1. Controller pursuant to Art. 4(7) GDPR
Whole Supply Export & Sourcing Ticaret Ltd. Şti.
CUMHURİYET MAH.TENNURİ SOK. GÖBELOĞLU İŞHANI 22/502
MELİKGAZİ/ TÜRKİYE/ Kayseri 38220
E-Mail: info@whole-supply.com
Phone: +90 552 549 19 80
Website: www.whole-supply.com
We take the protection of your personal data seriously. This Privacy Policy explains how we collect, process and use personal data when you visit our website or interact with us.
2. Data Collection When Visiting Our Website
When you visit our website, the browser used on your device automatically sends information to our server. The following data is collected and stored temporarily in a server log file:
- IP address of the requesting device
- Date and time of access
- Name and URL of the requested file
- Referrer URL (previously visited page)
- Browser and operating system used
- Name of your access provider
Purpose of processing:
- Ensure a smooth connection and optimal performance
- Guarantee comfortable website usage
- Analyze system security and stability
- Administer and improve the website
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
3. Contact and Quote Request Forms
If you contact us via contact form or email, we collect and process the data you voluntarily provide, such as:
- Name, company
- E-mail address
- Phone number (optional)
- Message content
Purpose: To process your inquiry and respond to follow-up questions.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual obligation)
4. Data Processing for Business Inquiries
If you request an offer or place an order, we process your data for the purpose of handling the transaction, including:
- Contract preparation and communication
- Logistics, customs, and documentation
- Invoicing and tax compliance
Legal basis: Art. 6(1)(b) GDPR
5. Data Sharing
We do not transfer your personal data to third parties unless:
- You have given explicit consent (Art. 6(1)(a) GDPR)
- Processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR)
- There is a legal obligation (Art. 6(1)(c) GDPR)
- It is necessary to protect our legitimate interests (Art. 6(1)(f) GDPR)
Typical recipients may include:
Shipping providers, customs authorities, tax consultants, hosting providers, technical service providers.
6. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device to enhance usability and functionality.
Types of cookies:
- Necessary cookies (essential for site functionality)
- Analytics cookies (e.g., visitor tracking)
- Marketing/third-party cookies (e.g., embedded services)
We use a Consent Management Tool to manage your preferences in accordance with Art. 6(1)(a) GDPR.
7. Web Hosting and Third-Party Tools
a) Hosting
Our website is hosted by a GDPR-compliant provider within the EU or EEA. A data processing agreement pursuant to Art. 28 GDPR is in place.
b) Analytics Tools
(Include Google Analytics, Matomo, etc. if used – otherwise omit)
c) External services / plugins
(e.g., LinkedIn, Instagram, YouTube, Google Fonts – if applicable)
8. International Data Transfers
Where we transfer data to countries outside the EU/EEA (e.g., Turkey or the USA), we ensure:
- Adequacy decision by the EU Commission
- Standard Contractual Clauses (SCCs)
- Additional technical or legal safeguards, where required
9. Your Rights as a Data Subject
You have the following rights under the GDPR:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restrict processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise these rights, please contact us at the email address provided above.
10. Data Security
We implement appropriate technical and organizational measures (TOMs) to ensure the security of your personal data and protect it from unauthorized access, loss, or misuse.
11. Updates to This Policy
This Privacy Policy is current as of July 2025.
We reserve the right to update it in line with legal or technical changes.