Privacy Policy
How ION Meccanica processes personal data on this website: what we collect, why, on what legal basis, who we share it with, and your rights under the Turkish KVKK and the EU GDPR. Last updated: 15 September 2026.
Data Controller
This website is operated by ION Meccanica, which acts as the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). For visitors located in the European Union, this notice also serves as the information notice required by Articles 13 and 14 of the General Data Protection Regulation (GDPR).
Address: Kocabas Mah., Mermerciler/3. Sk. No: 2/1, 20330 Honaz / Denizli, Türkiye
E-mail: ion@ionmeccanica.com
Phone: +90 258 373 0120
This notice covers only the activities carried out through the ionmeccanica.com domain. We are not responsible for the data practices of third-party platforms you may reach through links on this site (LinkedIn, YouTube, Instagram and the like); their own privacy notices apply there.
Personal Data We Process
The personal data processed on this site falls into three groups.
a) Data you send us directly
When you complete the quotation and contact form, or contact us by e-mail or telephone, we process: your name, company name, e-mail address, telephone number, country, the content of your message and, where applicable, the product you enquired about. At the moment you submit the form we also record your IP address, browser information (user agent), the site language and the time of submission, in order to handle the request properly and to prevent automated or malicious submissions.
Only the name, e-mail and message fields are mandatory; you may leave the others blank. We do not ask for special categories of personal data (health, religion, trade-union membership, biometric data and the like) — please do not enter such information into the message field. If you share another person's contact details (a colleague's, for example), it is your responsibility to inform them about this notice.
b) Data generated automatically during your visit
Server logs: your IP address, browser and operating system, the address you requested, the response code and a timestamp are kept automatically by the hosting infrastructure. These records are necessary to operate the site, diagnose faults and prevent attacks.
Country: when you arrive at an address without a language prefix, we read the country code our hosting provider derives from your IP address so that we can send you to the correct language version. It is used at the moment of redirection.
Rate-limit records: to prevent abuse of the form and measurement endpoints, the number of requests per IP address is held briefly in server memory; it is not stored permanently.
c) Visit measurement
To understand which parts of the site attract interest we run a cookieless measurement on our own infrastructure. What is recorded: the page viewed and its title, time spent on the page, how much of the page was seen, the site language, where you came from (search engine, social media, direct visit) and any campaign tags in the link (utm), device type, browser and operating system, screen width, and the country, region and city reported by our hosting provider.
This measurement does not store your raw IP address. The identifier used to tell visitors apart is an irreversible digest of your IP address and browser signature taken together with a secret value that changes every day. Because that value changes daily, the same person receives a new identifier the next day: nobody can be tracked across days, and your identity cannot be reconstructed from these records. See the Cookie Policy for details.
Purposes and Legal Bases
We process your data only for the purposes below, on the legal bases shown next to each:
| Purpose and data processed | Legal basis |
|---|---|
| Responding to quotation and contact enquiries, preparing offers, conducting pre-contractual discussions Form and contact data | KVKK art. 5/2-(c) — directly related to the conclusion or performance of a contract GDPR art. 6(1)(b) |
| Handling after-sales support, spare-part and service requests Form and contact data | KVKK art. 5/2-(c) GDPR art. 6(1)(b) |
| Operating the site securely and without interruption, diagnosing faults, preventing abuse and attacks Server logs, IP address, rate-limit records | KVKK art. 5/2-(f) — legitimate interest GDPR art. 6(1)(f) |
| Directing visitors to the correct language version and remembering the language preference Language cookie, country code | KVKK art. 5/2-(f) GDPR art. 6(1)(f) |
| Measuring which content attracts interest and improving the site Cookieless measurement data | KVKK art. 5/2-(f) GDPR art. 6(1)(f) |
| Complying with legal obligations, responding to requests from competent authorities, establishing and defending legal claims All relevant data | KVKK art. 5/2-(a), (ç) and (e) GDPR art. 6(1)(c) and (f) |
None of the processing above relies on consent. Consent is sought only where a cookie requiring it (Google Analytics, for example) is enabled; in that case the technology concerned does not run before you give consent and you may withdraw it at any time (see the Cookie Policy). Where we rely on legitimate interests, we carry out the balancing required so that the processing does not harm your fundamental rights and freedoms: measurement is cookieless, raw IP addresses are not stored, no personal profiles are built and the data is not used for advertising.
No decision producing legal effects concerning you is taken on this site solely by automated means, and no profiling is carried out.
Commercial Electronic Messages
The e-mail address and telephone number you provide through the form are used solely to respond to your enquiry. Under Turkish Law No. 6563 on the Regulation of Electronic Commerce we do not send you promotional, campaign or newsletter messages unless you have separately opted in. The exemptions that law provides for merchants and tradespeople who contact us for the supply of goods or services are reserved.
If you later opt in to a mailing list, you can leave at any time using the unsubscribe link included in every message or by writing to ion@ionmeccanica.com.
Sharing and International Transfers
We do not sell, rent or share your personal data with third parties for marketing purposes. To operate the site we rely only on the service providers listed below. Each acts as a processor, handling the data solely to deliver the service they provide to us and on our instructions:
| Provider | Purpose and data accessed |
|---|---|
| Vercel Inc. | Hosting and delivery of the website. Data accessed: server logs, IP address, requested address. |
| Supabase Inc. | Database and file storage. Data accessed: site content, form submissions, cookieless measurement records. |
| Resend | Delivering the notification e-mail sent to our own team when a form is submitted. Data accessed: the content of that e-mail — your name, company, contact details and message. |
Because these providers' servers may be located outside Türkiye, your data is transferred abroad. Transfers are made within the framework of Article 9 of the KVKK and on the basis of the providers' data processing terms together with the European Commission's Standard Contractual Clauses (SCC); for GDPR purposes, on the basis of appropriate safeguards under Article 46 of the Regulation.
Beyond this, your personal data may be disclosed only where a legal obligation arises (a court order or a request from a prosecutor or competent public authority), to the extent required by law, and — where legal claims must be established, exercised or defended — to advisers bound by professional secrecy, such as our lawyers and accountants.
Retention Periods
We keep data only for as long as the purpose of processing requires:
| Data | Retention period |
|---|---|
| Form and quotation enquiries (name, company, e-mail, phone, country, message, IP, browser information) | 3 years from the closure of the enquiry. If the enquiry results in a contract, the retention and limitation periods set by applicable legislation (Turkish Commercial Code, Tax Procedure Law, Code of Obligations) apply. |
| Cookieless measurement records | At most 400 days. This period was chosen so that a year can be compared with the same period of the previous year; the records are deleted at the end of it. |
| Server logs | For the technical retention period of the hosting provider, after which they are deleted automatically. |
Language cookie (site_lang) | 1 year in your browser. You can delete it at any time from your browser settings. |
Consent cookie (ion_cerez_onay) | 180 days. Created only if you made a choice on the consent card; it holds the value "accept" or "decline". |
Admin session cookie (admin_session) | 7 days. Created only for authorised staff; never for visitors. |
| Rate-limit records | A few minutes in server memory; no permanent record is kept. |
When the period expires the data is deleted, destroyed or irreversibly anonymised.
Data Security
We take appropriate technical and organisational measures to prevent unlawful processing of, and unlawful access to, personal data: the site and all endpoints are served over HTTPS; the admin panel is password-protected and sessions run on signed, server-only (HttpOnly) cookies; rate limiting and bot protection are applied to the form and measurement endpoints; database access is possible only with a secret server key and under row-level security policies; and the measurement data never stores a raw IP address.
Even so, no transmission over the internet can be guaranteed to be absolutely secure. Should personal data be unlawfully obtained by others, we will notify the data subjects concerned and the Turkish Personal Data Protection Board within the period prescribed by law.
Your Rights and How to Exercise Them
Under Article 11 of the KVKK you have the right to apply to the data controller and:
- learn whether your personal data is processed
- request information if it has been processed
- learn the purpose of processing and whether the data is used in accordance with that purpose
- know the third parties to whom the data is transferred, in Türkiye or abroad
- request correction if the data is incomplete or inaccurate
- request erasure or destruction within the conditions set out in Article 7 of the Law
- request that correction, erasure or destruction be notified to the third parties to whom the data was transferred
- object to a result against you arising from analysis carried out solely by automated systems
- claim compensation if you suffer damage as a result of unlawful processing
How to apply. You may send your request in writing to ion@ionmeccanica.com or to the postal address above. Under the Turkish Communiqué on the Procedures and Principles of Application to the Data Controller, your application should state your name and surname, your signature if the application is in writing, your Turkish ID number (for foreign nationals, nationality and passport or ID number), your address for service, and your e-mail address and telephone number if you wish to be notified by those means, together with the subject of your request. Where we cannot verify your identity we may ask for further information, so that your data is not disclosed to unauthorised persons.
Your application is concluded free of charge as soon as possible and in any event within thirty days, depending on the nature of the request. Where the process entails an additional cost, the fee set in the Board's tariff may be charged. If your application is rejected, if you find the response insufficient, or if no response is given in time, you may lodge a complaint with the Turkish Personal Data Protection Board within thirty days of learning of the response and in any event within sixty days of the date of application.
If you are located in the European Union: under Articles 15–22 of the GDPR you have the right to access your data, to request its rectification, erasure or the restriction of its processing, and to data portability. You have the right to object to processing based on legitimate interests; if you object, we will stop the processing unless we can demonstrate compelling legitimate grounds for continuing it. You also have the right to lodge a complaint with the data protection supervisory authority of your country.
Cookies
This site uses strictly necessary and functional cookies; there are no advertising, retargeting or profiling cookies. Visit measurement is carried out without cookies. If a cookie requiring consent is enabled, it does not run before you give consent, and you can withdraw that consent at any time through the "Cookie preferences" link at the bottom of the page. What each cookie does, how long it is kept and how to delete it are set out in detail in the Cookie Policy.
Children's Personal Data
This is a business-to-business corporate site addressed to buyers of industrial machinery and production lines. It is not directed at children and we do not knowingly collect personal data from children. If we become aware that a child's personal data has been sent to us, we delete it without delay. If you notice such a case, please let us know at ion@ionmeccanica.com.
Changes to This Notice
We update this notice when a new feature goes live on the site, when our processing purposes change, or when our service providers change. The version in force is always published on this page and identified by the last updated date above. In the event of a material change we will also post a notice on the site.
Last updated: 15 September 2026
Questions: ion@ionmeccanica.com · +90 258 373 0120