Privacy notice

Last updated: 27 October 2026. This notice is issued under the Turkish Personal Data Protection Law (Law No. 6698). The Turkish text at norfaro.com/gizlilik.html is the binding version.

Data controller

This notice is issued by Norfaro, the operator of the website published under the norfaro.com domain, in accordance with Article 10 of Law No. 6698. The contact address for every request and question is [email protected].

Which data is processed

The site uses no cookies or analytics tools that collect personal data during a visit. A single non-personal flag is written to the browser's session storage so that the opening animation plays once per session. It is deleted when the browser closes.

When you fill in the contact form, the following data is processed: name, email address, business name, current site address, the message text, the IP address from which the form was sent and the browser string. Filling in the form is voluntary. The name, email and message fields are required for the form to work.

Purpose and legal basis

The data is processed to assess your request, reply to you and prepare a quote. The legal basis is Article 5(2)(c) of the Law, processing directly related to the formation of a contract, and Article 5(2)(f), legitimate interest. The IP address and browser string are processed on the same basis to prevent misuse of the form.

Transfers

The form content is stored on a server located in Türkiye. The email that announces a new message is delivered to an email service whose servers are located outside Türkiye. Under Article 9 of the Law this is a transfer abroad and rests on the explicit consent you give when sending the form. The data is not transferred to any other third party, not sold and not used for advertising.

Retention

Form records are kept for at most two years after the request is closed and are deleted at the end of that period. When a contract is formed, the records relating to it are kept for the period required by the applicable legislation.

Your rights

Under Article 11 of the Law you have the right to learn whether your data is processed, to request information if it is, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred, to request correction if it is incomplete or wrong, to request erasure or destruction, to request that these operations be notified to the third parties involved, to object to a result that arises against you from analysis by automated systems, and to claim compensation for damage.

Requests are made by email to [email protected] together with information that verifies your identity. Requests are answered within thirty days at the latest.

Changes

This notice is updated when necessary. The current version is always published on this page with the date of the update at the top.