Data Protection

KVKK Privacy Notice

At ORFA Industrial the security and confidentiality of your personal data is our highest priority. We manage your data transparently and securely under Turkish Law No. 6698 (KVKK).

🔒

Data Controller

ORFA Endüstriyel Mamüller Sanayi ve Ticaret A.Ş.

Nilüfer Ticaret Merkezi, 64. Sk. No:18-20, Nilüfer / Bursa, TÜRKİYE | +90 224 444 6732 | satis@orfa.com.tr

🔒

256-bit SSL

Encryption

🚫

Zero Retention

Card Details Not Held

✅

PCI-DSS

Compliant Infrastructure

👤

Least Privilege

Access Control

🎯 Processing Purposes

Purposes of Processing Personal Data

⚖️

Legal ComplianceYour identity and contact data are processed in invoicing and record-keeping as required by law.

🚚

Orders and DeliveryThe minimum data required is processed to carry out order, invoicing and shipping processes in full.

📞

Customer ServiceContact details are used to manage requests, complaints and support.

🚫

No Data SharingYour data is never transferred to third parties for commercial purposes without your explicit consent.

🎯

Limits on UseYour data is retained only to improve service quality and manage order processes.

💳 Payment Security

Payment and Card Security

The highest security standards apply to payment processing.

🚫

Zero-Retention Policy

Your credit card details are never held or stored on our systems.

🔒

SSL Protection

Payment steps run over 256-bit SSL encryption directly through the bank's infrastructure.

✅

PCI-DSS Compliance

All transactions are handled by payment providers that meet PCI-DSS standards.

🖥️ Technical Security

Technical Security Measures

🔐

Encrypted DatabaseOur databases are protected by strong encryption and regular penetration testing.

👤

Least Privilege PrincipleOnly authorised technical staff can access the data, and every access is logged.

💾

Daily BackupsDaily backups and disaster recovery procedures are active against possible data loss.

⚖️ Your Rights

Your Rights Under KVKK

Under Turkish Law No. 6698 you have full control over your data.

🔍

Access

Learn whether your data is being processed and for what purpose

✏️

Rectification

Request correction of incomplete or inaccurate data

🗑️

Right to Be Forgotten

Request complete erasure of your data

📋

Disclosure

Learn which parties your data has been transferred to

🚫

Objection

Object to results of automated processing and decisions against you

💰

Compensation

Claim compensation if you suffer loss through unlawful processing

Last updated: June 2026 | ORFA Industrial — Information Security Team

To Exercise Your Rights

You may submit any request or application regarding your personal data in writing.

Applications are answered within 30 days.

✉️ satis@orfa.com.tr — KVKK Application