Privacy Notice.

Last updated: 3 November 2026

This English text is a translation for your information. If it differs from the Turkish text, the Turkish text prevails.

1. Data controller

Your personal data is processed by Sinyor M.Bey Gömlek Üretim Sanayi Ayhan Beyhan as the data controller under the Personal Data Protection Law No. 6698 ("the Law").

• Address: Uğur Mumcu Mah. K Caddesi No:29/31 Dükkan:1, 34265 Sultangazi / İstanbul
• Email: info@sinyor.com.tr
• Phone: +90 212 667 33 55

2. What data we process and for what purpose

Contact form. Full name, company name (optional), email address, phone number, the subject you choose and your message. We use these to reply to you, to assess your wholesale order or contract manufacturing request, to prepare a quotation and to contact you about it. The form reaches info@sinyor.com.tr from our server as an email. No automatic email is sent to you when you submit the form.

Preventing misuse of the form. When the form is submitted, your IP address and the time of submission are kept for a short time to limit repeated submissions from the same address.

Robot check (Cloudflare Turnstile). We use the Turnstile service of Cloudflare, Inc. to tell whether a person is filling in the form. During this check your browser sends Cloudflare your IP address, browser information (User-Agent) and a technical trace of the connection (TLS fingerprint). Cloudflare states that it uses this information on our behalf to tell robots apart, and also under its own responsibility to improve its robot detection.

Map (Google Maps). The maps on the Contact and Showroom pages load from Google's servers only when you press the "Show map" button; no information goes to Google unless you press the button. When the map loads, your browser passes your IP address and browser information to Google; Google processes this information under its own privacy policy.

Server logs. When you open any page of our site, our web server records your IP address, the date and time, the page you open, your browser information and the address of the page that referred you. The purpose is to keep the site secure and to detect attacks and errors.

WhatsApp. The "Open WhatsApp" button opens WhatsApp; the text you write is not stored on our site. If you send the message, it reaches our showroom phone through the service of WhatsApp LLC, and at that stage WhatsApp's own terms apply. We use your message only to reply to you.

Email and phone. If you email us directly or reach us by phone, we use the information you give us for the same purpose: to reply to you and to handle your request.

3. Method of collection and legal basis

We collect your data electronically, by automatic means: when you fill in the form, when you write to us and when you open our site.

• Wholesale order and contract manufacturing requests: Article 5(2)(c) of the Law, as the processing is directly related to the conclusion of a contract.
• Other questions and replying to you: Article 5(2)(f) of the Law, our legitimate interest, provided that it does not harm your fundamental rights and freedoms.
• Robot check, form submission record and server logs: Article 5(2)(f) of the Law, our legitimate interest in the security of the site and the form.
• Map: Article 5(2)(f) of the Law, our legitimate interest in being able to show our address.
• Cases required by law: Article 5(2)(ç) of the Law, the fulfilment of our legal obligation.

None of these processing activities is based on your explicit consent; for this reason we do not ask you for explicit consent. The box on the form is only for you to state that you have read this notice.

4. To whom and for what purpose your data may be transferred

• Server service: Our site and our email server run in Hostinger's data centre in Lithuania (Vilnius); form emails and server logs are kept there. Purpose: running the site and email.
• Backup: The server's backups are encrypted and stored in Backblaze's data centre in the Netherlands (Amsterdam). Purpose: protection against data loss.
• Cloudflare, Inc. (USA): for the robot check.
• Google: for the map; Google processes the information it receives when you load the map on its own behalf.
• Technical support: the IT service provider in Türkiye from which we receive services for server and site management.
• Authorised public institutions and organisations: only when required by law and only to the extent requested.

Some of these transfers are made abroad and are subject to Article 9 of the Law.

5. How long we keep it

• Form and email messages: kept in our mailbox for as long as needed for your request and any business relationship that may arise from it. A deleted message stays in our backups for at most about 8 more months, and is then deleted from the backups too.
• Form submission record: what you write in the form is kept on our server only until it has been passed on as an e-mail, for a few seconds; if it cannot be passed on, it waits for at most 24 hours, then it is deleted, and it is not backed up. The IP address and time of the submission stay in the server logs for about 15 days, and an address blocked for repeated submissions is kept for as long as the block lasts (at most 1 week).
• Server logs: about 15 days; not backed up.
• Cloudflare and Google: according to the periods in their own privacy policies.

6. Your rights

Under Article 11 of the Law, by applying to us you can:

• learn whether your personal data is processed and, if it has been, request information about it;
• learn the purpose of the processing and whether the data is used in line with that purpose;
• know the third parties in Türkiye or abroad to whom it has been transferred;
• ask for it to be corrected if it has been processed incompletely or incorrectly;
• ask for it to be deleted or destroyed under the conditions in Article 7 of the Law;
• ask for the correction, deletion or destruction to be notified to the third parties to whom the data has been transferred;
• object to a result against you that arises from an analysis made solely by automated systems;
• ask for the damage to be compensated if you have suffered damage because your data was processed unlawfully.

7. How you can apply

You can send your application in one of the following ways:

• in writing and with a wet signature, to our address in section 1;
• from the email address you have previously given us and that is registered in our system (for example the address you wrote in the form), to info@sinyor.com.tr.

Your application must include: your name and surname (your signature for a written application), your Turkish identity number (if you are a foreign national, your nationality and passport number or, if you have one, your identity number), your residential or business address for notification, your email address and phone number for notification if any, and your request.

We conclude your application free of charge within 30 days at the latest. If the reply exceeds ten pages, a fee of 1 TL may be charged for each extra page, and if the process involves an additional cost, the fee set by the Board may be charged. If your application is rejected, if you find the reply insufficient or if you do not receive a reply in time, you can file a complaint with the Personal Data Protection Board within 30 days from the date you learn of the reply, and in any case within 60 days from the date of your application.