Home / Privacy policy
Privacy policy & KVKK information notice
How Somi Teknoloji Yatırımları Sanayi Ticaret Limited Şirketi collects, uses and protects personal data, prepared under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation.
Last updated: 29 September 2026
1. Data controller
The data controller is Somi Teknoloji Yatırımları Sanayi Ticaret Limited Şirketi, registered at Göktürk Merkez Mahallesi, Çeşmebaşı Caddesi No: 31/A, Eyüpsultan, İstanbul, Türkiye, MERSİS number 0773-0628-9960-0001. For any question about this notice, contact info@somipartner.com.
2. What we collect
| Category | Data | Source |
|---|---|---|
| Identity | Name, company name, job title where you provide it | You, via the contact form or email |
| Contact | Email address, telephone number | You |
| Enquiry content | Marketplace, service required, message text and anything else you choose to include | You |
| Technical | IP address, browser and device information, and security request logs generated when the site is accessed | Automatically, via our hosting provider |
| Client account data | Where you become a client, the marketplace and catalogue data required to deliver the agreed service | You and your Amazon account, through access limited to the agreed scope |
3. Why we use it, and on what legal basis
| Purpose | Legal basis (KVKK) |
|---|---|
| Responding to your enquiry | Legitimate interest, and where a contract is in prospect, necessity for the establishment of a contract (Art. 5/2-c and 5/2-f) |
| Delivering contracted services | Necessity for the performance of a contract (Art. 5/2-c) |
| Meeting accounting, tax and commercial record obligations | Legal obligation (Art. 5/2-ç) |
| Site security and abuse prevention | Legitimate interest (Art. 5/2-f) |
4. Who we share it with
- Netlify, Inc., our website hosting and contact form processing provider
- Google Workspace (Google Ireland Limited), our email provider
- Professional advisers, and public authorities where we are legally required to disclose
- For client engagements only, third parties named to you in advance, such as a logistics provider or a certification body
We do not sell personal data, and we do not share it for third-party advertising.
5. Transfers outside Türkiye
Some providers listed above may process data outside Türkiye, including in the United States and the European Union. Personal data is transferred abroad only where the requirements of Article 9 of the KVKK are met, including an applicable adequacy decision, an appropriate safeguard such as a standard contract published by the Personal Data Protection Board, or another transfer condition permitted by law. You can ask us for details of the mechanism and safeguards applicable to a particular transfer.
6. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not become engagements | 24 months from the last contact |
| Client records and correspondence | Duration of the engagement plus the statutory commercial record period |
| Accounting and tax records | As required by Turkish law |
| Server and security logs | For the period maintained by the hosting provider under its applicable service and security policies |
7. Your rights
Under Article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information about that processing; to learn its purpose and whether it is used accordingly; to know the third parties to whom it is transferred; to request correction of incomplete or incorrect data; to request erasure or destruction; to require that correction, erasure or destruction be notified to third parties; to object to a result produced solely by automated analysis; and to claim compensation for damage arising from unlawful processing.
To exercise any of these rights, write to info@somipartner.com or to our registered address. We respond within thirty days at the latest. If you are not satisfied with our response, you may complain to the Turkish Personal Data Protection Authority.
8. Security
We apply technical and organisational measures appropriate to the data we hold, including encrypted transmission, access limited to the people who need it, and named individual accounts rather than shared logins. Where we work inside a client's Amazon account, access is set up in line with Amazon's current rules for third-party access, with only the permissions required for the agreed work, as described on our account access and security page.
9. Cookies
This site does not use analytics, advertising or tracking cookies. The contact form and hosting infrastructure are described in our cookie policy.
10. Changes
If this notice changes materially, we update the date above and, where the change affects a purpose you consented to, we ask for consent again rather than relying on the old one.