Opening Systems
Hardware & Accessories
Privacy notice on the processing of personal data prepared by STELLA ALÜMİNYUM LTD. ŞTİ. within the scope of the Turkish Personal Data Protection Law No. 6698 (KVKK).
This Privacy Notice has been prepared to inform you, pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and within the scope of the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation, regarding the processing of your personal data obtained through the www.stellaaks.com website (the "Site") by STELLA ALÜMİNYUM LTD. ŞTİ. (the "Company", "Stella AKS" or the "Data Controller"), in accordance with the KVKK and other relevant legislation.
The Site is the business-to-business (B2B) catalogue and promotional platform of our Company, which operates in the field of architectural joinery hardware and aluminium system solutions. The Site has no membership/account system or payment processing, and is open to access by everyone.
Under the KVKK, your personal data is processed by our Company as the data controller, whose identity and contact details are set out below:
The following personal data of yours is processed through the Site via the channels indicated and only to the extent limited to the relevant processing purposes:
1. Data submitted by you through forms
When you complete the contact, quote request, sample request and technical support forms on the Site; your name and surname, company name, email address, phone number, message/request content, and any attachments such as files or technical sections/drawings you include with your request are processed.
When you complete the technical document (catalogue/drawing) request form, your name and surname, company name, email address and phone number are processed.
The processing of your quote, sample, technical support and technical document requests is based on the legal grounds of the establishment/performance of a contract and our legitimate interest, without requiring your explicit consent as a precondition. By submitting the form, you confirm that you have read this Privacy Notice. Explicit consent is required only for (optional) commercial electronic message/marketing permission and for analytical and marketing cookies; these preferences are given optionally, via separate consent checkboxes on the form.
2. Technical data collected automatically
When you visit the Site, our systems automatically process your IP address, browser and device information (user-agent), records relating to the time of access and transactions, and security and error (log) records. This data is collected for the purpose of the secure and proper operation of the Site and the fulfilment of our legal obligations.
3. Data collected through cookies
The Site uses the following cookie categories:
Analytical and marketing cookies are activated only with your explicit consent. You can change or withdraw your cookie preferences at any time via the cookie management tool on the Site.
Our Company does not process special categories of personal data such as health, location or payment/financial data, or personal data in these categories, through the Site.
Your personal data is processed for the following purposes:
Your personal data is processed on the basis of the following legal grounds set out in Articles 5 and 6 of the KVKK:
Your personal data may be transferred to the following recipient groups, subject to the conditions set out in Articles 8 and 9 of the KVKK and limited to the purposes stated above:
Domestic transfer: Your data may be transferred only to our authorised suppliers and solution partners from whom we receive services (for example, our hosting/infrastructure, email and IT service providers), and, where required by a legal obligation, to competent public institutions and organisations and judicial/administrative authorities. Transfers are limited only to the extent required by the relevant service or obligation.
International transfer: Within the scope of analytical and marketing cookies that operate based on your explicit consent, limited technical data is processed through Google (Google Analytics 4, Google Ads and Google Search Console) services, and international transfer may take place within this scope. This international transfer is carried out in accordance with Article 9 of the KVKK, based on your explicit consent and/or the appropriate transfer mechanisms envisaged by the legislation. If you do not give explicit consent for analytical and marketing cookies, this transfer is not carried out.
Your personal data is retained for the periods necessary for the purpose for which it is processed and as envisaged in the relevant legislation:
In accordance with Article 12 of the KVKK, our Company takes all necessary technical and administrative measures to ensure an appropriate level of security, in order to prevent the unlawful processing of and unlawful access to personal data and to ensure the safekeeping of the data. Within this scope, measures such as encrypted transmission of data (SSL/TLS), access controls and authorisation against unauthorised access, security verifications on form submissions (CSRF protection), keeping security and error records, up-to-date software and infrastructure security measures, and confidentiality and data security undertakings with our data-processing service providers are implemented.
Under Article 11 of the KVKK, by applying to our Company you have the following rights in relation to your personal data:
You can submit your requests regarding the rights listed above to our Company through the following channels, in accordance with the procedures set out in the Communiqué on the Procedures and Principles of Application to the Data Controller:
Your application must include your name and surname, your signature if the application is in writing, the subject of your request, and your contact details (address, phone, email) through which you can be reached. Depending on the nature of your request, our Company will conclude your application free of charge as soon as possible and within thirty days at the latest. However, if the operation additionally requires a cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. You may be required to provide information and documents verifying your identity so that your application can be evaluated.
Effective date: July 2026