GDPR · KVKK
Privacy policy
Last updated · 2026-10-23
This policy explains what personal data BetonParts collects, why, on what legal basis, who receives it, how long we keep it and what rights you have. It applies to this website, to our forms, to our emails and newsletter, and to requests you send us by email, phone, WhatsApp or Telegram.
We wrote it to meet the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the French Data Protection Act (Loi Informatique et Libertés), and the Turkish Personal Data Protection Law No. 6698 (“KVKK”).
1. Who is responsible for your data
The data controller is ATALANPROMECH Mühendislik Makina İmalat Sanayi Ticaret Limited Şirketi, trading as BetonParts.
- Address: Seyrantepe Mah. 8261 Sk. G 44 B Blok No: 4AB, İç Kapı No: 11, Karaköprü / Şanlıurfa, Türkiye
- Registration: Şehitlik Vergi Dairesi · VKN 0950666184
- Privacy contact: info@betonparts.com
- General contact: info@betonparts.com · +90 507 328 84 73
EU representative (GDPR Art. 27): to be appointed before launch
We have not appointed a Data Protection Officer because our activities do not require one. Every privacy question is answered by the privacy contact above.
2. Summary
| What | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Part request (contact, machine, part, photos) | Identify the part, prepare and send your quote | Steps at your request before a contract — Art. 6(1)(b) | 24 months after the last exchange if no order |
| Orders, invoices, shipping documents | Deliver, invoice, keep legal records | Contract — Art. 6(1)(b); legal obligation — Art. 6(1)(c) | 10 years (commercial and tax law) |
| Manual download (name, email, country, plant and mixer type) | Send the manual; one follow-up email about it | Your request — Art. 6(1)(b); legitimate interest — Art. 6(1)(f) | 3 years after the last contact |
| Newsletter (only if you tick the box) | Maintenance reminders and parts offers | Consent — Art. 6(1)(a) | Until you unsubscribe |
| Messages by email, phone, WhatsApp, Telegram | Answer you | Steps before a contract or legitimate interest — Art. 6(1)(b)/(f) | 24 months after the last exchange |
| Technical data (IP address, browser, pages) | Run, secure and measure the website | Legitimate interest — Art. 6(1)(f) | Short periods set by our providers (see section 6) |
3. Data we collect
3.1 Part request form
Name, company, email, phone or WhatsApp number, country; machine details (maker, model, serial number, size, year); part details (description, position, part number, dimensions, quantity); photos you upload; any message you add; the request reference, date and page language. If you came from the diagnosis tool or a manual page, the symptom or page you came from.
Photos can show people, number plates or locations by accident. Please photograph only the part and the nameplate. Photos taken with a phone can contain location data (EXIF). Large photos are reduced in your browser before upload, which removes most of this metadata; smaller photos are sent as they are.
3.2 Manual download form
Name, email, country, and optionally your plant type and mixer type; whether you ticked the newsletter box; the date and language.
3.3 Newsletter
If you tick the newsletter box, your email address, name, country, language and plant information are added to our mailing list. Our newsletter tool also records whether emails are delivered, opened and clicked, so we can remove invalid addresses and improve our content. You can unsubscribe with the link in every email or by writing to us.
3.4 Direct messages
When you contact us by email, phone, WhatsApp or Telegram, we receive what you send and the contact details attached to it.
3.5 Website use
When you visit the website, our host receives technical data that every browser sends: IP address, date and time, page requested, browser type and referring page. We also measure visits with a privacy-friendly analytics tool that does not use cookies, does not store your IP address and does not build a profile of you. We see totals such as page views, countries and devices.
3.6 Data we do not collect
We do not use advertising or tracking cookies, social media pixels, or fingerprinting. Fonts are served from our own website, not from Google. The 3D viewer and the diagnosis tool run in your browser and do not send what you click to anyone. Your request list and the checklist ticks on the maintenance page are kept in your browser’s local storage on your own device; nothing is sent to us until you submit a form.
4. Why we use your data
- To answer your request and quote. We need your contact details and the information about your machine and part to identify the right part and send a price. Without them, we cannot answer.
- To deliver and invoice. For an order, we need delivery and billing details and must keep invoices as required by law.
- To send the manual and one follow-up. After a download, we may send you one email to ask whether the manual helped and whether you need a part. Our legitimate interest is to offer a relevant service to professionals who showed interest. You can refuse this email at any time, including in the email itself.
- To send our newsletter, only if you agreed.
- To keep the website running and secure, and to understand which pages are useful.
We do not sell your data. We do not make decisions about you by automated means, and we do not profile you.
5. Who receives your data
Your data is seen by the BetonParts team that handles your request. We also use service providers who process data on our behalf under a data processing agreement:
| Provider | Role | Location |
|---|---|---|
| Netlify, Inc. | Website hosting and form submissions | USA (EU-US Data Privacy Framework / Standard Contractual Clauses) |
| Cloudflare, Inc. | Cookie-free website analytics | USA (EU-US Data Privacy Framework / Standard Contractual Clauses) |
| Sendinblue SAS (Brevo) | Newsletter and manual emails | France (EU) |
| Email provider | Business email | to be appointed before launch |
Other recipients, only when needed:
- Transport companies, couriers and freight forwarders: name, company, delivery address and phone number, to deliver your order.
- Our accountants and banks: invoice and payment data.
- Public authorities: only where the law requires it.
- Manufacturers of parts: technical information about the part (dimensions, photos of the part) without your contact details, when we need their confirmation.
If you write to us on WhatsApp or Telegram, those services process your messages under their own privacy policies, as independent controllers. Use email if you prefer not to use them.
6. Transfers outside the EU
We are based in Türkiye. When you send us a request from the EU, your data is received and handled in Türkiye. The European Commission has not adopted an adequacy decision for Türkiye. These transfers take place because they are necessary to take the steps you ask for before a contract or to perform a contract with you (GDPR Art. 49(1)(b) and (c)). Where we use providers in other countries, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses. You can ask us for a copy of the safeguards.
Server logs kept by our host are deleted after a short period (typically 30 days or less). The analytics tool keeps no personal data.
7. How long we keep your data
- Part requests that do not lead to an order: 24 months after the last exchange.
- Orders, invoices and accounting records: 10 years, as required by commercial and tax law.
- Manual downloads without newsletter consent: 3 years after the last contact.
- Newsletter: until you unsubscribe. We then keep only your email address on a suppression list, so we never write to you again by mistake.
- Messages: 24 months after the last exchange, unless they are part of an order.
After these periods, we delete the data or make it anonymous.
8. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy;
- rectify inaccurate data;
- erase your data (“right to be forgotten”), unless we must keep it by law;
- restrict processing in certain cases;
- data portability: receive the data you gave us in a common format;
- object to processing based on legitimate interest. You can object at any time and without reason to direct marketing, including the follow-up email;
- withdraw consent at any time, for example by unsubscribing from the newsletter. This does not affect processing before the withdrawal;
- in France, give instructions on what happens to your data after your death.
To use these rights, write to info@betonparts.com. We answer within one month. We may ask for proof of identity if we cannot confirm that the request comes from you.
You can also complain to a supervisory authority, in particular in the EU country where you live or work. In France: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr. In Türkiye: Kişisel Verileri Koruma Kurumu (KVKK), www.kvkk.gov.tr.
9. Your rights under Turkish law (KVKK)
If Turkish law applies to you, you also have the rights listed in Article 11 of Law No. 6698: to learn whether your data is processed, request information, learn the purpose, know the third parties to whom it is transferred in Türkiye or abroad, request correction or deletion, object to a result against you arising from automated analysis, and claim compensation for damage caused by unlawful processing. Send requests to info@betonparts.com or to our postal address.
10. Cookies and similar technologies
This website does not set cookies for tracking, advertising or analytics, so we do not show a cookie banner. Your browser may store technical data needed to display the site (cache). If we add a tool that needs consent in the future, we will ask for it first and update this policy.
Links to other websites (LinkedIn, Instagram, WhatsApp, Telegram, courier tracking) take you to services that have their own privacy policies.
11. Security
The website is served over HTTPS only. Form submissions travel encrypted and are stored by our host with access limited to the BetonParts team. We use strong passwords and two-factor authentication on the accounts that hold your data, and we give access only to the people who need it to answer you.
12. Children
Our services are for businesses and professionals. We do not knowingly collect data from children under 16.
13. Changes to this policy
We update this policy when our services or the law change. The date at the top shows the latest version. If a change affects how we use data you already gave us, we will tell you by email.