Privacy Notice (KVKK / GDPR)

Data controller: Cff Kimyevi Maddeler İthalat İhracat ve Ticaret A.Ş. MERSİS No.: 0820066248300001 Trade Registry No.: 285032-5 (Istanbul Trade Registry) Tax No.: 8200662483 (Maslak Tax Office) Address: Maslak Mah. AOS 55. Sk. 42 Maslak B Blok No: 4, Int. No: 711, Sarıyer / Istanbul, Türkiye Email: cff@cff.com.tr Phone: +90 212 265 06 19

We process the following categories of personal data collected via our contact form, quote / sample request form and custom formulation form:

• Identity: full name, title.
• Contact: email address, phone number, business address.
• Professional: company, role, country.
• Request content: product and application details, sample shipping address and quantity, current product/category, improvement goals, critical technical specifications, expected volumes.
• Transaction security: form submission IP address and timestamp (where applicable in server logs).

Your personal data is processed solely for the following purposes:

• Evaluating and responding to your quote, sample and custom formulation requests.
• Conducting pre-contractual negotiations and establishing a commercial relationship.
• Fulfilment of legal obligations (tax, commercial, import/export regulations).
• Improving service quality and maintaining customer communication.
• Sending commercial electronic messages (only where you give separate, explicit consent).

Under KVKK Article 5(2) the processing is based on:

• Necessity for the conclusion or performance of a contract (quote, sample, formulation processes).
• Compliance with a legal obligation.
• Our legitimate interest (customer communication, business operations).
• Your explicit consent (for commercial electronic messages).

For EU/EEA residents, the applicable GDPR legal bases are Art. 6(1)(b) (pre-contract / contract performance), Art. 6(1)(f) (legitimate interest) and Art. 6(1)(a) (explicit consent for marketing).

Your personal data may be shared only to the extent strictly necessary for service delivery and under confidentiality obligations, with:

• Suppliers and manufacturers relevant to your request (e.g. the manufacturer of a specific sample-listed product).
• Our email, hosting and infrastructure service providers.
• Competent public authorities where legally required.

For any cross-border transfer, we comply with KVKK Article 9 — obtaining explicit consent where required or applying appropriate safeguards (e.g. standard contractual clauses).

Personal data is collected directly from you via the contact, quote, sample and custom formulation forms on our website. Where you contact us by phone or email, data is collected via that channel.

We retain your personal data only for as long as the processing purpose requires. If no commercial relationship is established, request data is deleted, destroyed or anonymised within 2 years. Where a commercial relationship is established, retention periods mandated by tax, trade and contract law (generally 10 years) apply.

Under KVKK Article 11 you have the right to:

• Learn whether your personal data is processed.
• Request information if it has been processed.
• Learn the purpose of processing and whether your data is used in accordance with that purpose.
• Know the third parties to whom your data is transferred (in Türkiye or abroad).
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of your data.
• Request notification of correction / deletion / destruction to third parties.
• Object to results arising from automated analysis of your data.
• Claim compensation for damage arising from unlawful processing.

If you are an EU/EEA resident, under GDPR you additionally have the rights to data portability, restriction of processing and lodging a complaint with your local supervisory authority.

To exercise your rights under the Communique on the Principles and Procedures for the Application to the Data Controller, you can submit your request, together with identifying documents, via either channel below:

• Email: cff@cff.com.tr (subject: KVKK Application)
• Post: Maslak Mah. AOS 55. Sk. 42 Maslak B Blok No: 4, Int. No: 711, Sarıyer / Istanbul, Türkiye

Your application will be processed free of charge within 30 days. Where fees are stipulated by the Turkish Data Protection Board, the relevant tariff applies.

This notice may be revised to reflect changes in legislation or in our processes. The current version is always published on this page; please refer to the "Last updated" date above.