1. Data Controller
This Privacy Policy applies to the platform operated by Metz Octagon Engineering LTD, a company incorporated under the laws of the Republic of Türkiye (“Company”).
The Company acts as a data controller within the scope of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).
2. Categories of Data Collected
The Company may collect and process the following categories of data:
2.1 Identity and Contact Information
- First name and last name
- Company name
- Billing information
- Tax information
- Email address
- Phone number
- Delivery address
2.2 Account and Transaction Information
- User account credentials
- Order history
- Quotation records
- Invoice and payment information
Payments are processed via Stripe. The Company does not store credit card details.
2.3 Technical Data
- IP address
- Browser type and version
- Device information
- Usage data
- Cookie data
The Platform uses analytics tools including Google Analytics.
2.4 Technical Files and Manufacturing Data
- CAD files (e.g., STL, STEP, etc.)
- Technical drawings
- Specification documents
3. Purposes of Processing
Personal data is processed for the following purposes:
- Generating quotations
- Processing orders and manufacturing parts
- Issuing invoices
- Providing customer support
- Ensuring platform security
- Complying with legal obligations
- Improving service quality and performance
If marketing communications are introduced in the future, they will be conducted in compliance with applicable laws and subject to explicit consent where required.
4. Confidentiality of Technical Files
All technical files uploaded by customers are treated as confidential.
- Files are used solely for quotation and manufacturing purposes.
- Files are not sold or used for marketing purposes.
- Where subcontractors are involved in the manufacturing process, customer-identifying information is removed from files and documentation where reasonably possible.
- Subcontractors are bound by confidentiality obligations.
For projects requiring enhanced confidentiality, data may be stored on local servers upon request.
5. Data Storage and Retention
Data may be stored:
- On secure cloud servers located in Europe,
- Within protected data storage infrastructures,
- On local servers where required for specific confidential projects.
Technical manufacturing files may be retained for operational continuity, repeat production requests, commercial record-keeping, and legal compliance.
Data required under applicable tax and commercial regulations will be retained for the legally mandated period. Other data will be retained only as long as necessary for the purposes outlined in this Policy.
6. Data Sharing
Personal data may be shared, where necessary, with:
- Payment service provider (Stripe)
- Shipping and logistics providers
- Accounting and financial advisors
- Cloud service providers
- Analytics service providers (e.g., Google Analytics)
- Subcontractors involved in the manufacturing process
Data sharing is limited to what is necessary for service provision.
7. International Data Transfers
Data may be processed and stored within the European Union.
Where cross-border data transfers occur, they are conducted in accordance with KVKK and GDPR requirements, including appropriate safeguards where applicable.
8. Cookies
The Platform uses cookies.
Essential cookies are required for the proper functioning of the Platform.
Analytical cookies may be used to measure and improve performance.
Users may manage cookie preferences via the cookie consent banner.
9. Data Security
The Company implements appropriate technical and organizational measures to protect personal data, including:
- SSL encryption
- Access control restrictions
- Secure cloud infrastructure
- Internal authorization procedures
10. Data Subject Rights
In accordance with applicable data protection laws, users have the right to:
- Request access to their personal data
- Request correction of inaccurate data
- Request deletion of data (where legally permissible)
- Request restriction of processing
- Request data portability
- Object to processing under certain circumstances
Requests may be submitted to: [contact email address].
11. Updates
The Company reserves the right to update this Privacy Policy at any time. The updated version becomes effective upon publication on the Platform.