Privacy
Policy.

Who we are

HYDROLAB is operated by ADENİZ GIDA KİMYA VE KOZMETİK SANAYİ TİCARET ANONİM ŞİRKETİ (the “Company”, “HYDROLAB”, “we”, “us” or “our”).

For the purposes of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), the Company acts as the data controller in relation to personal data processed through this website and our related commercial activities.

Personal data we may collect

Depending on how you use HYDROLAB, we may process the following categories of personal data:

• Identity information such as your name and surname.
• Contact information such as your email address, telephone number, billing address and delivery address.
• Order and transaction information, including products purchased, order history, invoice information and delivery details.
• Payment-related transaction information. Payment card details may be processed directly by authorised payment service providers and are not necessarily stored by HYDROLAB.
• Customer service information, including messages, requests, complaints and other correspondence with us.
• Marketing preferences, newsletter subscriptions and communication preferences.
• Technical and usage information such as IP address, browser type, device information, operating system, pages viewed, session information and cookie data.
• Information necessary for fraud prevention, transaction security and protection of our website and services.

Why we use personal data

We may process personal data for purposes including:

• Processing, confirming and fulfilling orders.
• Managing payments, refunds, invoicing and accounting.
• Preparing and delivering products to customers.
• Providing customer support and responding to enquiries.
• Managing returns, complaints and after-sales processes.
• Operating, maintaining and improving our website.
• Detecting and preventing fraudulent or unauthorised transactions and protecting website security.
• Fulfilling our legal, regulatory, tax, accounting and record-keeping obligations.
• Establishing, exercising or protecting legal rights.
• Measuring website performance and understanding how our services are used.
• Sending marketing communications where permitted by law and where the required consent or other lawful basis exists.

Legal basis for processing

Personal data is processed in accordance with applicable data protection legislation and, where relevant, on one or more of the following legal grounds:

• Processing is necessary for the establishment or performance of a contract with you.
• Processing is necessary for the Company to comply with its legal obligations.
• Processing is necessary for the establishment, exercise or protection of a legal right.
• Processing is necessary for our legitimate interests, provided that your fundamental rights and freedoms are not adversely affected.
• Your explicit consent, where applicable and legally required.

Where processing is based on explicit consent, you may withdraw that consent in accordance with applicable law. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

How we collect personal data

Personal data may be collected electronically when you visit the website, create or submit an order, complete a form, subscribe to communications, contact us, interact with website functionality or use cookies and similar technologies.

We may also receive information from service providers that support payment processing, delivery, website operations, customer service, fraud prevention or other services connected with your transaction.

Who we may share data with

Where necessary for the purposes described in this Policy, personal data may be shared with appropriate recipient groups including:

• Payment and banking service providers.
• Cargo, logistics, fulfilment and delivery providers.
• Website hosting, infrastructure and information technology service providers.
• Customer support and communication service providers.
• Accounting, legal, audit and other professional advisers.
• Analytics, advertising and marketing service providers where their use is legally permitted.
• Authorised public authorities, courts and regulatory bodies where disclosure is legally required.

Personal data is shared only to the extent reasonably necessary for the relevant purpose and subject to applicable legal requirements.

International transfers

Some technology, hosting, communication, analytics or other service providers may operate infrastructure outside Türkiye.

Where personal data is transferred outside Türkiye, such transfers will be carried out in accordance with the applicable provisions of the KVKK and the legally required safeguards and transfer mechanisms in force at the time of the transfer.

Cookies and similar technologies

HYDROLAB may use cookies and similar technologies to enable essential website functionality, maintain shopping sessions, remember preferences, understand website performance and, where permitted, support analytics and marketing activities.

Non-essential cookies are used in accordance with applicable legal requirements and user preferences where consent is required.

How long we keep personal data

We retain personal data only for as long as required for the purposes for which it was collected and for any additional period required under applicable tax, commercial, consumer protection, accounting or other legislation.

When the applicable processing purpose and legal retention grounds no longer exist, personal data is deleted, destroyed or anonymised in accordance with applicable law and our retention practices.

Data security

We take reasonable administrative and technical measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or unlawful processing.

Access to personal data is limited according to operational need and appropriate security controls are applied to our systems and service relationships.

Your rights

Under Article 11 of the KVKK, you may have the right to apply to the Company regarding your personal data and:

• Learn whether your personal data is being processed.
• Request information if your personal data has been processed.
• Learn the purpose of processing and whether your data is being used in accordance with that purpose.
• Learn the third parties to whom personal data has been transferred in Türkiye or abroad.
• Request correction of incomplete or inaccurate personal data.
• Request deletion or destruction of personal data where the applicable legal conditions are met.
• Request notification of correction, deletion or destruction to third parties to whom personal data has been transferred, where applicable.
• Object to a result arising against you through the analysis of personal data exclusively by automated systems.
• Request compensation where you suffer damage as a result of unlawful processing of your personal data.

Contact and personal data applications

Requests relating to your personal data may be submitted to:

Applications concerning personal data rights should be submitted using one of the application methods permitted under applicable Turkish data protection legislation.

Changes to this Policy

We may update this Privacy Policy when our services, processing activities or applicable legal requirements change.

The current version will be published on this page together with its latest update date.