Last updated: 2 October 2026
This policy explains how ULPATEK FİLTRE TİCARET SANAYİ A.Ş. processes personal data when you visit www.ulpatek.com or contact us through it. We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, for visitors in the European Economic Area, the United Kingdom and Switzerland, with the principles of the EU General Data Protection Regulation (“GDPR”). This policy covers this website only.
1. Data controller
ULPATEK FİLTRE TİCARET SANAYİ A.Ş.
Yassıören Mahallesi Hadımköy Caddesi No: 158, 34555 Arnavutköy / Istanbul, Türkiye
Phone: +90 212 623 03 00 · Fax: +90 212 623 03 03
Email: info@ulpatek.com
Registered electronic mail (KEP): ulpatekfiltre@hs01.kep.tr
MERSIS No: 0887055082700011
2. Contact form
Data: your name, email address, phone number (optional), the subject and content of your message and anything else you include in it (for example company, product or project details); the date and time of submission.
Purpose: to review and answer your enquiry or quotation request, to inform you about our products and services, to prepare offers and to keep in touch about your request.
Legal basis: steps taken at your request before entering into a contract and the performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)), and our legitimate interest in answering enquiries (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
How it is delivered: the message is sent to our company mailbox through Google’s email service (Gmail), which we use for sending website email; a copy of the sent message is kept in that sending account and in our mailbox. Google reCAPTCHA protects the form against abuse (see sections 4 and 5). Form content is not stored in the website database.
3. Website visits and server logs
When you visit the site, technical information sent by your browser (IP address, date and time, page requested, browser and device information, referring page) is logged on our hosting provider’s servers in Türkiye (Istanbul) to run and secure the site and to fix errors. Legal basis: our legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
4. Cookies and similar technologies
Cookies are small text files that a website stores in your browser. We always use strictly necessary cookies; analytics and marketing cookies are used only if you consent. You can change your choice or withdraw your consent at any time with the “Cookie settings” link at the bottom of every page, and you can delete or block cookies in your browser settings.
| Cookie / storage | Provider | Purpose | Duration |
|---|---|---|---|
| Strictly necessary and functional (legitimate interest; no consent required) | |||
| wp-wpml_current_language | ulpatek.com | Remembers the language you chose | Session |
| wp_consent_* | ulpatek.com | Stores your cookie choice | 6 months |
| _GRECAPTCHA; _grecaptcha in browser storage | Google (reCAPTCHA) | Protects the contact form from bots and spam (pages with a form) | 6 months |
| Browser storage: wpEmojiSettingsSupports, pdfjs.history | ulpatek.com | Checks emoji support; remembers your page in the PDF catalogue | Session / until you clear it |
| Analytics (your consent; KVKK Art. 5/1, GDPR Art. 6(1)(a)) | |||
| _ga, _ga_3QNBD9BB4H | Google Analytics 4 | Visit statistics: which pages are used and how | Up to 2 years |
| Marketing (your consent; KVKK Art. 5/1, GDPR Art. 6(1)(a)) | |||
| _gcl_au and advertising cookies on Google domains | Google Ads | Measuring the results of our ads (for example a form submission) and showing relevant ads | 90 days; Google cookies as set by Google |
If you do not consent, Google tags do not store analytics or advertising cookies on your device and ads are not personalised; Google receives only limited, cookieless measurement signals (Google Consent Mode).
5. Third-party services used on our pages
Some page elements are loaded from third-party servers. When a page opens, your browser connects to these servers, so your IP address and browser information reach the provider concerned:
- Google LLC / Google Ireland Ltd.: Google reCAPTCHA (contact form), Google Maps and map fonts (contact page), Google Analytics and Google Ads (subject to your consent), Gmail email delivery.
- Buttonizer B.V. (Netherlands): the quick contact buttons on the page.
- Cloudflare, Inc. (cdnjs): icon files used by those buttons.
- amCharts: the map library of the export map on the About page.
When you follow our links to YouTube, LinkedIn or similar sites, their own privacy policies apply.
6. Recipients and international transfers
Personal data may be shared, only for the purposes above, with the hosting, email, security and analytics providers we use, and with public authorities where the law requires it. The servers of Google, Buttonizer, Cloudflare and amCharts may be located outside Türkiye, including in the United States; such transfers are carried out in line with Article 9 of the KVKK and, where the GDPR applies, with Chapter V of the GDPR. We do not sell personal data.
7. Retention
We keep personal data for as long as the purpose requires and for the periods set by applicable law (for example the Turkish Commercial Code); afterwards the data is deleted, destroyed or anonymised. Cookie durations are shown in the table above.
8. Your rights
Under Article 11 of the KVKK you have the right to learn whether your personal data is processed and to request information about it; to learn the purpose of processing and whether data is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data and deletion or destruction under Article 7 of the KVKK, and notification of these steps to recipients; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests, and the right to withdraw consent at any time without affecting earlier processing. You may lodge a complaint with the data protection authority of your country of residence or work.
9. How to contact us about your data
Please send your request in writing to the address above, by registered electronic mail (KEP) to ulpatekfiltre@hs01.kep.tr, or by email to info@ulpatek.com from the email address you previously gave us, with information that allows us to identify you. We answer free of charge within thirty days at the latest; if the request involves an additional cost, the fee set by the Turkish Personal Data Protection Board may apply. If we reject your request, if you find our answer insufficient or if we do not answer in time, you may complain to the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
10. Changes
We update this policy when the data processing on our website changes. The current version is always available on this page.