1. Data Controller

Data Controller: KRD & EKAM (Kardesler Karadeniz Agricultural & EKAM Agricultural) Address: Alacam, Samsun, Turkey Email: info@ekamspice.com Web: https://krdekam.com

2. Categories of Personal Data Processed

The personal data we process falls into the following categories:

• Identity Data: First name, last name
• Contact Data: Email address, phone number, company name, country
• Message Content: The content of messages you submit
• Technical Data: IP address, browser type and version, operating system, screen resolution, language preference, timezone, referrer URL
• Usage Data: Pages visited, duration of visit, in-site behavior (via Google Analytics, only with explicit consent)

3. Purposes of Processing

Your personal data is processed for the following purposes:

• To respond to your contact requests and establish commercial communication
• To provide information about our products and services
• To ensure the security of our website and prevent misuse
• To analyze and improve website usage (with explicit consent)
• To fulfill our legal obligations

4. Legal Basis for Processing

Your personal data is processed under KVKK Art. 5/2(f) "processing is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject" and GDPR Art. 6/1(f) legitimate interest. For analytics and marketing cookies, your explicit consent is obtained under KVKK Art. 5/1 and GDPR Art. 6/1(a).

5. Third Parties

Your personal data is shared with or processed through the following third parties:

• Google LLC (USA) — Google Analytics: For site usage statistics, only with explicit consent. IP addresses are anonymized.
• Cloudflare Inc. (USA) — Turnstile: For bot protection during form submissions.
• ipapi.co (USA) — Location detection: For automatic theme and language, only with explicit consent.
• Sunrise-Sunset.org (USA) — Sun data: For automatic day/night theme switching, only with explicit consent.
• Hostinger — Hosting service: For website hosting and server logs (EU/non-EU).

Cross-border data transfer takes place within the framework of KVKK Art. 9 and GDPR Chapter V. Adequate safeguards have been implemented.

6. Retention Periods

Your personal data is retained for the following periods:

• Contact form submissions: 2 years
• Server access logs: 6 months
• Google Analytics data: 14 months (GA4 default)
• Cookie preferences: Until changed by the user

7. Rights of the Data Subject

Under KVKK Art. 11 and GDPR Art. 15-22, you have the following rights:

• To learn whether your personal data is being processed
• To request information about the data processed
• To learn the purpose of processing and whether data is used in accordance with that purpose
• To know the third parties to whom data is transferred domestically or abroad
• To request correction of incomplete/incorrectly processed data
• To request deletion or destruction of your data
• To request restriction of processing
• To object to results arising from automated processing
• To request compensation for damages arising from unlawful processing
• To lodge a complaint with the Personal Data Protection Authority (KVKK)

8. How to Apply

To exercise the rights listed above, you may submit a written request to info@ekamspice.com. Your request must clearly state your identity and the subject of your request. Requests will be responded to within 30 days at the latest, depending on the nature of the request. If your request is rejected, the response is found insufficient, or not answered in time, you retain the right to file a complaint with the Personal Data Protection Authority.

9. Cookie Policy

Our website uses the following cookie categories:

10. Changes to This Policy

This notice may be updated from time to time. Significant changes will be announced on our website. The last update date is shown at the top of the document. We recommend that you review the policy regularly.