This policy explains how we collect, use, store and protect personal data when you visit https://goodagro.com.tr or contact us.

1. Who we are (data controller)

• Legal name: [Full registered company name]
•  
• Trade registry (MERSİS): [MERSİS no]
• E-mail: [info@goodagro.com.tr]
• Phone: [

  +90 (507) 663 07 56

  ]
• Website: https://goodagro.com.tr

We process personal data under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and, where you are located in the European Union, the General Data Protection Regulation (“GDPR”).

2. What data we collect

2.1. Contact and quotation forms

When you submit a contact, quotation (RFQ) or sample request form, we collect your name, company name and country, e-mail address, phone number, the content of your enquiry and any files you attach. At the moment of submission we also record your IP address, browser user agent string and timestamp, which we need to detect spam and abuse.

Please include only information relevant to your enquiry and do not send special category data (health, religion, membership, etc.).

2.2. Comments

If commenting is enabled, we collect the data shown in the comment form together with the visitor’s IP address and browser user agent string to help with spam detection. An anonymised string created from your e-mail address (a hash) may be sent to the Gravatar service to check whether you use it (Gravatar privacy policy). After your comment is approved, your profile picture is visible to the public alongside your comment.

2.3. Media

If you upload images to the website, avoid files with embedded location data (EXIF GPS): visitors can download published images and extract that data. We strip EXIF metadata from uploads before publishing.

2.4. Server logs

Our hosting infrastructure automatically records the IP address, date and time of the request, the requested URL, the HTTP status code and the browser user agent for security and troubleshooting purposes.

2.5. Analytics

We use [Google Analytics 4 / Matomo / tool in use] to understand how the site is used: pages viewed, session duration, referring source, approximate location (country/city level) and device type. IP addresses are anonymised. Analytics cookies are set only with your explicit consent.

3. Cookies

If you leave a comment, you may opt in to saving your name, e-mail address and website in cookies so you do not have to fill in your details again next time. These cookies last for one year.

Additional cookies apply to logged-in users: visiting the login page sets a temporary cookie to check whether your browser accepts cookies (it contains no personal data and is discarded when you close your browser); logging in sets cookies for your login session and screen display choices (login cookies last two days, screen option cookies one year, or two weeks if you select “Remember Me”). Logging out removes the login cookies. Editing or publishing an article saves one more cookie containing no personal data — only the post ID of the article you edited — which expires after one day.

You can change your cookie preferences at any time via the cookie banner, and delete or block cookies in your browser settings. Blocking strictly necessary cookies may break parts of the site.

4. Embedded content from other websites

Pages on this site may include embedded content (videos, maps, social media posts, etc.). Embedded content from other websites behaves exactly as if the visitor had visited that website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking that interaction if you have an account and are logged in to that website. Their processing is governed by their own privacy policies.

5. Why we process your data and on what legal basis

• Answering enquiries and quotations, business correspondence: necessary for entering into or performing a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).
• Site security, spam and abuse prevention: legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
• Complying with legal obligations (invoicing, commercial books, records required by Law No. 5651): KVKK Art. 5/2-a and 5/2-ç; GDPR Art. 6(1)(c).
• Analytics and marketing communications, including the newsletter: your explicit consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)), which you may withdraw at any time.

6. Who we share your data with

We do not sell personal data. It is shared only to the extent necessary to deliver our services, with:

• Hosting provider: [Provider, country]
• E-mail / SMTP provider: [Provider]
• Analytics provider: [Provider]
• Automated spam detection service: visitor comments and form submissions may be checked through it.
• Competent public authorities where required by law.

If you request a password reset, your IP address will be included in the reset e-mail.

International transfers: some of our providers host data outside Türkiye. Such transfers are made with appropriate safeguards — standard contractual clauses or your explicit consent — under KVKK Art. 9 and GDPR Chapter V.

7. How long we retain your data

• Contact and quotation form records: 3 years from the last correspondence.
• Correspondence, contracts and invoices relating to a commercial relationship: 10 years, as required by the Turkish Commercial Code and Tax Procedure Law.
• Server and traffic logs: 2 years under Law No. 5651.
• Comments and their metadata: retained indefinitely so that follow-up comments can be recognised and approved automatically instead of being held in a moderation queue; deleted on request.
• User accounts: information provided in a user profile is kept until the account is deleted. Users can see, edit or delete their personal information at any time (except the username); site administrators can also see and edit it.
• Newsletter subscriptions: until you unsubscribe.

Once the retention period expires, data is deleted, destroyed or anonymised.

8. Your rights

Under KVKK Art. 11 and, where applicable, GDPR Art. 15–22, you have the right to:

• learn whether your personal data is processed and request information about it;
• learn the purpose of processing and whether the data is used accordingly;
• know the third parties to whom your data has been transferred;
• request correction of incomplete or inaccurate data;
• request erasure or destruction of your data;
• request that corrections and erasures be notified to third parties who received the data;
• receive an exported copy of your data in a portable format;
• object to processing and withdraw any consent you have given;
• object to decisions producing adverse effects that are based solely on automated processing;
• claim compensation for damage caused by unlawful processing.

Send requests to [privacy@goodagro.com.tr]; we respond within 30 days. If you are not satisfied, you may lodge a complaint with the Turkish Data Protection Authority (KVKK) or, in the EU, your national supervisory authority. Erasure does not cover data we are obliged to keep for administrative, legal or security purposes.

9. Security

All traffic is encrypted with TLS (HTTPS). Access to the admin area is restricted, protected by strong passwords and two-factor authentication; software and plugins are updated regularly and backups are stored encrypted. No transmission over the internet is ever 100% secure, and we cannot guarantee absolute security.

10. Children’s data

This is a business-to-business website and we do not knowingly collect personal data from anyone under 18. If we become aware of such data, we delete it without undue delay.

11. Changes to this policy

We may update this policy to reflect changes in legislation or in our services. The current version is always published on this page — check the “last updated” date at the top. We will announce material changes on the site.

12. Contact

For any privacy or data protection question: [privacy@goodagro.com.tr] · [+90 (507) 663 07 56]