Privacy Policy

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by PartAndStock as data controller, within the scope described below. As the operator is established in the Republic of Türkiye, processing is governed by the KVKK.

• Trade Name: [Company Full Legal Name]
• Address: [Full Address]
• MERSİS No: [MERSİS Number]
• Registered E-Mail (KEP): [KEP Address]
• E-mail: [email protected]

The following categories of data may be processed within the scope of the service:

• Identity & Contact: full name, company, e-mail, phone, address.
• Account: username, hashed password, role/permissions, membership plan.
• Billing/Order: tax number/office, billing and shipping address, order items.
• Transaction Security: IP address, session/access logs.
• Usage: search queries, favorites, BOM lists, preferred currency/country.
• Marketing (with consent): newsletter subscription and communication preferences.

Your personal data is collected through automated/semi-automated means as you use the site, fill out forms, place orders, and via cookies.

• Creating membership, authentication and account management,
• Providing search, comparison, BOM and order services,
• Carrying out the order/intermediation process and forwarding it to the relevant suppliers,
• Fulfilling invoicing and legal obligations,
• Information security, fraud/abuse prevention,
• Service improvement and analytics (usually anonymous/aggregated),
• Measuring and attributing sales referred through affiliate networks for commission,
• Sending newsletters and marketing messages where you have given explicit consent.

Under Articles 5 and 6 of the KVKK, your personal data is processed on the following legal bases: necessity for the establishment/performance of a contract, fulfillment of a legal obligation, the establishment/exercise/protection of a right, legitimate interest provided that it does not harm your fundamental rights and freedoms, and, where required, explicit consent. Processing for marketing purposes is based solely on your explicit consent, which you may withdraw at any time.

Your data may be shared, limited to the purpose and in compliance with the law, with the following parties:

• Distributors/Suppliers and Partners: to the extent necessary to complete the order/intermediation process,
• Service Providers: business partners providing hosting, e-mail delivery, payment, analytics, infrastructure and affiliate-network services (e.g., CJ/Commission Junction, Awin),
• Authorized Authorities: official bodies in the event of a legal obligation or request.

Some service providers' servers may be located abroad; in such cases, the transfer is carried out in accordance with the KVKK's provisions on cross-border data transfer, with the necessary security measures and conditions in place.

Your personal data is retained for as long as the purpose of processing requires and for the statute-of-limitations/retention periods stipulated in the relevant legislation; at the end of the period it is deleted, destroyed or anonymized. For example, account data is retained for the duration of membership; billing/order data for the period required by the relevant tax and commercial legislation. Upon a request to delete your account, your data is deleted, subject to statutory retention obligations.

Administrative and technical measures are applied to keep your data secure, including: storing passwords in hashed form, encrypting sensitive fields (e.g., supplier API keys), access authorization, encryption in transit (HTTPS), and keeping access logs. Nevertheless, we remind you that no transmission over the internet is 100% secure.

Under Article 11 of the KVKK, as a data subject you have the right to:

• learn whether your personal data is being processed and, if so, request information about it,
• learn the purpose of processing and whether it is used in accordance with that purpose,
• know the third parties to whom it is transferred, domestically or abroad,
• request correction if it is processed incompletely/incorrectly, and deletion/destruction where the conditions are met,
• request that correction/deletion be notified to the third parties to whom it was transferred,
• object to a result being reached against you through automated analysis,
• request compensation if you suffer damage due to unlawful processing.

You can submit requests regarding your rights to [email protected] or to the KEP/postal address above. Your applications are concluded within at most 30 days, depending on the nature of the request. If the process requires an additional cost, a fee may be charged according to the tariff set by the Turkish Personal Data Protection Board.

Our site uses cookies to improve your experience and for the operation of the service. For detailed information about the types of cookies and how to manage them, see our Cookie Policy.

This Privacy Policy may be updated when necessary. The current version is published on this page with a "last updated" date. We will endeavor to inform you through appropriate means of material changes.