The Turkish text is the authoritative version. In case of any discrepancy between this translation and the Turkish original, the Turkish text prevails.
1. Identity of the data controller
This information notice has been prepared, in respect of the website published under
the mintylife.com.tr domain name belonging to the Minty Life brand and the
related digital channels, by the following company, which holds the capacity of
data controller under Personal Data Protection Law No. 6698 (Kişisel Verilerin
Korunması Kanunu) (the "Law").
| Title | Optimum Seramik Plastik Metal İmalat ve Toptan Ticaret Limited Şirketi (Optimum SPM) |
| Address | Yenibosna Merkez Mah. Kor Sk. No:8 Kat:3, Bahçelievler / İstanbul |
| MERSİS No | 0644065353400001 |
[email protected] |
|
| Registered electronic mail (KEP) address | [email protected] |
| Telephone | +90 533 727 22 79 |
Within this text, the expressions "Company", "we" or "Minty Life" refer to the legal entity above; the expressions "you" or "data subject" refer to the natural person whose personal data is processed.
2. Which of your personal data we process
Depending on how you use the site, only the relevant ones among the data categories below are processed. The presence of a category in this list does not mean that every visitor's data is processed.
| Category | Data covered |
|---|---|
| Identity | First name, last name |
| Contact | E-mail address, mobile telephone number |
| Request | Your bulk purchase and quotation requests: the products you request, colour and quantity information, company and contact person information, city, your message |
| Transaction security | IP address, cookie identifiers, server access records (logs), device and browser information |
| Marketing | On-site browsing and interaction data obtained through cookies and similar technologies, campaign interests |
| Legal proceedings | Records relating to request, complaint, warning and dispute processes |
| Visual/audio records | Images sent by you together with a support request |
Special categories of personal data: the special categories of data set out in Article 6 of the Law (health, religion, biometric data, etc.) are not requested in our systems. We kindly ask you not to enter such data into free-text fields on our site.
Data relating to children: the site is not directed at persons under the age of 18 and data is not knowingly collected from this age group.
3. For which purposes and on which legal basis we process your personal data
Article 10 of the Law requires the purpose of processing to be explained together with its legal basis. The table below sets out this mapping.
3.1 Fulfilment of our legal obligation — Law art. 5/2-(ç)
- Obligations under Law No. 6563 and the Electronic Commerce Information System (Elektronik Ticaret Bilgi Sistemi, ETBİS)
- Obligations to inform, retain documents and respond to consumer applications under Consumer Protection Law No. 6502 (Tüketicinin Korunması Hakkında Kanun)
- Responding to requests from authorised public institutions and organisations
3.2 Being necessary for the establishment, exercise or protection of a right — Law art. 5/2-(e)
- Creating evidence and exercising the right of defence in dispute, objection and legal proceedings
3.3 Our legitimate interest, provided that it does not harm your fundamental rights and freedoms — Law art. 5/2-(f)
- Ensuring the security of the site, servers and accounts; detecting unauthorised access and misuse
- Preventing forgery and fraud attempts
- Remedying service interruptions and technical errors, keeping records (logs)
- Conducting corporate communication and request management processes
3.4 Your explicit consent — Law art. 5/1
The following operations take place only if you separately and explicitly give your consent. Not giving your consent does not prevent you from using the site.
- Running non-essential cookies (analytics, performance, targeting/advertising) and measuring your site usage behaviour in this way
- Displaying personalised content and advertising according to your interests
- Transferring your personal data abroad where there is no adequacy decision or appropriate safeguard (see section 5)
You may withdraw the explicit consent you have given at any time. The cookie preference panel on the site or the application channels in section 8 are sufficient for this. Withdrawal of consent does not render unlawful the processing carried out up to the moment of withdrawal.
4. To whom we transfer your personal data
Your personal data is not sold, not rented and not transferred to third parties for marketing purposes. Transfers are made only for the purposes above and with the minimum data sufficient for the function of the relevant party.
| Recipient group | Purpose of transfer | Type of data transferred |
|---|---|---|
| Hosting, infrastructure and security service providers | Operation of the site, backup, attack protection | Transaction security data, technical records |
Brevo (e-mail delivery) |
Transmitting the information from the request form to us by e-mail | Identity, contact, request content |
PostHog (product analytics) |
Measuring site usage subject to consent | Cookie identifiers, browsing data |
| Legal advisers | Legal dispute and claim management | Data limited to the subject of the dispute |
| Authorised public institutions and organisations and judicial authorities | Requests for information and documents provided for by law | Data limited to the scope of the request |
Contracts are concluded with service providers requiring them to process your data only in line with our instructions and to take appropriate technical/administrative measures.
5. Transfer abroad
The servers of some of the service providers we use are located abroad. For this reason your personal data may be transferred abroad within the framework of Article 9 of the Law. The transfer is made only where a valid legal mechanism exists, in the following order:
- Adequacy decision — if the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) has issued an adequacy decision regarding the relevant country, sector or international organisation, the transfer is based on that decision.
- Appropriate safeguards — where there is no adequacy decision, the transfer is made if the standard contract announced by the Board is signed between the parties and notified to the Board within five business days of the date of signature, or if one of the safeguards listed in Article 9/3 of the Law, such as binding corporate rules, is provided.
- Incidental cases and explicit consent — if none of the above can be provided, the transfer is based on the exceptional cases in Article 9/6 of the Law or on the explicit consent you will give after being informed of the risks of the transfer.
| Service | Function | Data location |
|---|---|---|
PostHog (product analytics) |
Product and site usage analytics | EU (European Union) region |
Brevo (e-mail delivery) |
Sending transactional e-mail | EU (European Union) |
Cloudflare (content delivery network and bot protection) |
Content delivery, WAF, DDoS protection | Global edge server network |
6. By which method we collect your personal data
Your personal data is collected through the following channels, by wholly or partly automated means and by non-automated means provided that it forms part of a data recording system:
- Directly from you: through contact, support and bulk purchase / quotation request forms
- Automatically: during your visit to the site, through cookies, pixel tags, similar technologies and server access records
- Other channels: the WhatsApp contact line, e-mail and telephone correspondence
7. Retention periods
Your personal data is retained for the period necessary for the purpose for which it is processed and for the minimum periods prescribed by the relevant legislation. Where the period expires or the reason for processing ceases to exist, the data is erased, destroyed or anonymised.
| Data | Retention period | Basis |
|---|---|---|
| Bulk purchase and quotation requests | 2 years (End of the legitimate interest where no commercial relationship is established) |
Legitimate interest |
| Server access records (logs) | 6 months (Traffic record under Law No. 5651) |
Legitimate interest / legislation |
| Cookie data | The periods stated in the cookie policy | Explicit consent; legitimate interest for essential cookies |
| Support and complaint correspondence | 10 years (TBK art. 146 — general limitation period for contractual claims) from the end of the relationship |
Limitation periods |
8. Your rights under Article 11 of the Law
By applying to the data controller you may exercise the following rights:
- To learn whether your personal data is processed,
- To request information if it has been processed,
- To learn the purpose of processing and whether the data is used in accordance with its purpose,
- To know the third parties to whom the data is transferred, domestically or abroad,
- To request rectification if it has been processed incompletely or incorrectly,
- To request erasure or destruction within the framework of the conditions in Article 7 of the Law,
- To request that the operations carried out under (5) and (6) above be notified to the third parties to whom the data has been transferred,
- To object to a result arising against you as a consequence of analysis solely by automated systems,
- To request the remedy of the damage in the event that you suffer damage due to processing contrary to the Law.
Application procedure
You may submit your requests through one of the following channels in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ). Your application must contain your first name and surname, your signature (in written applications), your Turkish Republic identity number (passport number for foreign nationals), your address for notification, your e-mail and telephone for notification, if any, and the subject of your request.
- In writing: by applying in person at the address
Yenibosna Merkez Mah. Kor Sk. No:8 Kat:3, Bahçelievler / İstanbulor through a notary - By registered electronic mail (KEP):
[email protected] - By secure electronic signature or mobile signature:
[email protected] - From the e-mail address registered in our system: to
[email protected], using the e-mail address you previously notified to the Company and which is registered in our system
Your application will be concluded free of charge within thirty days at the latest, depending on the nature of the request. If the operation additionally requires a cost, the fee in the tariff determined by the Board may be charged. If your application is rejected, if you find the response given insufficient or if no response is given within the time limit, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within thirty days of the date on which you learn of the response and in any event within sixty days of the date of application.
9. Data security
In order to prevent the unlawful processing of your personal data and unlawful access to the data, appropriate technical and administrative measures are applied, including encryption in transfer and storage, authorisation and access control, multi-factor authentication for administrator accounts, firewall and attack protection, regular backups, log records and access monitoring, data minimisation, and confidentiality undertakings from personnel.
10. Updating of the text
This information notice may be updated in line with changes in legislation and with developments in our services and in the infrastructures we use. The current version is always published on this page; in the event of material changes, separate information will also be provided.
Effective date: 2026-08-13
Version: 1.0