Data controller
Eco Agri Tarım San. ve Tic. Ltd. Şti.
Address: Yenimahalle Mahallesi, 3383. Sokak, Gündoğan Kaşıkçı Apartmanı, No: 23, Floor: 2, Apartment: 2, Atakum / Samsun, Türkiye.
General contact: info@ecoagri.com.tr. The company does not have a registered electronic mail (KEP) address.
Data collected and collection method
The web contact form requires a full name, email address and message; company name, phone number, service of interest and province or region are optional. Information is collected electronically when you complete and submit the form over HTTPS. Please do not share identity documents, special-category personal data or unnecessary information about other people. The form does not accept file uploads.
Security measures use a session identifier, CSRF verification information and timing, a request identifier, a keyed content digest to detect duplicate submissions, processing status and attempt times. A content digest does not guarantee absolute anonymity. A hidden honeypot field helps identify automated abuse: populated values are rejected and are not included in email messages.
To prevent abuse, we use a network identifier derived from the connection IP address using a secret key, together with attempt timestamps. The application’s rate-limit table does not store raw IP addresses, messages or email addresses. Attempts within the preceding 24 hours are included in the limits; expired records are deleted during the next rate-limit check. These identifiers are not treated as absolutely anonymous data.
Purposes and legal grounds
Processing aims to assess and respond to your enquiry, communicate about the requested service or quotation and, where applicable, conduct pre-contract discussions. Processing directly related and necessary to entering into or performing a contract is assessed under Article 5(2)(c) of the KVKK. Responding to general questions and technical security are assessed under Article 5(2)(f) where necessity and the balancing of your rights are satisfied. Not every enquiry constitutes the formation of a contract.
Records necessary to establish, exercise or defend a specific right may be processed under Article 5(2)(e). Where a statutory record-keeping obligation applies, the relevant specific provision is also considered. This communication process is not tied to mandatory marketing permission; this notice is not consent to marketing.
Recipients and data transfers
An accepted enquiry is sent to the corporate mailbox info@ecoagri.com.tr and reviewed by company personnel authorised for their duties. Hosting and corporate email services are provided by TurkTicaret. Access or disclosure for maintenance, support or legally authorised authorities is considered only where genuinely needed and legally permitted.
According to the provider, primary hosting and email data are stored in its Türkiye / Tuzla data centre. This statement is not a verified guarantee of location or transfer arrangements for other technical services, backups or subprocessors. Outlook is used solely as an email client; Microsoft 365 email hosting is not assumed. Where an international transfer takes place, the current conditions of Article 9 of the KVKK and appropriate safeguards must be assessed separately.
Retention and disposal
Enquiries that do not develop into a contract or an ongoing business relationship are retained for no more than 12 months after resolution, and deleted earlier if the need ends sooner. This period is the company’s chosen policy; it must not be interpreted as a universal mandatory 12-month period imposed by the KVKK.
Contractual records, specific legal obligations and dispute-related records are assessed separately. The retention and cleanup policies for email backups, hosting logs and PHP session data must be verified separately; they are not automatically retained for 12 months. When the reason for processing ceases, data is deleted, destroyed or anonymised, subject to applicable obligations.
Sessions and technical security
The application does not store message content in a database or separate file. Submitted content enters the SMTP and corporate email process. The session store contains security and duplicate-request controls, not message bodies. Provider access, email and session logs and backups are assessed separately from these application records.
The site does not use advertising or visitor analytics cookies. A form security request may initiate the necessary HttpOnly, Secure, SameSite=Strict session cookie. The CSRF token expires after 20 minutes; this is not an automatic deletion period for all session or email records. Session retention and cleanup depend on the provider’s actual settings.
Your rights under the KVKK
Under Article 11 of the KVKK, you may obtain information about whether and how your data is processed, the purposes of processing and whether it is used in accordance with those purposes, and recipients within Türkiye or abroad. You may request correction of inaccurate or incomplete information; deletion or destruction where the legal conditions are met; and notification of these actions to recipients. You may object to a result against you arising solely from automated analysis and seek compensation for damage caused by unlawful processing.
How to exercise your rights
You may send a written request concerning your rights to the company address above. Methods recognised by law, such as a secure electronic signature, mobile signature or an email address previously registered in the company’s systems, may be used subject to their applicable conditions. The company does not have a KEP address.
info@ecoagri.com.tr is the general contact address. An email sent from any address does not automatically constitute a valid KVKK data subject request. Proportionate identity verification and the applicable request procedure are followed; identity documents should not be attached to the ordinary contact form. Requests are handled as soon as possible and within 30 days at the latest, depending on their nature; applicable fee and response conditions are addressed in accordance with the legislation.
Data subject rights under the KVKK ↗
Cookie use.
This site does not use advertising, marketing or visitor analytics cookies. Fonts, photographs and videos are served from our own site; no third-party tracking tools are used.
When a contact form submission is attempted, request verification and abuse prevention may use the __Host-ecoagri_contact may be used as an essential session cookie. Provided by Eco Agri Tarım San. ve Tic. Ltd. Şti., this first-party cookie has no persistent expiry date and is valid for the browser session. Browser session restoration may extend this period.
You can delete or block cookies in your browser settings. Blocking them may affect the form’s security verification.