Privacy notice

This is an English translation provided for information. The Turkish version is the legally binding text.

This notice is provided by Cemal Altun under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) for visitors of tramwayjeans.com, users of the contact form, and anyone who contacts us by phone, email or WhatsApp.

1. Data controller

Cemal Altun
Address: Mehmet Nesih Özmen Mah., Nar Sk. No:6, Elegance İş Merkezi, 34173 Güngören / İstanbul
Email: [email protected]

2. What personal data do we process?

• Identity and contact: the name, email address and phone number you enter in the contact form or your message.
• Request details: product, size, order and similar information you share in your message.
• Security: IP address, browser and device information, date and time of visit; technical signals collected by Google reCAPTCHA to protect the form against bots.
• Cookie data: the cookies described in our Cookie Policy.

There is no membership, payment or online sales on our website; we do not ask for ID numbers, card details or special categories of personal data. Please do not share such information in your messages.

3. Purposes and legal grounds

• Answering your product, size, stock and wholesale requests, and handling quotes and orders — necessary for entering into or performing a contract (KVKK art. 5/2-c) and our legitimate interest (art. 5/2-f).
• Keeping the website secure and preventing spam and abuse — legitimate interest (art. 5/2-f).
• Meeting our legal obligations and requests from competent authorities — explicitly provided by law and legal obligation (art. 5/2-a, 5/2-ç).
• Loading optional third-party content such as Google Maps showing our store location — your explicit consent (art. 5/1). You give this consent in the cookie notice and can withdraw it at any time.

4. How we collect data

Your data is collected from the information you send us via the contact form, email, phone and WhatsApp, and automatically through server logs and cookies when you visit the website.

5. Who we share it with

We do not sell your personal data or share it with anyone for marketing. Only to the extent necessary for the purposes above, we share it with:

• Our hosting and email provider (Natro, Türkiye) — to run the website and email.
• Cloudflare, Inc. (USA) — to deliver the website quickly and securely and protect it against attacks.
• Google LLC / Google Ireland Ltd. — for reCAPTCHA (form security) and, with your consent, Google Maps.
• WhatsApp / Meta — only if you choose to message us on WhatsApp; those chats are also subject to WhatsApp’s own privacy terms.
• Competent public authorities — when legally required.

As Cloudflare’s and Google’s servers are located abroad, these transfers rely on the safeguards in KVKK art. 9 (the providers’ standard contractual clauses) and, where required, your explicit consent.

6. How long we keep it

• Contact form messages and email correspondence: up to 2 years after your request is closed; if it turns into a sales relationship, for the periods required by law (e.g. the Turkish Commercial Code and Tax Procedure Law).
• Server and security logs: for the periods required by Law No. 5651 and related legislation.
• Cookies: for the period stated for each cookie in the Cookie Policy.

When the period ends, your data is deleted, destroyed or anonymised.

7. Your rights

Under KVKK art. 11 you have the right to learn whether your personal data is processed and to request information about it; to learn the purpose of processing and whether it is used for that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction if it is incomplete or inaccurate; to request its deletion or destruction under the conditions of KVKK art. 7 and the notification of these actions to third parties it was transferred to; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damages caused by unlawful processing.

8. How to apply

You can send your request by email to [email protected] or in writing to the address above. It is enough to state your name, contact details and request clearly. Your application will be answered free of charge within 30 days at the latest, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller.