Privacy Policy

Introduction and Scope

This Privacy Policy explains how your personal data is collected, for what purposes it is processed, with whom it is shared and what rights you have in this process when you visit the www.stellaaks.com website operated by STELLA ALÜMİNYUM LTD. ŞTİ. ("Stella AKS", the "Company", "we"), or when you contact us through the forms on the site.

Stella AKS is a company operating in the field of architectural joinery hardware and aluminium system solutions, and this site is a B2B (business-to-business) catalogue and promotional platform intended to present our products and services. The site does not have a membership or account creation system; it is open to everyone, and no payment is collected through the site.

We process your personal data in the capacity of data controller, in accordance with Turkish Personal Data Protection Law No. 6698 ("KVKK") and the relevant secondary legislation. This policy applies to all of our relevant visitors and business partners.

Data Controller: STELLA ALÜMİNYUM LTD. ŞTİ.
Address: İvedik OSB Mah. 1532. Sok. No: 9/1, Yenimahalle / Ankara
Tax Office / No: İvedik VD — 781 1005 684
E-mail: info@stellaaks.com
Phone: +90 542 120 66 37

Which Data We Collect

The personal data we collect on our site consists solely of the information you provide to us and the limited data that is automatically generated during the technical operation of the site. The categories of data we collect are as follows:

Contact, quotation, sample and technical support form data: Full name, company name, e-mail address, phone number, message content and, if any, files or sections/drawings you submit.
Technical document (catalogue / drawing) request form data: Full name, company name, e-mail address and phone number.
Automatic / technical data: IP address, browser and device information (user-agent), the time of access to and interaction with the site, along with security and error records (logs).
Data collected via cookies: Session and security information, the cookie preference record and, where your explicit consent exists, statistical and marketing data relating to the use of the site.

Our forms only request the information necessary to fulfil your request. We kindly ask that you do not send us sensitive or unnecessary data such as payment card information, identity/health data or location data; our site does not collect or process such data.

The processing of your quotation, sample, technical support and document requests is not conditional upon your explicit consent; it is based on the legal grounds of the establishment/performance of a contract and our legitimate interest. By submitting the form, you confirm that you have read this Privacy Policy. Explicit consent is only sought for (optional) commercial electronic message/marketing permission and for analytics and marketing cookies; these preferences are given optionally through separate consent checkboxes in the form.

Why and How We Use the Data

We process your personal data only for specific, explicit and legitimate purposes. Our main processing purposes are as follows:

Assessing and fulfilling your quotation, sample, technical support and document requests, and communicating with you within this scope.
Promoting our products and services and conducting the business relationship.
Operating the website securely, preventing misuse and attacks, and keeping error and incident records.
Fulfilling our legal obligations arising from the legislation to which we are subject.
Based on your explicit consent, carrying out analytical measurement relating to site usage and conducting marketing/remarketing activities.

We carry out these processing activities on the basis of the following legal grounds set out in Articles 5 and 6 of the KVKK:

Establishment or performance of a contract: Fulfilling your quotation, sample and support requests, and providing communication relating to pre-contractual and contractual processes.
Legitimate interest of the data controller: Effective management of requests, maintaining the business relationship and ensuring the security of the site.
Fulfilment of a legal obligation: Storing records and logs that are required to be kept under the legislation.
Explicit consent: Running analytics and marketing cookies and sending you commercial electronic messages (promotional/marketing messages). These activities are only carried out where your explicit consent exists, and you may withdraw your consent at any time.

Cookies

Our website makes use of cookies in order to provide the service and improve your experience. We can summarise the cookies we use in three groups according to their functions:

Strictly necessary cookies: These are required for session management, security (CSRF protection on form submissions) and recording your cookie preference. Strictly necessary cookies are technically required for the Site to be able to provide the service you request and are used without seeking explicit consent, in accordance with the KVKK Cookie Practices Guide.
Analytics cookies: Google Analytics 4 is used to measure statistics relating to site usage. These cookies only run with your explicit consent.
Marketing cookies: These are used for Google Ads and remarketing activities. These cookies likewise only run with your explicit consent.

In addition, Google Search Console verification is performed in order to monitor our site's search engine performance.

Analytics and marketing cookies do not activate unless you give consent on your first visit to the site; you can update your cookie preferences at any time. For detailed information on the types, durations and management of cookies, please review our Cookie Policy.

We do not sell your personal data and we do not share it with third parties beyond the purposes set out in this policy. Your data may be shared, only in the following cases and to the extent necessary, in accordance with the conditions set out in Articles 8 and 9 of the KVKK:

Authorised suppliers and solution partners: With our business partners from whom we obtain hosting, infrastructure, e-mail and similar services and whom we hold subject to confidentiality and data security obligations, only to the extent required by the service.
Analytics and advertising service providers: With Google (Google Analytics 4, Google Ads; as well as Google Search Console verification for search performance) within the scope of analytics and marketing activities dependent on your explicit consent.
Legal authorities: With the relevant official institutions and judicial authorities, in the event of the fulfilment of an obligation arising from the legislation or of lawful requests from authorised public institutions and organisations.

Transfer Abroad

Due to the analytics and marketing tools we use (Google services), some of your data may, within the scope of these activities based on your explicit consent, be transferred to servers located abroad. Such transfers are carried out within the framework of the KVKK provisions on the transfer of data abroad, on the basis of your explicit consent and/or the appropriate transfer mechanisms prescribed by the legislation. If you do not approve the cookies that require explicit consent, the transfers abroad within this scope will likewise not take place.

Data Security

We apply industry-accepted administrative and technical measures to ensure the security of your personal data. These measures include the following:

Protecting the communication between the site and visitors with HTTPS/SSL encryption.
Restricting access to personal data solely to authorised persons who need it for their duties (access restriction).
Using appropriate encryption and security methods in the storage and transmission of data.
Monitoring security and error records and taking precautions against possible threats.

Despite all the measures taken, we would like to remind you that no transmission or storage method on the internet can be guaranteed to be 100% secure; however, we continuously exercise the necessary care to protect your data.

Retention Periods

We retain your personal data only for the period necessary for the purpose for which it is processed and for the retention periods prescribed by the legislation:

Request and contact data: Retained for the period required by the execution of the relevant request (quotation, sample, support, document) and the business relationship, and for the period prescribed by the retention obligations arising from the legislation.
Log (record) data: Retained for the periods prescribed in the relevant legislation.
Cookie data: Varies according to the type of cookie; session cookies are deleted when you close your browser, whereas persistent cookies remain on your device for their defined lifetimes.

Personal data whose retention period has expired or whose processing purpose has ceased is deleted, destroyed or anonymised in accordance with the legislation.

Your Rights

Pursuant to Article 11 of the KVKK, as a data subject you may exercise the following rights by applying to our Company:

To learn whether your personal data is being processed.
To request information if your personal data has been processed.
To learn the purpose of processing your personal data and whether it is used in accordance with its purpose.
To know the third parties, domestic or abroad, to whom your personal data is transferred.
To request the correction of your personal data if it has been processed incompletely or incorrectly.
To request the deletion or destruction of your personal data within the framework of the conditions prescribed in the KVKK and the relevant legislation.
To request that correction, deletion and destruction operations be notified to the third parties to whom your personal data has been transferred.
To object to the emergence of a result against you as a consequence of the analysis of your processed data exclusively through automated systems.
To request compensation for the damage in the event that you suffer damage due to the unlawful processing of your personal data.

You may submit your requests relating to these rights by e-mail to info@stellaaks.com or in writing to our Company address (İvedik OSB Mah. 1532. Sok. No: 9/1, Yenimahalle / Ankara). Your applications are concluded within the framework of the principles set out in the Communiqué on the Procedures and Principles of Application to the Data Controller and within the periods prescribed in the legislation.

For detailed explanations regarding the processing of your personal data, you may also review our KVKK Privacy Notice.

Children's Privacy

Our website and the services we offer are intended for businesses and for persons acting for professional/commercial purposes; they are not directed at children, and we do not knowingly collect personal data from children. If you notice that personal data belonging to a child has been submitted to us without consent, please contact us; we will delete the relevant data in accordance with the legislation following the necessary review.

Policy Changes

We may update this Privacy Policy from time to time in line with changes in legislation, updates in our business processes or developments in our services. The current text is always published on this page; for significant changes, we provide notice by updating the effective date. We recommend that you periodically review this page before continuing to use our site.

Contact

For any questions, requests and applications regarding this Privacy Policy or the processing of your personal data, you can contact us through the following channels:

Company: STELLA ALÜMİNYUM LTD. ŞTİ.
Address: İvedik OSB Mah. 1532. Sok. No: 9/1, Yenimahalle / Ankara
E-mail: info@stellaaks.com
Phone: +90 542 120 66 37
Web: www.stellaaks.com

Effective date: July 2026