Personal Data Notice (KVKK)

Last updated: 2026-10-11

Under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), HammaddePazari Teknoloji A.Ş. ("HammaddePazari"), as data controller, informs you as follows. Users outside Türkiye should also read our Privacy Policy.

1. Data controller

HammaddePazari Teknoloji A.Ş.
Address: İstanbul, Türkiye
Tax office / no.: /
E-mail: destek@hammadde.antwebsoft.com

2. Personal data processed

Identity: name, surname, job title
Contact: business e-mail, phone, company address
Customer transactions: listings, requests, offers, messages, contracts, invoices
Finance: bank account (IBAN), payment records
Legal: company verification documents, dispute records
Transaction security: IP address, sign-in logs, device/browser details, 2FA status
Marketing: newsletter and matching-request alert preferences (only with explicit consent)

3. Purposes

Concluding and performing the membership agreement and providing Platform services
Company verification (KYC), preventing fraud and abuse
Running information security processes
Invoicing, accounting and tax obligations
Providing evidence in disputes between parties
Informing competent authorities
With your explicit consent, sending market insights and matching requests

4. Legal grounds (KVKK Art. 5)

Directly related to concluding or performing a contract (Art. 5/2-c)
Compliance with a legal obligation (Art. 5/2-ç)
Establishing, exercising or protecting a right (Art. 5/2-e)
Legitimate interest, provided it does not harm fundamental rights (Art. 5/2-f)
Explicit consent for marketing communication (Art. 5/1)

5. Transfers

Your data may be transferred, limited to the purposes above, to other Members you trade with (contact details only after a contract is signed), hosting and e-mail providers, payment institutions (iyzico, PayTR, Stripe, PayPal), bot protection (Cloudflare) and competent public authorities. Transfers to providers abroad are made in accordance with Article 9 of the KVKK.

6. Collection method

Data is collected electronically through membership and company forms, uploaded documents, in-platform actions and cookies, by automated or partly automated means.

7. Retention

Contracts, invoices and commercial records are kept for 10 years under the Turkish Commercial Code and Tax Procedure Law; security logs for 2 years. Afterwards data is deleted, destroyed or anonymised.

8. Your rights (KVKK Art. 11)

To learn whether your data is processed and request information about it
To learn the purpose of processing and whether data is used accordingly
To know the third parties to whom data is transferred in Türkiye or abroad
To request rectification of incomplete or inaccurate data
To request erasure or destruction under the conditions of Article 7
To request that rectification and erasure be notified to third parties
To object to a result against you arising from automated analysis
To claim compensation for damage caused by unlawful processing

Send your request with information verifying your identity to destek@hammadde.antwebsoft.com or to the postal address above. Requests are answered free of charge within 30 days.