Privacy notice · Version 2026-09-20-v4
Privacy Notice
This notice covers every form and service on WMSTurkiye.com under Turkey's Personal Data Protection Law No. 6698 (KVKK). Each flow is listed separately with what is processed and why. No form assumes marketing consent; where consent is required we use a separate, unticked box.
This is an English translation of the Turkish notice, provided for convenience. If the two versions differ, the Turkish text prevails.
Data controller
The data controller is WMSTurkiye. For requests: info@wmsturkiye.com.
What is processed in each form
| Flow | Data processed | Legal ground | Maximum retention |
|---|---|---|---|
| Directory submission (listing form) | Name, business email, optional phone, company and product details; IP address and browser info for security | Explicit consent; establishment of a right and legitimate interest | 2 years |
| Vendor panel sign-in and update proposals | The contact email on record, proposal content, session cookie | Performance of the service and legitimate interest | Sign-in link 30 minutes, session 8 hours; proposal records 2 years |
| Vendor package request | Name, work email, company, optional phone and note, selected packages; IP and browser info | Explicit consent | 2 years |
| Report / PDF request | Name, email, company, optional phone, sector and warehouse size; IP and browser info | Explicit consent | 2 years |
| Shortlist request | The above plus the solutions you selected and your message | Explicit consent | 2 years |
| Talk to an expert | Name, email, company, optional phone, description of your need; IP and browser info | Explicit consent | 2 years |
| User review | Email address for verification (never published), optional display name, role, company size, years of use, rating and review text | Explicit consent | As long as the review is published; unverified reviews are deleted after 7 days |
| Turkey WMS Survey | Survey answers and language; your contact email only if you separately opt in. No IP address is stored. | Explicit consent | Answers anonymously indefinitely; email 2 years |
| User account | Email, session cookie, summaries of diagnostics / finder / comparisons you save (title and link) | Explicit consent | Sign-in link 30 minutes, session 8 hours; saved analyses 2 years |
| Bulletin and report notices | Email address and confirmation time. Not used for sales or third-party marketing. | Explicit consent (double opt-in) | 2 years or until you unsubscribe; unconfirmed records 7 days |
| Operational diagnostic (benchmark) | Company name, sector and the operational answers you give | Explicit consent | 2 years |
| Floor model (warehouse model) | The problem text you write (up to 2,000 characters), your choices in the model and the language; plus a random token generated in your browser so your own entry can be updated. No name, email or IP is stored, and the token is not included in the admin export. | Legitimate interest (improving the tool and its content) | 2 years |
| Directory interaction counters | Counts of solution × day × event (view, comparison, finder). No person, IP or identifier is stored. | Legitimate interest (aggregate statistics) | Indefinite (contains no personal data) |
| Abuse prevention | IP address and browser info on form submissions; rate-limit counters | Legitimate interest | Same as the related record; rate-limit counters at most 1 hour |
The periods above are upper limits. Records are deleted or anonymised earlier once no legal obligation requires keeping them.
Consent texts and versions
Wherever consent is required, it is stored together with the version of the consent text in force at that moment, so it can be shown later what you agreed to:
vendor-profile-2026-09-20-v1— directory / product profile submission; acknowledgement of reading vendor listing agreement version 2026-09-20-v1 and the form's data-processing consentvendor-profile-2026-09-20-v2— same flow; listing agreement version 2026-09-20-v2 (withdrawal with proof of authority)report-lead-2026-09— report / PDF requestshortlist-share-2026-09— shortlist requestexpert-request-2026-09— talk to an expertreview-2026-09— user reviewsurvey-2026-09— research surveyvendor-package-2026-09— vendor package requestaccount-2026-09— user-account sign-in and saved analysesnewsletter-2026-09— bulletin and report notices
Directory submissions also store the privacy notice version as kvkk-directory-2026-09-20-v4. Versions recorded for earlier submissions are retained.
You can withdraw consent at any time; withdrawal does not affect the lawfulness of processing before that date.
Who we share data with
- Service providers: hosting, database, email delivery and spam prevention — only as far as the service requires.
- Vendors: only for shortlist, proposal, demo or RFQ enquiries and only with the vendors you explicitly select and authorise. Requests reach the WMSTurkiye team first; nothing is forwarded to a vendor automatically without your consent.
- Published content: review email addresses are never published. Survey results are published only in aggregate and anonymised; a breakdown with fewer than 10 companies is not shown.
Where providers use infrastructure abroad, the transfer is assessed under Article 9 of Law No. 6698 and contractual safeguards.
Cookies and browser storage
- Vendor panel session cookie: set when you sign in; HttpOnly, SameSite=Lax, 8 hours. Strictly necessary.
- User-account session cookie: set when you sign in to your account; HttpOnly, SameSite=Lax, 8 hours. Strictly necessary.
- Admin session cookie: set only on pages used by the WMSTurkiye team.
- Browser storage (sessionStorage): used so the same interaction is not counted twice; it sends no personal data to the server.
- Google Analytics 4: used to measure page views and on-site events (ID G-7FQ90XZSF9). IP addresses are anonymised. Ad personalisation and remarketing are off. Google processes the data on its infrastructure.
- Yandex.Metrika: used to measure page views, a click map and session replay (Webvisor) (counter 112841160). Yandex processes the data on its infrastructure.
- No advertising-network or remarketing cookies are used.
Security
Data is held in systems with restricted access and admin pages sit behind authentication. Review verification links are stored hashed, and panel sign-in links are signed and time-limited. Even so, no transmission over the internet is 100% secure; please tell us if you notice anything suspicious.
Your rights
Under Article 11 of Law No. 6698 you may learn whether your personal data is processed, request information about it, learn the purpose of processing, know the third parties it is transferred to in Turkey or abroad, request correction if it is incomplete or inaccurate, request erasure or destruction where the conditions apply, ask that such actions be notified to third parties, object to a result derived solely from automated analysis, and claim compensation for damage.
Send requests to info@wmsturkiye.com. They are answered within the statutory period after identity verification. To have your review unpublished, writing to the same address is enough.
Changes
This notice is updated whenever a new form or service is added and the version number changes. Current version: 2026-09-20-v4. Previous versions: 2026-09-20-v3 (did not cover the floor model flow), 2026-09-20-v2 (did not cover the account and newsletter flows).
Our publishing and editorial evaluation principles: editorial policy.
Site use: terms of use.