Privacy Policy and Personal Data Notice
Last updated: 20 August 2026
1. About This Notice
This Privacy Policy and Personal Data Protection Notice explains how personal data submitted through the OZG Global Trading House website is collected, used, stored, disclosed and protected.
It describes only the processing activities currently carried out through this website.
This notice is provided primarily under Turkish Personal Data Protection Law No. 6698 (“KVKK”). Where applicable to a particular processing activity, the General Data Protection Regulation (“GDPR”), the UK GDPR and other mandatory data protection laws may also apply.
2. Data Controller
The data controller is:
OZG MEDYA TEKNOLOJİ VE DANIŞMANLIK TİCARET LİMİTED ŞİRKETİ
Registered address:
Nisbetiye Mahallesi, Gazi Güçnar Sokak, Uygur İş Merkezi No: 4, İç Kapı No: 2, Beşiktaş, Istanbul, Türkiye
Email: info@ozgglobal.com
Website: https://ozgglobal.com
In this notice, the company may also be referred to as “OZG Global”, “we”, “us” or “our”.
3. Personal Data We Collect
We collect personal data that you voluntarily provide through the website forms. If you browse the website without completing or submitting a form, the form-related information described below is not collected.
3.1 Contact and Sourcing Request Form
Depending on the type of request you select, we may collect:
Type of enquiry: sourcing a product or manufacturer, seeking new markets as a manufacturer, or another enquiry
Full name
Email address
Telephone number, where provided
Company name
Preferred sourcing route
Product or sourcing requirements
Quantity and target price, where provided
Product category
Target markets, where provided
Additional information or message
Record confirming that the privacy notice was presented to you
3.2 Manufacturer Profile Form
Through the Manufacturer Profile Form, we may collect:
Contact person’s name
Company name
Email address
Telephone number, where provided
Website address, where provided
Country and city
Industry or sector
Product groups
Production capacity or typical order quantity, where provided
Current export status
Current export markets, where provided
Target markets, where provided
Requested market-development support
Relevant standards or certifications, where provided
Catalogue link, where provided
Information about your company, products and commercial objectives
Record confirming that the privacy notice was presented to you
Catalogue or business documents that you voluntarily upload
3.3 Technical and Security Data
When a form is submitted, limited technical information may also be processed for the operation and security of the website, including:
Submission date and time
IP address
Browser and device information
Technical form and security logs
Information used to detect or prevent spam, abuse and unauthorised activity
3.4 Special Categories of Personal Data
We do not request health information, biometric or genetic data, religious or political beliefs, criminal records or other special categories of personal data.
Please do not include such information in form messages or uploaded documents unless we have specifically requested it and provided an appropriate legal basis and separate notice.
If an uploaded document contains personal data belonging to another individual, you are responsible for ensuring that you are authorised to disclose that information to us.
4. How We Collect Personal Data
Personal data is collected electronically:
When you complete and submit a website form
When you voluntarily upload a document
Through technical records created during a form submission
When you contact us by email, telephone or WhatsApp
We do not currently obtain personal data through third-party advertising networks, data brokers or marketing databases.
5. Purposes of Processing
We may process personal data for the following purposes:
Receiving, reviewing and responding to your enquiry
Contacting you regarding your request
Assessing product, manufacturer, supplier, market and commercial suitability
Researching and coordinating potential sourcing opportunities
Evaluating manufacturer profiles and target-market requirements
Developing appropriate buyer, supplier, distributor or commercial connections
Coordinating quotation, sampling, quality-control, inspection or shipment processes where agreed
Maintaining business correspondence and records
Protecting the website and forms against spam, abuse and unauthorised access
Establishing, exercising or defending legal rights
Complying with legal and regulatory obligations
Maintaining the security and continuity of our services
Submitting a form does not guarantee a commercial relationship, order, sale, exclusivity, market entry or successful match.
6. Legal Bases for Processing
Under KVKK, we process personal data only where an applicable processing condition exists. Depending on the context, processing may be necessary:
To take steps requested by you before entering into a contract or to perform a contract
To comply with our legal obligations
For the establishment, exercise or protection of a legal right
For our legitimate interests, provided that your fundamental rights and freedoms are not adversely affected
On the basis of explicit consent, only where a processing activity genuinely requires consent
Where the GDPR or UK GDPR applies, the corresponding legal bases may include:
Taking steps at your request before entering into a contract or performing a contract
Compliance with a legal obligation
Our legitimate interests in responding to business enquiries, evaluating commercial opportunities, maintaining business communications and protecting our systems
Consent, where a specific processing activity requires it
The checkbox displayed with our forms is intended to record that you have read and received this notice. It is not a general or unlimited consent to the processing, disclosure or marketing use of your personal data.
If consent is legally required for a particular activity, it will be requested separately, specifically and in clear language. You may withdraw such consent at any time without affecting processing carried out lawfully before withdrawal.
7. Parties to Whom Personal Data May Be Disclosed
Where necessary for the purposes described in this notice, personal data may be disclosed on a limited and need-to-know basis to:
Authorised employees and representatives of OZG Global
Website hosting, infrastructure, email, security and technical service providers
Professional advisers, including legal, accounting and information-security advisers
Potential manufacturers, suppliers, buyers, importers, distributors or other commercial counterparties where necessary to evaluate or carry out your request
Customs, inspection, quality-control, logistics or other authorised service providers where required for an agreed commercial process
Courts, regulatory bodies and other legally authorised public authorities where disclosure is required by law
We do not sell personal data.
We do not make manufacturer profiles or uploaded documents publicly accessible through the website.
We do not disclose your complete profile indiscriminately to potential counterparties. Any disclosure must be proportionate to the relevant request, commercial assessment and applicable legal requirements.
8. International Transfers
OZG Global operates in international sourcing and market development. Depending on your request, personal data may need to be processed or disclosed outside Türkiye.
For example:
Form notifications may be sent through Google Workspace
Technical service providers or their subprocessors may operate infrastructure in different countries
A sourcing or market-development request may involve a potential buyer, manufacturer, supplier, importer or distributor located abroad
International transfers will be carried out only where an applicable legal transfer mechanism and appropriate safeguards are in place.
Depending on the countries and laws involved, these safeguards may include:
An adequacy decision
Standard contractual clauses approved under Turkish data protection law
EU Standard Contractual Clauses
The UK International Data Transfer Agreement or UK Addendum
Binding corporate rules
Another transfer mechanism permitted by applicable law
Where your request may require the disclosure of personal contact or profile information to a commercial counterparty abroad, we will limit the information to what is necessary and apply the relevant legal requirements. Submission of a form does not authorise unrestricted international circulation of your information.
You may contact us for additional information about the safeguards applicable to a particular international transfer.
9. Retention Periods
We retain personal data only for as long as reasonably necessary for the purposes described in this notice and for any applicable legal, contractual or regulatory requirements.
Unless a longer period is legally necessary:
Enquiries that do not result in an ongoing commercial relationship are retained for up to 12 months following closure of the request or the last meaningful communication
Manufacturer profiles that do not result in an ongoing commercial relationship are retained for up to 24 months following the last meaningful communication or assessment
Uploaded documents are retained for the same period as the related manufacturer profile or for a shorter period where they are no longer required
Records relating to an active or completed commercial relationship may be retained for the periods required under applicable commercial, accounting, tax and legal rules
Technical and security records are retained only for as long as necessary for security, troubleshooting, abuse prevention and legal compliance
Backup copies are deleted through the applicable backup-rotation process
At the end of the applicable retention period, personal data is deleted, destroyed or anonymised in accordance with applicable law.
10. Uploaded Files
Uploading a file through the Manufacturer Profile Form is optional.
Accepted file types are:
PDF
JPG and JPEG
PNG
DOC and DOCX
XLS and XLSX
A maximum of two files may be uploaded, with a maximum size of 8 MB per file.
Uploaded files are intended to be accessible only to authorised administrator-level users and are not intended to be publicly downloadable through a direct website link.
Uploaded files may be scanned, restricted or deleted where they present a security risk, contain prohibited content or are unrelated to the purpose of the form.
11. Cookies and Tracking Technologies
We currently do not use advertising, behavioural-marketing or analytics tools on this website.
The website may use cookies or similar technologies that are strictly necessary for:
WordPress and plugin functionality
Form operation
Language selection
Security
Session management
Website administration
Where non-essential analytics, advertising or marketing technologies are introduced in the future, they will not be activated before any legally required information and consent mechanism has been provided.
12. Email, WhatsApp and External Services
If you contact us through email or WhatsApp, your information will also be processed under the privacy and data-processing terms of the relevant service provider.
WhatsApp and other external websites are operated independently from OZG Global. We recommend reviewing their privacy information before using those services.
13. Information Security
We apply reasonable technical and organisational safeguards appropriate to the nature of the personal data and the risks involved. These measures are intended to:
Prevent unauthorised access
Restrict administrative access
Protect form records and uploaded files
Reduce the risk of unlawful disclosure, alteration or loss
Maintain website and email security
Detect misuse and malicious submissions
No transmission or storage system can be guaranteed to be completely secure. If we identify a personal data breach, we will take the actions required under applicable law.
14. Marketing and Automated Decision-Making
Submitting a website form does not automatically subscribe you to marketing communications.
If we introduce newsletters or promotional communications in the future, we will provide a separate subscription and opt-out mechanism where required.
We do not currently use personal data submitted through the forms to make decisions based solely on automated processing or profiling that produce legal or similarly significant effects.
15. Your Rights
15.1 Rights Under Turkish Law
Under Article 11 of KVKK, you may have the right to:
Learn whether your personal data is being processed
Request information about the processing
Learn the purpose of processing and whether the data is used in accordance with that purpose
Learn the third parties to whom the data has been disclosed in Türkiye or abroad
Request correction of incomplete or inaccurate personal data
Request deletion or destruction where the applicable legal conditions are satisfied
Request that correction, deletion or destruction be communicated to relevant recipients
Object to a result arising against you through analysis exclusively by automated systems
Request compensation if you suffer damage due to unlawful processing
15.2 Additional Rights Where the GDPR or UK GDPR Applies
Where the GDPR or UK GDPR applies to our processing, you may also have the right to:
Access your personal data
Correct inaccurate or incomplete personal data
Request erasure of personal data
Restrict processing
Object to processing based on legitimate interests
Receive certain personal data in a structured, commonly used and machine-readable format
Request transmission of eligible data to another controller
Withdraw consent where processing is based on consent
Lodge a complaint with the competent data protection supervisory authority
Be informed about safeguards used for international transfers
These rights may be subject to statutory limitations and exceptions.
16. How to Exercise Your Rights
You may submit a privacy request by contacting us at:
Email: info@ozgglobal.com
Postal address:
OZG MEDYA TEKNOLOJİ VE DANIŞMANLIK TİCARET LİMİTED ŞİRKETİ
Nisbetiye Mahallesi, Gazi Güçnar Sokak, Uygur İş Merkezi No: 4, İç Kapı No: 2, Beşiktaş, Istanbul, Türkiye
Please include:
Your full name
Contact information
A clear description of your request
Information reasonably necessary to identify the relevant record
Any supporting documents required to verify your identity or authority
We may request additional information where reasonably necessary to verify your identity and protect personal data against unauthorised disclosure.
Requests will be answered within the period required by applicable law—generally within 30 days under KVKK and within one month where the GDPR or UK GDPR applies. Where legally permitted, we will inform you if an extension is required.
You may also have the right to submit a complaint to the Turkish Personal Data Protection Authority or, where applicable, the competent data protection supervisory authority in your country.
17. Children’s Privacy
Our website and services are intended for businesses and persons acting in a professional or commercial capacity. They are not directed at children, and we do not knowingly request personal data from children through the website forms.
18. Changes to This Notice
We may update this notice where our forms, service providers, processing activities or legal obligations change.
The current version will be published on this page together with its effective date. Material changes affecting existing processing activities may also be communicated through an appropriate additional notice.
19. Contact
For questions about this notice or the processing of your personal data, please contact:
OZG MEDYA TEKNOLOJİ VE DANIŞMANLIK TİCARET LİMİTED ŞİRKETİ
Email: info@ozgglobal.com