Data Protection Notice
Last updated: 18 September 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the related Communiqué on Procedures and Principles for Fulfilling the Disclosure Obligation. It explains how Gammapak Sterilization Industry and Trade Inc., acting as data controller, processes your personal data.
1. Data Controller
2. Personal Data We Process
| Category | Data | Collected through |
|---|---|---|
| Identity | First name, last name | Contact form, Irradiation Request Form |
| Contact | E-mail address, phone number, company name and address | Contact form, Irradiation Request Form |
| Customer transaction | Request content, product and irradiation details, message text | Irradiation Request Form, contact form |
| Transaction security | IP address, browser and device information, access and error logs | Server logs, reCAPTCHA security check |
| Marketing / statistics | Pages visited, time on site, referring source, cookie identifier | Analytics cookies, only if you consent |
We do not request special categories of personal data as defined in Article 6 of the KVKK. Please do not enter such data into the free-text fields of our forms.
3. Purposes of Processing
4. Legal Grounds for Processing
| Legal ground (KVKK Art. 5) | Applies to |
|---|---|
| Art. 5/2-c – Directly related to the conclusion or performance of a contract | Irradiation request and quotation processes |
| Art. 5/2-ç – Necessary for compliance with a legal obligation | Records that must be retained under applicable legislation |
| Art. 5/2-f – Necessary for the legitimate interests of the data controller | Answering contact requests, satisfaction surveys, site security and log records |
| Art. 5/1 – Explicit consent | Non-essential analytics cookies and the related international transfer |
5. Method of Collection
Your personal data is collected by wholly or partly automated means when you complete a form on our website, send us an e-mail or call us, and through cookies and server logs generated during your visit.
6. Transfer of Personal Data
Within the limits of the purposes above and pursuant to Article 8 of the KVKK, your personal data may be shared with our hosting and e-mail service providers, our IT support suppliers and, to the extent your request requires it, the relevant business units within our company. Disclosures may also be made to authorised public authorities and judicial bodies where and to the extent required by law.
International transfer: Because our site uses Google services (Google Analytics and Google reCAPTCHA), your IP address and browser information are transferred to servers operated by Google Ireland Limited and Google LLC. Transfers arising from Google Analytics take place only if you give cookie consent and rely on your explicit consent under Article 9 of the KVKK. The reCAPTCHA security check is necessary to protect the site and its forms against abuse. See our Cookie Policy for details.
7. Retention Periods
At the end of these periods your personal data is deleted, destroyed or anonymised.
8. Your Rights (KVKK Art. 11)
By applying to the data controller, you have the right to:
9. How to Submit a Request
In line with the Communiqué on Procedures and Principles of Application to the Data Controller, you may submit your request:
Your request must state your name and surname, your Turkish ID number (passport number for foreign nationals), your address for notification, your e-mail address and phone number if any, and the subject of your request. We respond as soon as possible and within 30 days at the latest, free of charge. Where the process entails an additional cost, a fee from the tariff set by the Personal Data Protection Board may be charged.
We also recommend reading our Privacy Policy and Cookie Policy.