Privacy notice

Data controller

The OGAR Defence brand is operated by Clinimate Medikal Tekstil Sanayi Ticaret Limited Şirketi, which is the data controller for your personal data.

• Address: Halil Rıfat Paşa Mah. Yüzer Havuz Sk. Perpa Tic. Mer. A Blok No:1 İç Kapı No:1613, Şişli / İstanbul, Türkiye
• Email: info@ogardefence.com
• Phone: +90 552 745 12 42

Data we collect

Through the quote and contact forms: full name, company, business email, country, and — if you provide them — phone number, target delivery date, destination country, the items and quantities you request, your requirement description, attached files and how you found us.

For security: a one-way, salted hash of your IP address, used to limit repeated submissions. The IP address itself is not stored with your request. The web server keeps standard access logs (IP address, time, page requested) for security and troubleshooting.

Only with your consent: the website or campaign that brought you to the site (referrer and UTM parameters), stored in your browser and sent with your request. See the cookie notice.

If you write to us by email, the information in your email is also processed.

Purposes and legal bases

Purpose	Legal basis
Answering your request, preparing a quotation and pre-contract correspondence	Contract — KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)
Keeping commercial records	Legal obligation — KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)
Preventing abuse of the forms and keeping systems secure	Legitimate interest — KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)
Measuring where visits come from and how the site and forms are used, with Google Analytics (only if you allow it)	Consent — KVKK Art. 5(1); GDPR Art. 6(1)(a)

We do not sell personal data, we do not use it for advertising, and we do not send names, email addresses, phone numbers or file contents to analytics services. No automated decision-making or profiling takes place.

Retention

• Requests that do not lead to a quotation or contract, and their attachments, are kept for 2 years from the request date and then deleted or anonymised.
• Records of requests that lead to a quotation or contract are kept for 10 years, the period the Turkish Commercial Code sets for commercial books and documents.
• IP hashes used for rate limiting are deleted automatically within 24 hours.

Recipients and service providers

Only authorised staff handling requests can access your data. The following providers are used to run the service:

Provider	Service	Location
Markahost Telekomünikasyon ve Ticaret Ltd. Şti.	Server hosting (requests and attachments are stored here)	Türkiye
Cloudflare, Inc.	Domain name (DNS), content delivery and security, spam protection on the forms (Turnstile), email routing and sending	Global network, USA-based
Google LLC	Gmail mailbox where notifications and correspondence are received; Google Analytics visit statistics (only with your consent)	USA-based

Because Cloudflare and Google may process data outside Türkiye and the EU, using them can involve international transfers. These take place under the conditions of Article 9 KVKK and the providers’ contractual safeguards (for EU data, the EU Standard Contractual Clauses or the EU–US Data Privacy Framework). Data may be disclosed to public authorities where the law requires it.

Your rights

Under Article 11 KVKK — and, where applicable, the GDPR — you can ask whether your data is processed, request access, correction or deletion, learn the purposes of processing and the recipients, object to processing, withdraw consent at any time, and claim compensation for damage caused by unlawful processing.

Send your request to info@ogardefence.com or in writing to the address above. Requests are answered free of charge within 30 days. You also have the right to complain to the Turkish Personal Data Protection Authority (KVKK Kurulu) or, in the EU, to your local supervisory authority.