appropriate technical and organisational security measures to protect your personal data against accidental or unlawful loss, destruction, access by unauthorised persons, alteration, or disclosure. These measures include:

<b>Measure</b>	<b>Implementation</b>
Transport encryption	All data transmitted to and from globaltrding.com is encrypted using TLS 1.2 or TLS 1.3 (HTTPS). HTTP connections are automatically redirected to HTTPS.
Access controls	Access to the server, database, and content management system (Filament CMS) is restricted to authorised personnel with unique credentials. Multi-factor authentication is enforced for CMS access.
Database security	Database credentials are stored in environment variables, not in application code. The database is not publicly accessible; access is restricted to application servers on the private network.
Form security	All forms use CSRF (Cross-Site Request Forgery) tokens and server-side input validation to prevent injection attacks and form abuse.
Regular updates	Server OS, Laravel framework, and all dependencies are maintained with security patches applied promptly following vendor release.
Hosting	Hosted with an established Turkish hosting provider on dedicated infrastructure. Physical data centre security per industry standards.
Incident response	In the event of a personal data breach that poses a risk to individuals, we will notify the relevant supervisory authority (KVKK and/or the competent EU supervisory authority) within 72 hours of becoming aware of the breach, and affected individuals where required.

I

Your Rights

Your rights under GDPR and KVKK

As a data subject, you have the following rights in relation to your personal data held by Global Trading Ltd. Co. These rights apply under GDPR (for EEA residents) and the equivalent rights under KVKK Article 11 (for all data subjects). Exercising these rights is free of charge.

👁️

Right to Access

You have the right to obtain confirmation of whether we process personal data about you and, if so, to receive a copy of that data together with information about how it is processed.

GDPR Art. 15 · KVKK Art. 11(1)(b)

✏️

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.

GDPR Art. 16 · KVKK Art. 11(1)(c)

🗑️

Right to Erasure

Also known as the "right to be forgotten". You can request deletion of your personal data where there is no longer a compelling reason for us to retain it. Note: statutory retention obligations (e.g. 7-year commercial records) may override this right.

GDPR Art. 17 · KVKK Art. 11(1)(e)

⏸️

Right to Restrict Processing

You may request that we suspend use of your personal data while you contest its accuracy, while an objection is being considered, or where processing is unlawful but you prefer restriction to erasure.

GDPR Art. 18 · KVKK Art. 11(1)(d)

📦

Right to Erasure

Also known as the "right to be forgotten". You can request deletion of your personal data where there is no longer a compelling reason for us to retain it. Note: statutory retention obligations (e.g. 7-year commercial records) may override this right.

GDPR Art. 17 · KVKK Art. 11(1)(e)

⏸️

Right to Restrict Processing

You may request that we suspend use of your personal data while you contest its accuracy, while an objection is being considered, or where processing is unlawful but you prefer restriction to erasure.

GDPR Art. 18 · KVKK Art. 11(1)(d)

📦

Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you can request your personal data in a structured, commonly used, machine-readable format (e.g. CSV or JSON).

GDPR Art. 20

🚫

Right to Object

You have the right to object to processing based on our legitimate interests (GDPR Art. 6(1)(f)), including profiling. We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

GDPR Art. 21 · KVKK Art. 11(1)(f)

↩️

Right to Withdraw Consent

Where processing is based on your consent (for example, analytics cookies), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

GDPR Art. 7(3) · KVKK Art. 11(1)(g)

🤖

Right Against Automated Decisions

We do not make decisions about you based solely on automated processing (including profiling) that produce legal or similarly significant effects. This right is therefore not engaged by our current processing activities.

GDPR Art. 22 · KVKK Art. 11

How to exercise your rights

To exercise any of the above rights, please send a written request to privacy@globaltrding.com with the subject line "Personal Data Request — [Right You Are Exercising]". To enable us to identify and locate your data, please include your full name, the e-mail address used when contacting us, and your company name. We may ask for proof of identity before responding.

We will respond within 30 calendar days of receiving your request. In complex or multiple-request cases, this period may be extended by a further 30 days — we will inform you of any extension and the reason for it within the first 30 days.

J

Supervisory Authorities

How to lodge a complaint with a supervisory authority

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. We would, however, appreciate the opportunity to address your concerns directly before you do so — please contact us first at privacy@globaltrding.com.

Turkish Supervisory Authority (KVKK)

Kişisel Verileri Koruma Kurumu (KVKK)
Nasuh Akar Mah. Ziyabey Cad. No:1407
06520 Balgat / Ankara, Türkiye

Web: www.kvkk.gov.tr
Applicable to: all data subjects whose data is processed by Global Trading Ltd. Co.

EU / EEA Supervisory Authority (GDPR)

If you are located in the European Economic Area, you may also lodge a complaint with the data protection supervisory authority of your country of habitual residence, place of work, or place of the alleged infringement.

A list of all EU supervisory authorities is available at:
edpb.europa.eu — EDPB Members

Applicable to: EU/EEA resident data subjects.

K

Minors

Data protection for minors

The globaltrding.com website is intended exclusively for professionals and business representatives aged 18 and over. We do not knowingly collect or process personal data of individuals under the age of 18. If we become aware that personal data of a minor has been submitted to us, we will delete it immediately without further processing. If you believe a minor has submitted personal data through our website, please notify us at privacy@globaltrding.com immediately.

L

Changes to This Notice

Updates and changes to this privacy notice

We review and update this privacy notice periodically to reflect changes in our data processing activities, changes in applicable law, or changes recommended by our legal advisors. When we make material changes, we will update the "Last reviewed" date at the top of this page and, where appropriate, notify visitors via a prominent notice on the website homepage.

We encourage you to review this notice periodically. Your continued use of our website following any update constitutes your acknowledgement of the revised notice.

Current version: This privacy notice was last reviewed and updated in October 2026. The previous version (effective from 1 January 2025) has been archived. To request a copy of the previous version, please contact privacy@globaltrding.com.

Oct 2026

Last reviewed

Privacy Policy & Data Protection Notice