Privacy Policy and Cookie Notice

This notice explains how personal data is handled when you visit worldwidetradex.com, send us an enquiry or request for quotation (RFQ), write to our chat assistant, or offer us goods or services. It is written for business visitors and is intended to meet the information duties of the Turkish Personal Data Protection Law No. 6698 ("KVKK", Article 10 and the Communiqué on the Procedures and Principles of the Disclosure Obligation) and, where it applies to you, Articles 13 and 14 of the EU General Data Protection Regulation ("GDPR").

1. Who is responsible

The data controller and operator of this website is:

• Company: ARMEKA YAPI SAN. VE TİC. LTD. ŞTİ. (trading as WorldwideTradeX)
• Address: Şerifali Mah. Dergah Sokak No:59A, 34775 Ümraniye, Istanbul, Türkiye
• Tax office / number: VD SARIGAZI 0800704197
• Telephone: +90 505 679 78 03
• Email for all privacy requests: [email protected]
• In business since: 2000

The email address above is our contact point for all data protection questions and requests. We comply with the VERBİS (Data Controllers Registry) registration obligation to the extent it applies to us under the Board's exemption criteria.

2. What personal data we process, and how we collect it

This website is for businesses. We collect only what you type or what your browser sends automatically.

• Enquiry, RFQ and supplier forms. Company name, email address, and, where the form asks for them, your name and telephone number; product or commodity, quantity, delivery terms, origin, price expectations and any free text you write. On the supplier registration form you may also attach a document (PDF, JPG or Word file, up to 15 MB). Please do not include identity documents, health data or other special categories of personal data.
• Contact form. Name, company, email address and your message.
• Chat assistant. The assistant on our pages is an automated AI system, not a person. We process the messages you type (the most recent part of the conversation is sent with each message), the page address and title, the language, and, if you give them, your name, company, telephone number and email address.
• Technical data. IP address, browser and device information, requested pages and time stamps, which arrive with every request to our servers and our content delivery network. If a form submission is rejected by our spam protection, we log the IP address, browser identifier and the first part of the submitted text. The chat service keeps a log of the last message, language, page address, time and IP address, limited to the most recent 2,000 entries. A small script on each page also asks our server which country your request comes from (Cloudflare adds this to the request from your IP address). It is used only to decide whether the analytics choice in section 9 applies to you; the answer is not stored or logged.
• Cookies and similar storage. See section 9.

We receive this data directly from you. Occasionally an enquiry names a colleague or another contact person; in that case we process the details you give us about them to deal with the enquiry, and you should make sure they know.

Providing your company name and email address is necessary for us to answer an enquiry. Everything else is optional.

3. Why we use it, and on what legal basis

• Answering enquiries, preparing quotations and taking steps before a contract. KVKK: necessary for the formation or performance of a contract (Art. 5/2-c) and our legitimate interest (5/2-f). GDPR: steps taken at your request before a contract (Art. 6(1)(b)) and legitimate interests (6(1)(f)).
• Running the chat assistant and passing chat leads to our team. KVKK: legitimate interest (5/2-f). GDPR: legitimate interests (6(1)(f)).
• Keeping the website secure, preventing spam and abuse, keeping service logs. KVKK: legitimate interest (5/2-f). GDPR: legitimate interests (6(1)(f)).
• Commercial, accounting and tax records; answering public authorities. KVKK: expressly provided for by law (5/2-a) and legal obligation (5/2-ç). GDPR: legal obligation (6(1)(c)).
• Establishing, exercising or defending legal claims. KVKK: necessary for a right (5/2-e). GDPR: legitimate interests (6(1)(f)).
• Website analytics, only for visitors in Türkiye and only after you press "Accept". KVKK: explicit consent. GDPR: consent (6(1)(a)) together with the ePrivacy cookie rules. For visitors in any other country no analytics runs at all.

Our legitimate interest is to run a trading business safely and respond efficiently to business enquiries, and we balance it against your rights and expectations. We do not take decisions about you by purely automated means. This website does not run a newsletter. If we ever want to send commercial electronic messages we will do so in line with Law No. 6563 and obtain any consent it requires.

4. Who receives your data

We do not sell personal data. Recipients are limited to:

• Our team at the address above, who read enquiries and chat leads (delivered to our company mailbox).
• Hosting and email providers that run the server and mail service on which the website and our mailbox operate, acting on our instructions.
• Cloudflare, which provides DNS, content delivery and security filtering and therefore sees website requests (including IP addresses) in transit.
• An AI model provider to which chat messages are sent so the assistant can reply (Google's Gemini service; a second provider may be used as a fallback).
• Web analytics provider: Yandex LLC (Russia), which operates Yandex Metrica. Used only for visitors in Türkiye who press "Accept". Yandex processes the data collected by the Metrica tag (such as IP address, pages viewed, clicks and device information) under its own terms and privacy information, and we use the statistics it provides. Visitors in other countries are never sent to Yandex, because the analytics script is not loaded for them.
• Producers, suppliers, logistics and inspection partners, only the details of your enquiry that are needed to obtain a quotation or perform the deal you ask for.
• Professional advisers and public authorities where the law requires or a legal claim makes it necessary.

The Contact page also embeds a Google Maps map; loading that page connects your browser to Google.

5. Transfers abroad

We are based in Türkiye. Several providers above operate internationally, so your data may be processed in other countries, including the United States. Analytics is the only case that involves Russia: it applies only to visitors in Türkiye who press "Accept", and their data then goes to Yandex LLC. Where Turkish law applies we rely on the transfer routes in KVKK Article 9 as amended in 2024 (an adequacy decision, appropriate safeguards such as the Board's standard contract, or the limited exceptions). For people in the EEA or UK, transfers to providers rely on the mechanisms in Chapter V GDPR, such as adequacy decisions, standard contractual clauses or the EU-US Data Privacy Framework, as the provider offers them. When you send an enquiry from outside Türkiye, you are asking us to act, and your data reaches us in Türkiye on that basis. If you decline, or if you are outside Türkiye, no analytics script is loaded and nothing is transferred to the analytics provider. You can withdraw your consent at any time with the "Cookie settings" link in the page footer.

6. How long we keep it

• Enquiries, RFQs, supplier offers and contact messages (including the copy in our mailbox and the short submission log on the server): up to three years after our last contact with you, unless a contract or other commercial relationship arises.
• If a contract or commercial relationship arises: the accounting, tax and commercial records that relate to it (contracts, invoices, commercial correspondence) are kept for the statutory ten years under Article 82 of the Turkish Commercial Code and the Tax Procedure Law.
• Chat assistant leads: the log on our server holds only the most recent 2,000 entries; older entries are overwritten. The lead e-mailed to us is treated like an enquiry (up to three years).
• Spam and security log (IP address, browser identifier, first part of rejected text): entries are deleted automatically after 90 days.
• Cookies and local storage: lifetimes are given in section 9.
• Legal claims: where a dispute or authority request is pending, we keep the data needed until it is resolved.

When a period ends we delete, destroy or anonymise the data.

7. Your rights

Under KVKK Article 11 you may ask us to: learn whether your data is processed; request information about it; learn its purpose and whether it is used accordingly; know the third parties it is transferred to at home or abroad; request correction of incomplete or wrong data; request deletion or destruction under Article 7; ask that these steps be notified to third parties who received the data; object to a result against you produced exclusively by automated analysis; and claim compensation for damage caused by unlawful processing.

Under the GDPR, where it applies, you have the rights of access (Art. 15), rectification (16), erasure (17), restriction (18), notification to recipients (19), data portability (20), objection to processing based on legitimate interests (21), and not to be subject to solely automated decisions (22). Where processing rests on consent, you may withdraw it at any time without affecting earlier processing.

8. How to exercise your rights, and complaints

Write to [email protected] from the address you used with us, or by post to Şerifali Mah. Dergah Sokak No:59A, 34775 Ümraniye, Istanbul, Türkiye, saying which right you wish to use. We may ask for information to confirm your identity, and we reply within thirty days at the latest, normally free of charge; a fee may apply where the request requires a cost, within the limits set by the Board.

If you are not satisfied, you may complain to the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu, www.kvkk.gov.tr), generally after first applying to us, and, if the GDPR applies to you, to the data protection supervisory authority in the EU or EEA country where you live, work or where the issue arose.

9. Cookies and similar technologies

We use as little as possible. The only optional cookies are analytics cookies, and they are used only for visitors in Türkiye. For those visitors the cookie banner offers Accept or Decline, and the site works fully either way. Visitors elsewhere see no banner because no analytics or other optional cookies are used for them.

• Session cookie (PHPSESSID). Strictly necessary. It is set only when you open or submit a form, to protect forms against forgery (CSRF). It is deleted when you close the browser.
• Your cookie choice. Saved in your browser's local storage under "cookie_consent" so the banner does not return. It stays on your device until you clear it and is not sent to us.
• Chat window memory. A small browser session-storage entry ("wwt_chat_opened") remembers that the chat window has already opened during your visit.
• Analytics (Yandex Metrica, Yandex LLC). Loaded only for visitors in Türkiye, and only after you press Accept; before that, and if you decline, the script is not requested at all. It records page views, clicks, links followed and bounce behaviour and may set identifier cookies such as _ym_uid and _ym_d, which the provider states last up to one year. We have not enabled session replay.

To change or withdraw your decision at any time, use the "Cookie settings" link in the footer (shown to visitors in Türkiye). It clears your saved choice and the analytics cookies of this site, shows the banner again and, if analytics was running, reloads the page so that it stops. Deleting this site's data in your browser settings has the same effect. Fonts and images on our pages are served from our own domain. The only third-party content on a regular page is the Google Maps embed on the Contact page.

10. Children

The website and our services are for businesses and are not directed at anyone under 18. We do not knowingly collect children's data.

11. Security

The site is served over HTTPS, forms use anti-forgery tokens and spam protection, and access to enquiries is limited to people who need them. No online system is completely secure; do not send us sensitive information you do not need to share.

12. Changes

We will update this notice when our processing changes and show the date at the top. Material changes are announced on this page. Our Terms also apply to the use of this website.