Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how EBR METAL collects and uses personal data when you visit www.ebrmetal.com or contact us through it.

Who We Are

The data controller for this website is:

EBR METAL MAKİNE İÇ VE DIŞ TİC. LTD. ŞTİ.
Araplar Mah. Ankara Cad. No: 74/28, Karatay / Konya / Türkiye
Email: info@ebrmetal.com
Phone: +90 332 502 88 48

EBR INDUSTRIES is the group brand under which EBR METAL presents its websites. Personal data collected through this website is handled by EBR METAL only.

What Data We Collect

Data you give us

Contact form: first and last name, phone number, email address, company, country, subject and your message. You can also ask for a copy of your message and tick a box to receive EBR METAL updates.
Quote form: first and last name, email address, phone number, company, country, inquiry type, machine group, machine or model, quantity and your message. You can also tick a box to receive EBR METAL updates.
Newsletter: your email address.
Email, phone and WhatsApp: any details you choose to share when you write or call us directly.

Data collected automatically

Form submission details: the date and time, the page you sent the form from, your browser type and your IP address. These are attached to the message we receive.
Security and delivery data: your IP address and basic request data are processed by our hosting provider and by Cloudflare to deliver the site and protect it from attacks and spam.
Spam protection: our forms use Cloudflare Turnstile, which checks your browser for signs of automated activity before a form is sent.

We do not ask for sensitive data. Please do not include it in your messages.

How We Use Your Data

Purpose	Legal basis
Answering your inquiry and preparing quotations	Steps taken at your request before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c))
Sending EBR METAL updates and newsletters	Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1))
Website statistics (Google Analytics)	Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1))
Keeping the website secure and free of spam	Our legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f))
Meeting legal and tax obligations once you become a customer	Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç))

We do not sell your personal data and we do not use it for automated decision-making.

Who We Share Data With

We share data only with service providers who help us run the website and our email, and only as far as needed:

Cloudways (website hosting)
Cloudflare (content delivery, security and Turnstile spam protection)
Google Workspace (business email; form messages, replies and any newsletters are handled in our Google mailboxes)
Google Analytics (website statistics, only with your consent)
YouTube (Google) when you play an embedded video
EBR METAL sales and support staff
Authorised EBR METAL dealers or service partners in your region, only when you ask us to put you in touch with them

If you click our WhatsApp button or contact us on WhatsApp, the conversation runs on WhatsApp (Meta) and WhatsApp’s own privacy terms apply to it.

International Transfers

Some of our service providers process data outside Türkiye and outside the European Economic Area. Where this happens, we rely on the safeguards these providers offer, such as standard contractual clauses, and on the conditions of KVKK Article 9.

Cookies and Similar Technologies

www.ebrmetal.com uses the following technologies:

Security and spam protection: Cloudflare and Cloudflare Turnstile may set or read technical data to tell real visitors from bots.
Embedded videos: YouTube may set cookies once you play a video.
Statistics (only with your consent): we use Google Analytics to understand how visitors find and use the site, for example which pages are viewed, which country visitors come from and which catalogues are downloaded. Google Analytics cookies are set only after you accept them in the cookie banner. You can change your choice at any time through the cookie settings link at the bottom of every page.

We do not use advertising cookies.

Details are listed in our Cookie Policy.

How Long We Keep Data

Inquiries and quotation requests: for as long as needed to answer you and follow up on your request, and up to 3 years afterwards for business correspondence.
Website statistics: Google Analytics data is kept for 14 months.
Customer records: for the periods required by Turkish commercial and tax law.
Newsletter: until you unsubscribe.

Your Rights

Depending on where you live, you can ask us to:

tell you whether we process your personal data and give you a copy of it,
correct inaccurate data,
delete your data or restrict its use,
object to processing based on our legitimate interest,
withdraw your consent (for example, unsubscribe from updates) at any time,
move your data to another provider where this applies.

These rights come from the EU General Data Protection Regulation (GDPR), the UK GDPR, Article 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and other data protection laws that may apply to you. To use them, email info@ebrmetal.com. We will reply within 30 days. You may also complain to your local data protection authority or, in Türkiye, to the Personal Data Protection Authority (KVKK).