Introduction
Sarboy Entegre Tekstil A.Ş. ("Sarboy", "we", "our", or "us") is committed to protecting the privacy and personal data of every individual who interacts with our company, website, or business operations. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over your information.
As an integrated knitted fabric manufacturer operating globally — exporting to over 55 countries — we understand that responsible data handling is an integral part of being a trusted B2B partner and a holder of international certifications including OEKO-TEX Standard 100, GOTS, GRS, ISO 9001, ISO 14001, and ISO 45001.
This Policy applies to all visitors of sarboytekstil.com.tr, prospective and existing B2B customers, suppliers, business representatives, and job applicants. By using our website or communicating with us, you acknowledge the practices described herein.
Data Controller
The data controller responsible for your personal data as defined under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR), is:
Sarboy Entegre Tekstil A.Ş.
Integrated textile manufacturer and B2B production partner
Web: sarboytekstil.com.tr
Country of establishment: Republic of Türkiye
For all inquiries regarding the processing of your personal data, please contact our designated data protection contact listed in Section 10 of this Policy.
Personal Data We Collect
We collect only the personal data necessary for our business operations and the purposes described below. The categories of data we may collect include:
3.1 Business & Contact Information
- Full name, job title, and company name
- Business email address and phone number
- Business mailing and shipping address
- Country and region of operation
- Communication preferences
3.2 Transaction & Order Data
- Product specifications, quantities, and order details
- Fabric type preferences and technical requirements
- Delivery instructions and logistics data
- Invoicing information (company tax numbers, bank details)
3.3 Website Usage Data
- IP address and approximate geographic location
- Browser type, version, and device information
- Pages visited, time spent, and navigation paths
- Referring URLs and search terms
- Cookie data (see Section 7)
3.4 Communication Data
- Content of emails, messages, and inquiry forms sent to us
- Records of calls or video conferences (where legally required)
- Trade fair and event interaction records
3.5 Employment & Application Data
- CV, cover letter, education, and work history
- Skills, certifications, and references
- Identity and contact information for candidates
Purposes & Legal Basis of Processing
We process personal data based on one or more of the following legal grounds under KVKK and GDPR:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Responding to inquiries & quotations | Contact, communication data | Legitimate interest / Pre-contractual steps |
| Order management & production | Transaction, contact data | Contract performance |
| Export & logistics compliance | Transaction, identity data | Legal obligation |
| Supplier & partner management | Business, contact data | Contract performance / Legitimate interest |
| Website analytics & improvement | Usage, cookie data | Consent / Legitimate interest |
| Marketing communications (B2B) | Contact, communication data | Consent / Legitimate interest |
| Legal compliance & record-keeping | All relevant data | Legal obligation |
| Certification & audit compliance | Transaction, supplier data | Legal obligation / Contract |
| Recruitment & HR processes | Application, identity data | Consent / Pre-contractual steps |
| Security & fraud prevention | Usage, contact data | Legitimate interest / Legal obligation |
Data Sharing & Disclosure
Sarboy does not sell your personal data. We may share your data with trusted third parties only when necessary and under appropriate safeguards:
- Logistics & freight partners — to process international shipments and customs clearance across our 55+ export markets
- IT service providers — hosting, email, and website management providers operating under data processing agreements
- Certification bodies — auditors and certification agencies (e.g., OEKO-TEX, GOTS, Higg Index) as required for compliance
- Financial & legal advisors — accountants, lawyers, and banking partners for invoicing and contractual matters
- Regulatory authorities — Turkish government bodies and relevant foreign authorities when legally required
All third-party processors are required to handle your data confidentially and only for the specified purposes. Where data is transferred outside of Türkiye, we ensure appropriate safeguards are in place as required by KVKK Article 9 and GDPR Chapter V.
International Data Transfers
Given our global operations spanning more than 55 countries across Europe, Asia, Africa, the Americas, and the Middle East, some processing of personal data may involve cross-border transfers.
When transferring personal data internationally, we apply the following safeguards:
- Transfers to countries deemed adequate by relevant data protection authorities
- Standard Contractual Clauses (SCCs) approved by the European Commission for EU-originating data
- Contractual commitments and binding agreements with third parties ensuring equivalent protection under KVKK
- Your explicit consent where required by applicable law
Cookies & Tracking Technologies
Our website uses cookies and similar technologies to operate properly, understand visitor behavior, and improve your experience:
| Category | Purpose | Required |
|---|---|---|
| Essential | Enable core website functions (navigation, forms, security) | Always active |
| Analytics | Measure website traffic and visitor behavior (e.g., Google Analytics) | Consent required |
| Functional | Remember language and display preferences | Consent required |
| Marketing | Track referral campaigns and marketing performance | Consent required |
You may manage your cookie preferences at any time through your browser settings or our cookie consent tool. Disabling essential cookies may affect website functionality.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law:
- Customer & order records: 10 years after the end of the business relationship (Turkish Commercial Code requirements)
- Tax and invoicing records: 5–10 years as required by Turkish tax legislation
- Marketing contact data: Until consent is withdrawn or 3 years from last interaction
- Job applications (unsuccessful): 2 years, or 6 months if no explicit consent for longer retention
- Website analytics data: 26 months from collection (anonymized thereafter)
- Certification & compliance records: Duration required by the issuing certification body
After the applicable retention period, data is securely deleted or anonymized in accordance with our internal data destruction procedures.
Your Data Protection Rights
Under KVKK Article 11 and applicable GDPR provisions, you have the following rights regarding your personal data:
Right to Access
Obtain confirmation of whether we process your data and receive a copy of it.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your data where there is no longer a legal basis for processing.
Right to Object
Object to processing based on legitimate interests, including direct marketing.
Right to Restrict
Request restriction of processing in certain circumstances while a dispute is resolved.
Right to Portability
Receive your data in a structured, machine-readable format (GDPR, where applicable).
Withdraw Consent
Withdraw previously given consent at any time without affecting past processing.
Right to Complain
Lodge a complaint with the Turkish KVKK Authority or your local supervisory authority.
To exercise any of these rights, please submit a written request using the contact details in Section 10. We will respond within 30 days (KVKK) or 1 month (GDPR). Identity verification may be required.
Turkish data protection authority: www.kvkk.gov.tr
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please reach out to us:
Sarboy Entegre Tekstil A.Ş.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our business practices, legal requirements, or operational needs. When we make material changes, we will update the "Last Updated" date at the top of this page and notify affected individuals where appropriate.
We encourage you to review this Policy regularly. Your continued use of our website or services after any update constitutes acceptance of the revised Policy.
This Privacy Policy was last reviewed and approved on April 14, 2026. Previous versions are available upon request.