Privacy Notice (KVKK)

Effective date: 2 October 2026

This notice has been prepared pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform you about the personal data processed through the quote form and contact channels on the leamermer.com website. In case of any discrepancy between the Turkish and English versions, the Turkish version shall prevail.

1. Data Controller

Your personal data is processed by LEA MERMER GRANİT VE İNŞAAT SANAYİ TİCARET LİMİTED ŞİRKETİ ("Lea Mermer") as the data controller.

• Address: İTOB OSB Mahallesi, Ekrem Demirtaş Caddesi, No:35, Menderes / İzmir, Türkiye
• Email: info@leamermer.com
• Phone: +90 (532) 050 78 91

2. Personal Data We Process

• Identity: first and last name
• Contact: email address, phone number and, optionally, company name
• Request details: the product categories you are interested in and the content of your message
• Transaction security: an irreversibly hashed (salted SHA-256) form of your IP address, browser information (user agent) and the result of the automated submission (bot) check. Your raw IP address is not stored by us.
• Consent record: the date and time you submitted the form and the version numbers of the Privacy Notice and Privacy Policy in force at that moment
• Site usage: only if you give consent in the cookie banner, page view and interaction data collected through analytics cookies (details in the "Cookies" section of the Privacy Policy)

The form does not ask for special categories of personal data (health, religion, ethnic origin, etc.). Please do not include such information in your message.

3. Purposes of Processing

• Receiving and evaluating your quote request and providing you with a price quote and product information
• Contacting you by email or phone regarding your request
• Sending the automatic email confirming receipt of your request
• Preventing misuse of the form and automated (bot) submissions, and limiting large numbers of submissions in a short time
• Being able to prove which version of the notices was accepted when the request was submitted
• Fulfilling our legal obligations and protecting our rights in potential disputes
• If you consent, measuring how the site is used in order to improve our service

4. Legal Grounds for Processing

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

• Processing is directly related to the establishment or performance of a contract (Art. 5/2-c): receiving, evaluating and responding to your quote request
• Processing is necessary for the legitimate interests of the data controller (Art. 5/2-f): form security, bot verification and submission limits
• Processing is necessary for the data controller to fulfil its legal obligations (Art. 5/2-ç): retention obligations under commercial and tax law
• Processing is necessary for the establishment, exercise or protection of a right (Art. 5/2-e): keeping the consent record
• Your explicit consent (Art. 5/1): analytics cookies. You may withdraw your consent at any time via the "Cookie preferences" link at the bottom of the site.

5. Method of Collection

Your personal data is collected electronically, partly by automated means, when you fill in the quote form on the site, indicate your preference in the cookie banner, or contact us by email, phone or WhatsApp.

6. Transfer of Personal Data

Your personal data is transferred only for the purposes above and to the extent necessary, to the following service providers acting as data processors:

• Supabase Inc.: database and file hosting (servers in Frankfurt, Germany)
• Vercel Inc.: website hosting
• Google LLC: sending request notifications and the automatic reply through our business email service (Google Workspace); if you consent, measuring site usage with Google Analytics
• Cloudflare Inc.: automated submission (bot) verification on the quote form (Turnstile)

Your personal data may also be disclosed to legally authorised public authorities and courts upon request. Your personal data is not sold and is not shared with third parties for advertising or marketing purposes.

As the servers of the service providers above are located outside Türkiye, these transfers constitute transfers abroad. They are carried out in accordance with Article 9 of the KVKK, on the basis of appropriate safeguards, in particular the standard contracts published by the Personal Data Protection Board.

7. Retention Period

• Quote requests and related correspondence are kept for 2 years from the conclusion of the request.
• Records of requests that turn into a sale or business relationship are kept for 10 years pursuant to Article 82 of the Turkish Commercial Code No. 6102.
• Analytics data is kept in Google Analytics for a maximum of 14 months.

When the period expires, your personal data is deleted, destroyed or anonymised.

8. Your Rights under Article 11 of the KVKK

As a data subject, you have the right to:

• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used in line with that purpose,
• Know the third parties in Türkiye or abroad to whom it is transferred,
• Request correction if it is incomplete or inaccurate,
• Request its deletion or destruction under the conditions set out in Article 7 of the KVKK,
• Request that correction, deletion or destruction be notified to the third parties to whom the data was transferred,
• Object to a result against you arising from analysis of the data exclusively by automated systems,
• Claim compensation for damage arising from unlawful processing.

9. How to Apply

You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• In writing with a wet signature, in person or through a notary, to our address above,
• Via registered electronic mail (KEP), secure electronic signature or mobile signature,
• From the email address you previously provided to us and that is registered in our system, to info@leamermer.com.

Your application must include your name, surname, signature (for written applications), Turkish ID number (for foreign nationals, nationality and passport number), address for notification, email address and phone number if any, and the subject of your request.

Your application will be concluded free of charge within 30 days at the latest, depending on its nature. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, you find the response insufficient, or no response is given in time, you may file a complaint with the Board.

10. Changes

This notice may be updated when necessary. The current version is published on this page together with its version number. The version you accepted is recorded when you submit the quote form.