Privacy policy

ASL RULMAN TİCARET VE SANAYİ LİMİTED ŞİRKETİ, Karpuzsekisi Mah. 24. Cadde No: 29, Hacılar / Kayseri · 38070, Türkiye ("ASL Rulman", "we") is the controller for the processing described here.

Contact for privacy requests: info@aslrulman.com.tr, +90 541 272 38 88, or by post to the address above.

We are a business established in Türkiye. This policy applies to customers and visitors outside Türkiye, including in the European Union, and is written to meet Article 13 of the General Data Protection Regulation (GDPR). Customers in Türkiye are informed under the Turkish Personal Data Protection Law (KVKK) on our Turkish pages.

When you open a page, your browser sends technical data such as your IP address, browser type, the page requested, and the time. Our hosting provider processes this data to deliver the page, keep the service secure, and find faults (Art. 6(1)(f) GDPR: our legitimate interest in a secure, working website).

Some pages show third-party content: the map on the home and contact pages is a Google Maps embed, and the Instagram images are loaded from Meta servers. When such a page opens, your browser connects to those servers, and they receive your IP address (Art. 6(1)(f) GDPR: our legitimate interest in showing our location and our current work).

Sign-up, sign-in, password reset, and the job application form are protected by Cloudflare Turnstile, which checks that a person, not a bot, is sending the form (Art. 6(1)(f) GDPR: our legitimate interest in protecting our forms against automated abuse).

Outside Türkiye we sell to businesses only. To see prices and to buy, you open an account and apply for your company; our team reviews the application in our ERP system before the company can buy.

We process your name, email address, phone number, company name, tax number, billing and delivery addresses, and your role in the company. The legal basis is the performance of the account terms with you and steps taken at your request (Art. 6(1)(b) GDPR) and, where you act for your company, our legitimate interest in setting up and managing the business relationship with that company (Art. 6(1)(f) GDPR).

When you register, we keep a record of the terms you accepted and the version of the privacy policy shown to you, with the date and a checksum of the text (Art. 6(1)(f) GDPR: our legitimate interest in being able to prove which terms were accepted).

We send account emails (email verification, password reset, and security notices) and quote and order emails from our own mail server, which is hosted in Türkiye (Art. 6(1)(b) and (f) GDPR).

RulmanAI answers product and order questions on the website. We record your messages, the answers, the page the chat was opened on, your browser details, your IP address with the approximate location (city, region, and country) our hosting provider derives from it, and a visitor cookie that links the conversations of one browser. If you are signed in, the conversation is linked to your customer account and company. We use these records to answer you, to monitor the quality of the service, and to prevent misuse (Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR: our legitimate interest in service quality and preventing misuse), and delete them after one year.

The answers are generated by Anthropic PBC (United States). Only the text of the conversation is sent to Anthropic, not your name, company, or account details; phone numbers, email addresses, Turkish ID numbers, and IBANs in your message are masked before sending. Under its commercial terms, Anthropic does not use the text to train its models and keeps it only for a limited period.

Please do not enter personal data that your question does not need.

If you accept analytics in the cookie banner, we use Google Analytics 4 and Vercel Web Analytics to measure how the website is used. Google Analytics 4 does not store IP addresses, and all advertising signals are switched off. Neither tool runs on account or payment pages, and Vercel Web Analytics removes query strings from the addresses it records. The legal basis is your consent (Art. 6(1)(a) GDPR).

Your choice is stored in your browser. To withdraw your consent, delete this website's data in your browser settings; the banner asks you again on your next visit. Details are in our cookie policy.

Our positions are in Türkiye and are advertised in Turkish. Applications are covered by the applicant information notice on our Turkish careers page.

We are established in Türkiye. When you send us data through the website, you provide it directly to us, and the GDPR applies to our processing in Türkiye (Art. 3(2) GDPR).

Some of our service providers (Google, Cloudflare, Vercel, Amazon Web Services, Meta, and Anthropic) are based in the United States. Transfers to them rely on the EU–US Data Privacy Framework (Art. 45 GDPR) where the provider is certified under it, and otherwise on the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR). You can request a copy of these safeguards at info@aslrulman.com.tr.

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). Where processing is based on your consent, you can withdraw it at any time; this does not affect processing carried out before.

Right to object: where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR) by writing to info@aslrulman.com.tr.

To exercise your rights or to close your account, write to info@aslrulman.com.tr. You can view your account data in your account; we correct or delete data on request unless the law requires us to keep it.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement.

You can browse the website without giving us personal data. To open a business account, request a quote, or buy, we need the data marked as required in the forms; without it we cannot approve your company or process your order. We do not make decisions based solely on automated processing (Art. 22 GDPR).

We update this policy when our services or the law change; the date at the top shows the current version.

This English version is authoritative. The German version is provided for convenience.