Effective date: 16 July 2026
1. Who we are
Freya Melamin Dış Ticaret Sanayi Limited Şirketi (“Freya”, “we”, “us”) is a melamine tableware manufacturer and wholesaler established in Türkiye. We act as the data controller for personal data processed through this website (freyamelamin.com) and our related communication channels.
- Registered address: Mahmutbey Mah. 2428. Sk. No: 107, Bağcılar / İstanbul, Türkiye
- MERSİS No: 0388146359600001 · Trade Registry: İstanbul 284909-5
- E-mail: [email protected] · KEP (registered e-mail): [email protected] · Phone: +90 212 979 01 44
This policy is prepared with regard to the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK). Turkish-speaking visitors can read our KVKK disclosure text at /tr/gizlilik-politikasi/.
2. What personal data we collect
- Identity & contact data: name, company/organisation name, phone number, e-mail address, country — provided through our quote, sample, special-project and contact forms, the newsletter sign-up, when you contact us by phone, e-mail or WhatsApp, or through contact details (e.g. business cards) you share with us at trade fairs and events.
- Commercial request data: the content of your enquiry and any files you attach to it, requested product group and product codes, quantities, and any reply deadline (date/time) you indicate.
- Job application data: the CV and application details you choose to send us (for example via the “Jobs” topic of our contact form).
- Technical & usage data: IP address, device/browser information, pages visited, referral source, advertising click identifiers (e.g. Google Click ID) and campaign parameters — collected via server logs and, subject to your consent, via cookies (see our Cookie Policy).
Please do not include special categories of personal data (health, religion, political opinion, etc.) in free-text fields or applications, and make sure that files you upload do not contain personal data of third parties. We do not request or intend to process such data.
3. Purposes and legal bases
| Purpose | Data Used | Legal basis (GDPR Art. 6 / KVKK Art. 5) |
| Preparing wholesale quotations, handling product and sample requests, assessing special-project (mould/pattern) feasibility, pre-contractual and contractual steps | Identity, contact, commercial request data | Performance of a contract / pre-contractual steps (Art. 6(1)(b); KVKK 5/2-c) |
| Responding to enquiries and managing business communication | Identity, contact data | Legitimate interests in running our business communication (Art. 6(1)(f); KVKK 5/2-f) |
| Receiving and assessing job applications | Identity, contact, job application data | Steps prior to entering into an employment contract (Art. 6(1)(b); KVKK 5/2-c); legitimate interests (Art. 6(1)(f); KVKK 5/2-f) |
| Website security, fraud prevention, technical logs | Technical data | Legitimate interests; compliance with legal obligations (Art. 6(1)(c)(f); KVKK 5/2-ç, 5/2-f) |
| Website analytics (visit statistics) | Cookie / usage data | Your consent (Art. 6(1)(a); KVKK 5/1) |
| Advertising measurement and remarketing (Google Ads, Meta) | Cookie data, advertising identifiers; where you separately consent on our form, hashed contact data for conversion measurement | Your consent (Art. 6(1)(a); KVKK 5/1) |
| Sending commercial electronic messages (newsletter, campaign and trade-fair announcements) | Identity, contact data | Your consent (Art. 6(1)(a); Turkish Law No. 6563) |
Consent-based processing never conditions our services: you can request a quotation without accepting any optional cookies or checkboxes, and you may withdraw consent at any time with effect for the future. Statutory exceptions under Turkish e-commerce legislation (Law No. 6563) for messages sent to merchant/trader recipients remain reserved.
4. Recipients and international transfers
We share personal data only to the extent necessary with:
- Service providers acting on our behalf: our hosting and e-mail infrastructure providers established in Türkiye; Cloudflare, Inc. (USA — content delivery and security); Google LLC (USA — analytics, advertising and tag management services); Meta Platforms (Ireland/USA — advertising services and WhatsApp communication); MailerLite (EU — newsletter sign-up form and delivery); Adobe Inc. (USA — embedded PDF document viewer).
- Public authorities and professional advisers where required by law.
Where data is transferred outside your jurisdiction (including transfers from Türkiye abroad under KVKK Art. 9, and, for EU/EEA visitors, transfers to Türkiye and the USA under GDPR Chapter V), such transfers rely on your explicit consent collected through our cookie banner and form checkboxes and/or appropriate contractual safeguards with the relevant providers.
5. Cookies
Details of every cookie we use, its purpose, duration and provider, together with how to change your preferences at any time, are set out in our Cookie Policy. Non-essential cookies are only placed after you opt in.
6. Retention
- Quotation and enquiry records (including attached files) where no contract is concluded: up to 3 years.
- Records relating to a concluded commercial relationship: for the periods required by Turkish commercial and tax legislation (typically up to 10 years).
- Job applications: up to 1 year after the recruitment process ends; longer only with your consent for future consideration.
- Consent records (including newsletter consent): for the duration of the consent and, after withdrawal, for up to 3 years as evidence.
- Technical logs: for the periods required by applicable legislation. Cookie lifetimes are listed in the Cookie Policy.
7. Your Rights
Subject to applicable law, you have the right to: request access to your personal data; request rectification or erasure; request restriction of processing; object to processing based on legitimate interests; data portability; withdraw consent at any time without affecting prior processing; and lodge a complaint with a supervisory authority (in Türkiye, the Personal Data Protection Board; EU/EEA residents may also contact their local data protection authority).
To exercise your rights, contact us at [email protected], via registered electronic mail (KEP) at [email protected], or in writing at our registered address. You may also reach us through the website contact forms (including the “Privacy Policy” topic); formal requests follow the channels above. We respond within the statutory period (30 days under KVKK). You may also use our Personal Data Request Form.
8. Changes to this policy
We may update this policy to reflect changes in our processing activities or legal requirements. The current version, with its effective date, is always published on this page.