BETA ALG BIOTECHNOLOGY LIMITED COMPANY WEBSITE PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
As Beta Alg Biotechnology Limited Company (“Company”), we act as the data controller in accordance with the Personal Data Protection Law No. 6698 and relevant legislation. This Information Notice has been prepared for natural persons who visit our website, use the contact form, submit a quote/appointment/request, communicate with us via email or phone, and opt in to receive newsletters or marketing communications.
1. Data Controller Information
- Company Name: Beta Alg Biotechnology Limited Company
- MERSIS / Tax ID: 0167089381300001
- Address: Kültür Neighborhood, Çakmaklar Street, Teknokent Main Building, Block No. 2, Interior Door No. 47, 14300 Center / BOLU
- Email: [email protected]
- Phone: +905387029852
- KEP: [email protected]
- VERBIS Registration No.: —
2. Categories of personal data processed
Depending on the nature of your business, we may process the following categories of data:
- Identification data: first name, last name [title/company information if necessary]
- Contact data: phone number, email address, address
- Customer transaction/request data: message content, subject of the request, quote/appointment information, correspondence
- Transaction security data: IP address, traffic/log records, browser and device information, session and error logs
- Cookie / online identifier data: cookie ID, preference records, website usage information
- Marketing consent data: commercial electronic communication consent/opt-out records, channel preferences
- Legal proceedings / compliance data: application records, dispute and evidence files
3. Special category personal data
The Company generally does not request special category personal data through its website or general communication channels. Please do not share such data unless absolutely necessary. Should an exceptional situation arise necessitated by the nature of the activity, special category personal data will be processed solely based on the applicable condition set forth in Article 6 of the Law and with the necessary additional security measures in place.
4. Purposes and Legal Grounds for Processing Your Personal Data
The following table lists our main processing activities:
| Processing Activity | Categories of Data Processed | Legal Basis |
| Operation of the website, ensuring information security, and preventing errors and misuse | Transaction security, cookie/online identifier data | Processing is necessary for the legitimate interests of the data controller (Law Art. 5/2-f) |
| Responding to requests and questions you submit via the contact form, email, or phone | Identity, contact, request/customer transaction data | Directly related to the conclusion or performance of a contract based on the nature of your request (Law Art. 5/2-c) and/or the data controller’s legitimate interest (Law Art. 5/2-f) |
| Compliance with legal obligations, provision of information to authorized persons/entities/organizations | All data categories necessary for the relevant transaction | It is necessary for the data controller to fulfill its legal obligations (Law Art. 5/2-ç) |
| To provide evidence in potential disputes, and to establish, exercise, or protect a right | Correspondence, request records, log records, legal transaction data | Necessary for the establishment, exercise, or protection of a right (Law Art. 5/2-e) |
| Order, delivery, and customer support | Identity, contact, and customer transaction data | The conclusion or performance of a contract (Art. 5/2-c) |
| Billing | Identity (First Name, Last Name, Turkish ID Number, or Tax ID Number), Contact (Billing address, phone number, email address), Financial (Bank account information, IBAN, payment method, invoice amount, payment date), and Customer Transaction (Invoice number, details of the product/service purchased, order quantity, and history) | To enable the data controller to fulfill its legal obligations (Art. 5/2-c) |
| [Only if you provide explicit consent] sending campaign, newsletter, promotional, and marketing communications | Identity, contact, and marketing consent data | Explicit consent (Article 5/1 of the Law) |
| [Only if you choose] Use of non-essential functional, performance-analytical, and advertising/marketing cookies | Cookie/online identifier data | Explicit consent (Law Art. 5/1) |
5. How your personal data is collected
5. How your personal data is collected
Your personal data may be collected through our website, contact forms, email, telephone, online application tools, cookies and similar digital technologies, verbal/written communication channels, and in-person meetings, using automated, partially automated, or non-automated methods provided they are part of a data recording system.
6. Transfer of your personal data to recipients within the country
Your personal data may be transferred, to the extent necessary and for the purposes specified above, to:
- IT/hosting/server providers,
- email and communication infrastructure providers,
- consultants providing legal, audit, accounting, and financial advisory services,
- [if applicable] call center, web development, maintenance-support, and cybersecurity providers,
- business partners providing payment, collection, or operational support services, and authorized public institutions and organizations
may be transferred in accordance with the conditions set forth in Article 8 and Articles 5 and 6 of the Law
7. Transfer of your personal data abroad
As a general rule, the Company does not transfer your personal data abroad.
8. Retention period and destruction
Your personal data is retained for the maximum period required by applicable legislation or necessary for the purpose for which it was processed. When determining the retention period, the following factors are considered: the purpose of the activity, contractual relationships, legal obligations, the need for evidence, potential dispute resolution periods, information security requirements, and the Company’s practices. If the purpose of processing and the legal basis cease to exist, personal data is deleted, destroyed, or anonymized in accordance with our Retention and Destruction Policy.
9. Your Rights Regarding Your Personal Data
Pursuant to Article 11 of the Law, by submitting a request to the Company;
- to learn whether your personal data has been processed,
- request information regarding such processing if it has occurred,
- to learn the purpose of the processing and whether it is being used in accordance with that purpose,
- to know the third parties to whom your personal data has been transferred within or outside the country,
- request the correction of your data if it has been processed inaccurately or incompletely,
- requesting its deletion or destruction if the conditions apply,
- requesting that the third parties to whom the data has been transferred be notified of the correction, erasure, or destruction,
- objecting to a decision made solely through automated processing that adversely affects you,
- to claim compensation if you suffer harm due to unlawful processing
You have these rights.
10. Application Procedure
You may submit requests regarding your rights;
- In writing to [Kültür Mahallesi, Çakmaklar Caddesi, Teknokent Main Building, Block No. 2, Inner Door No. 47, 14300 Merkez / BOLU]
- Via KEP [[email protected]],
- Using a secure electronic signature or mobile signature [[email protected]],
- or via the email address you previously provided to us and which is registered in our system [[email protected]]
You may submit your request to us via these channels.
Your request must include your first and last name, Turkish ID number / passport number, address for service of process, email address for notification (if any), the subject of the request, and any relevant explanations regarding the request. The Company will process your request free of charge as soon as possible and no later than thirty days, depending on the nature of the request. However, if a written response is provided, no fee will be charged for up to 10 (ten) pages; for each page exceeding 10 pages, a processing fee may be charged in accordance with the tariff determined by the Board. If the response to your request is provided on a storage medium such as a CD or flash drive, the fee we may charge as the data controller cannot exceed the cost of the storage medium.
11. Cookies and Similar Technologies
Detailed information regarding the cookies used on our website, including cookie types, third-party information, purpose, legal basis, retention period, and preference management mechanism, is available in the [Cookie Information Text / Cookie Preference Center]. Non-essential cookies are activated only based on your preferences; you may change your preferences at any time.
12. Data Security
The Company takes technical and administrative measures appropriate to the nature of our operations to prevent the unlawful processing of and access to personal data and to ensure the secure storage of data. Where personal data is processed by data processors on behalf of the Company, the necessary contractual and organizational measures are also taken.
13. Updates
This Privacy Notice may be updated as needed and in accordance with changes in legislation. The current version becomes effective as of the date of publication.
- Publication date:
- Version No.: