Personal Data Protection Notice (KVKK)
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), Latro Kimya Dış Ticaret A.Ş., acting as data controller, explains below how we process the personal data we obtain through latro.com.tr.
Last updated: August 5, 2026
1. Data Controller
Your personal data is processed by Latro Kimya Dış Ticaret A.Ş. as data controller, within the scope described below.
- Company: Latro Kimya Dış Ticaret A.Ş.
- Address: Hadımköy, İbni Sina Cd. No: 3, 34279 Arnavutköy / İstanbul
- E-mail: info@latro.com.tr
- Phone: +90 212 771 60 36
2. Personal Data We Process
Different categories of data are processed depending on which action you take on our website. The table below lists everything we collect for each action.
| Action | Data processed |
|---|---|
| Account registration | First and last name, e-mail, password (stored as an irreversible hash), company, phone, job title, department, country, industry, language preference |
| Product or sample request | Name, e-mail, company, phone, requested products, message, preferred meeting date, country |
| Technical document request (TDS / MSDS) | Your account details, requested product and document type, your note if provided |
| Order and delivery tracking | Order number, order status, carrier and tracking number, delivery notes |
| Job application | Full name, date of birth, education, experience, e-mail, position applied for, motivation letter, IP address |
| Contact form | Name, e-mail, phone, message content |
| Website usage | Anonymised visitor key, visit date, pages and products viewed, country, browser and device information |
| LUPİ AI assistant | Text and voice messages you send to the assistant, usage counters (for daily quota tracking) |
| E-mail delivery | Recipient address, subject and content of the sent e-mail (retained for a maximum of 90 days) |
3. Purposes of Processing
- Creating your account, authenticating you and securing your account
- Fulfilling product, sample and technical document requests
- Managing order processes and sharing delivery and tracking information
- Scheduling meeting requests and sending reminder e-mails
- Evaluating job applications and running recruitment processes
- Responding to requests, suggestions and complaints
- Securing the website and preventing bot activity and abuse
- Measuring website usage and improving content and service quality
- Providing the AI-assisted technical consultation service and tracking usage quotas
- Fulfilling our legal obligations and exercising our right of defence against legal claims
4. Legal Grounds
Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:
- Processing is directly related to the conclusion or performance of a contract (membership, orders and requests)
- Processing is mandatory for the data controller to fulfil its legal obligations (commercial and tax record-keeping)
- Processing is necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms (site security, usage analysis, service improvement)
- Processing is mandatory for the establishment, exercise or protection of a right
- Your explicit consent (non-essential cookies and marketing communications)
5. Transfer of Personal Data
Your personal data may be shared with the parties below to the extent necessary to provide the service, in accordance with Articles 8 and 9 of the KVKK. Some of these service providers host their servers outside Türkiye.
| Recipient | Purpose of transfer |
|---|---|
| Cloudflare, Inc. (US/EU) | Website hosting, database, file storage and bot protection |
| Google LLC — Analytics (US) | Measuring website usage statistics |
| Google LLC — Gemini (US) | Operating the LUPİ AI assistant |
| Google LLC — Workspace (US) | Corporate e-mail infrastructure |
| Microsoft Corporation — Azure (US/EU) | Text-to-speech service for the voice assistant |
| Authorised public institutions | Information and document requests arising from legislation |
| Legal, financial and audit advisors | Fulfilment of legal obligations |
6. Method of Collection
Your personal data is collected through membership, request, application and contact forms on the website, through cookies and similar technologies, and via e-mail correspondence, by wholly or partly automated means.
7. Retention Periods
| Data | Retention period |
|---|---|
| Account information | For as long as your membership continues; after deletion, for the applicable statutory limitation periods |
| Request, order and document request records | For the duration of the commercial relationship and statutory retention obligations (as a rule, 10 years) |
| Job application records | A maximum of 2 years from the evaluation of the application |
| Sent e-mail records | 90 days (deleted automatically) |
| Session records | Deleted automatically when the session expires |
| Security and rate-limiting records | 24 hours |
| Website usage statistics | Kept in anonymised form |
8. Your Rights (KVKK Article 11)
By applying to the data controller, you may exercise the following rights:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether the data is used in accordance with that purpose
- Know the third parties to whom the data is transferred, in Türkiye or abroad
- Request correction if the data is incomplete or incorrectly processed
- Request erasure or destruction under the conditions of Article 7 of the KVKK
- Request that correction, erasure and destruction be notified to third parties to whom the data was transferred
- Object to a result against you arising from analysis carried out exclusively by automated systems
- Claim compensation if you suffer damage due to unlawful processing
9. How to Apply
You may submit your requests, together with information verifying your identity, by e-mail to info@latro.com.tr or in writing to Hadımköy, İbni Sina Cd. No: 3, 34279 Arnavutköy / İstanbul.
Your request will be concluded free of charge as soon as possible and within thirty days at the latest. If the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
If your application is rejected, you find the response insufficient or no response is given within the period, you retain the right to file a complaint with the Personal Data Protection Board.