Privacy & Data Protection
Last updated: July 2026
This notice explains how personal data collected via mehmeterendereli.com is processed. It covers both Turkey's Personal Data Protection Law (KVKK) and, for visitors in the European Economic Area and the United Kingdom, the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is Mehmet Eren Dereli / Dereli Plast. Contact: info@mehmeterendereli.com, İkitelli OSB Demirciler Sanayi Sitesi, Blok B7 No: 170-171C, Başakşehir / İstanbul.
2. Data We Process
When you submit the contact/quote form: name, company, phone, email and message content.
When you browse the site: technical usage data such as IP address, browser information, pages visited and referrer (for analytics).
3. Purposes and Legal Basis
Data is processed to respond to your requests, prepare quotes, deliver services and improve the site.
For visitors in the EEA/UK the legal bases under Article 6(1) GDPR are: (b) performance of, or steps prior to entering into, a contract — for enquiry and quotation handling; (a) your consent — for analytics cookies, which you may withdraw at any time via the cookie banner; and (f) our legitimate interest in securing and maintaining the site — for server logs and abuse prevention.
4. Cookies
The site uses limited cookies and similar technologies for core functions (language preference, session) and anonymous/aggregate performance measurement. You can manage cookies in your browser.
5. International Transfer and Retention
Data may be processed through hosting, database and email infrastructure providers (Vercel, the managed Postgres provider and the email/notification service).
The data controller is established in Türkiye, which the European Commission has not designated as providing an adequate level of protection. Transfers from the EEA/UK therefore rely on the Standard Contractual Clauses together with the security measures described in this notice. A copy of the safeguards can be requested at info@mehmeterendereli.com.
Enquiry records are retained for up to 24 months after last contact, unless a contractual or statutory obligation requires longer. Analytics records are retained for up to 14 months.
6. Your Rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and — where processing rests on consent — to withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
Send requests to info@mehmeterendereli.com. We respond within one month.
7. Supervisory Authority
If you are in the EEA or the UK you may lodge a complaint with your national data-protection authority — for example the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit in Germany, the Datenschutzbehörde in Austria, or the Information Commissioner's Office in the United Kingdom.
Visitors in Türkiye may apply to the Kişisel Verileri Koruma Kurumu (KVKK).
8. Automated Decision-Making
The MED AI assistant answers questions and can route you to a contact channel. It does not make automated decisions producing legal or similarly significant effects, and it does not carry out profiling.