Last updated: 4 November 2026
This policy explains how Membraz (“we”, “us”) handles personal data collected through membraz.com. It applies to visitors, customers, distributors and anyone who contacts us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Who is responsible
Data controller: Membraz, Ankara, Türkiye. Contact for all privacy matters: info@membraz.com.
2. What we collect and why
- Enquiry form: name, company, country, email address, the product you are interested in and your message. We use this only to answer your enquiry, send samples, data sheets and price information, and to prepare a possible business relationship. Legal basis: steps prior to entering into a contract and our legitimate interest in answering business enquiries (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
- Email correspondence: when you write to one of our addresses we keep the content of the correspondence and your contact details for the same purposes.
- Technical data: when you visit the site our hosting server automatically records technical information such as IP address, browser type, date and time of access and the page requested. This is needed to deliver the website securely and to detect misuse (legitimate interest, GDPR Art. 6(1)(f)).
We do not sell personal data, we do not use it for automated decision-making, and we do not send newsletters without your consent.
3. Cookies
The site uses only the cookies needed for it to work and a cookie that stores your consent choice. Non-essential cookies are used only if you accept them in the cookie banner; you can change your choice at any time via the cookie icon on the page.
4. Service providers
- Hosting and email: Veridyen Bilişim (Türkiye) hosts the website and our mailboxes.
- Domain name system: Cloudflare, Inc. provides the DNS service for membraz.com.
- Fonts: the site loads fonts from Google Fonts (Google Ireland Ltd. / Google LLC); your browser connects to Google servers and your IP address is transmitted to Google for this purpose.
Some of these providers may process data outside Türkiye or the EU/EEA. Where this happens, transfers are made on the basis of appropriate safeguards such as standard contractual clauses.
5. How long we keep data
Enquiries and correspondence that do not lead to a business relationship are deleted within 24 months. Data relating to customers and contracts is kept for as long as required by commercial and tax law. Server log files are deleted automatically after a short period.
6. Your rights
You have the right to request information about the personal data we hold about you, and to have it corrected, deleted or restricted, to object to its processing, and to receive it in a portable format. Under KVKK Art. 11 you may also ask whether your data is processed and to whom it has been transferred. To exercise these rights, write to info@membraz.com. You also have the right to lodge a complaint with a supervisory authority, in Türkiye the Personal Data Protection Authority (KVKK) or the data protection authority in your EU country of residence.
7. Changes
We may update this policy when our services or legal requirements change. The current version is always published on this page.