Privacy and Data Protection

1. Data Controller

The data controller is Sabır Konfeksiyon San. Tic. Ltd. Şti.

Address: Mehmet Nesih Özmen Mah. Pelit Sok. No: 26/10, İssa İş Merkezi, 34173 Güngören / İstanbul

Email: info@danielvoiwholesale.com · Phone: +49 151 40367236

Registered electronic mail (KEP): sabirkonfeksiyon@hs01.kep.tr

MERSIS no: 073 605 036 100 0019

Tax office / tax number: Merter Vergi Dairesi — 736 020 3610

Trade registry office / number: İstanbul — 450092

2. Personal Data We Process

We process the data you give us and — only if you accept cookies — data about how you use the site. There is no hidden data collection on this site.

• When you create an account: full name, email address, your password (stored irreversibly hashed — we cannot read it), phone, company name, country, city, website/Instagram, type of business, tax number and preferred language.
• When you send a contact request or book a meeting: full name, email, phone, company, country, your message, the models you selected and the date/time you chose.
• When you subscribe to our newsletter: your email address, language preference, the date you gave consent and the page where you gave it.
• When you send a contact or meeting request, we also record how you reached the site (search engine, referring website, campaign tag and ad click identifier if any), the first page you landed on, and the site language selected at that moment. We keep this only to measure which promotional effort actually produced enquiries; it is not used to identify you and is not shared with third parties.
• If you accept cookies: the pages you visit, the products you view and add to your list, the words you search for on the site, your device and browser, your approximate location (country/city), and your mouse, scrolling and click activity on our pages. Details in section 3.
• Technically: the IP address of requests reaching our servers is held briefly in server memory to rate-limit sign-up and sign-in attempts (abuse prevention). It is not stored permanently.
• When you email us or fill in the contact form: your name, email address, the subject and text of your message, the name, type and size of any attached files, the time of sending and the message's technical headers. Our replies to you are added to the same record. Details in section 9.
• When you message us on WhatsApp: your phone number, your WhatsApp profile name, your messages, the photos, documents and voice notes you send, and the time they were sent. Our WhatsApp replies are added to the same record. See section 9.

3. Cookies and Local Storage

This site uses Google Analytics 4 to measure visit statistics, and that tool places cookies in your browser. Cookies are loaded only if you explicitly consent: if you choose "Decline" in the banner at the bottom of the site, or make no choice at all, no tracking cookie is written and no data is sent to Google. To change your decision, clear this site's data in your browser and the banner will appear again.

Google Analytics shows us how many people visit the site, which pages are read, which products are viewed and added to the list, whether the meeting page is opened and a form submitted, which words are searched for on the site, and from which country, on which device and via which link visitors arrive. It presents these reports to us in aggregate; it does not know your name or email address, but it uses an identifier cookie to tell your browser apart. The name, email, phone and message you type into our forms are not sent to Google — only the fact that a form was submitted. Text you type into the search box, however, is sent as it is — so we recommend not entering personal information there. We do not sell this data. The measurement infrastructure is operated by Google Ireland Limited and data may be processed on servers outside Türkiye (see section 7). Google's own policy: policies.google.com/privacy

Ad measurement and remarketing (Google Ads). If you give consent, Google Analytics data is linked to our Google Ads account. We use this for two purposes: to measure which of our ads actually produced enquiries, and to be able to show our ads again to people who have visited our site — in Google search results, on YouTube and on other sites in Google's advertising network. For this, Google may add your browser to a list of people who visited our site; that list does not contain your name or email address. To manage the ads Google shows you: myadcenter.google.com

The same consent also loads a second measurement tool: Microsoft Clarity. Clarity records your interactions on our pages (mouse, scrolling, clicks and the page as rendered at that moment) and replays them to us; it also produces heatmaps. We use this to find and fix where the site makes things difficult. This is not a screen recording: your device screen, other tabs, camera and microphone are never captured — only your interaction inside our own pages. Text you type into fields is masked by default. The tool is operated by Microsoft Corporation and data may be processed on servers outside Türkiye (see section 7). If you choose "Decline" in the cookie banner, or make no choice at all, Clarity is never loaded.

Your consent itself (`dv.cookieConsent`) is stored in your browser's local storage rather than in a cookie — so that someone who refuses cookies is not given one.

For the site to work, the following are also kept in your browser's storage (localStorage and sessionStorage); except where stated below, they are not sent to our servers:

• `lang` — the site language you selected.
• `dv.currency` / `dv.fx` — the currency you chose to see prices in, and the last known exchange rate. Not sent to our servers; only if you submit a meeting request do we record which currency your request was shown in.
• `selection` — the list of models you collected for your meeting (name, colour, photo, price and quantity). This list reaches us only when you submit a meeting request.
• `customerToken` / `customerUser` — what keeps you signed in, if you have an account.
• `dv.cookieConsent` — the choice you made in the cookie banner (accept/decline).
• `dv.attr` — a record of how you reached the site (source, campaign tag, referring address). Stored only if you accept cookies, and it reaches us only when you submit a form, together with your request.
• `dv.searchSwipeHint` — shows the swipe hint on the search page once per session; deleted when you close the tab.

4. Purposes and Legal Bases

• To assess your wholesale enquiry, prepare a quotation and schedule your meeting — necessary for entering into or performing a contract.
• To create your account, verify your email address and keep your session secure — contract performance and legitimate interest.
• To send collection, price list and capacity announcements — based solely on your explicit consent, which you may withdraw at any time.
• To measure how you use the site and find and fix where it makes things difficult (Google Analytics, Microsoft Clarity) — your explicit consent, given through the cookie banner; without it this processing does not take place.
• To measure the results of our ads and show ads to people who have visited our site (Google Ads) — your explicit consent.
• To record which promotional effort your enquiry came from (the link and, if any, the ad through which you reached the site) — our legitimate interest in measuring which promotional effort works. This information is kept only in our own records, is not shared with third parties, and is written to your device only if you accept cookies.
• To prevent abuse and maintain system security — legitimate interest.
• To comply with our legal obligations.
• To keep the emails and contact-form messages you send us, together with our replies, in a single correspondence record — necessary for answering your enquiry and for our statutory obligation to retain commercial correspondence.

5. Marketing Consent Is Separate

Creating an account does not mean you have agreed to receive marketing. Marketing consent is a separate, optional checkbox; your account works without it.

To leave our mailing list, use the unsubscribe link at the bottom of any email, or clear the checkbox in your account. Your request takes effect immediately.

6. Sharing

We do not sell your personal data. Your data is processed by the service providers below; of these, Google also receives data to measure and show our ads — only if you accept cookies:

• Hosting and site infrastructure: Vercel Inc.
• Database: MongoDB Atlas (MongoDB, Inc.)
• Email delivery: Resend (verification, meeting notifications and newsletter)
• Visit measurement and advertising: Google Ireland Limited (Google Analytics, Google Ads) — only with your cookie consent.
• Session recording and heatmaps: Microsoft Corporation (Microsoft Clarity) — only with your cookie consent.
• Image storage and delivery: Cloudinary (product images only — contains no personal data)
• Map embed: the map on our contact page is loaded from OpenStreetMap servers. In doing so your browser's IP address reaches the OpenStreetMap Foundation — the map writes no cookie and is not used to identify you.
• Receipt of email (our mailbox): Cloudflare, Inc. (Email Routing ve R2 dosya deposu) ve Google LLC (Gmail — yedek kopya)
• WhatsApp messaging: Meta Platforms Ireland Limited (WhatsApp Business Platform)

7. International Transfers

Some of the suppliers we use (Google, Microsoft, Meta, Vercel, MongoDB, Resend, OpenStreetMap) host servers outside Türkiye; your data may be processed in those countries.

8. Retention

• Account data: for as long as your account exists. If you delete your account, it is erased immediately (see below).
• Enquiry and meeting records: for 10 years following the end of the commercial relationship (Article 82 of the Turkish Commercial Code), due to statutory bookkeeping obligations.
• Newsletter subscription: for as long as you remain subscribed. If you unsubscribe, your record is deactivated and you receive no further email; the record of when consent was given and withdrawn is retained as proof.
• Email and contact-form correspondence: 10 years from the last message (Article 82 of the Turkish Commercial Code), as commercial correspondence.

9. Correspondence Record (Email and Contact Form)

When you write to us by email or through the contact form, your message is stored in a single correspondence record tied to your email address; your later messages and our replies are added to the same record. We do this so that, whichever channel you use, we can see the history of your enquiry and answer you consistently.

What the record contains: the sender's name and email address, recipient and CC addresses, subject, message text, time of sending, the technical headers showing which message a reply belongs to, and the sender-authentication results (SPF/DKIM/DMARC — used to tell forged sender addresses apart). The record may also hold the status of your enquiry (new, in discussion, quoted, etc.), whose turn it is to reply, and our team's internal notes about your enquiry.

When storing the message text we trim the quoted parts that repeat in replies (copies of earlier messages that reappear at the bottom); only the newly written part is kept.

Attachments and the original message: the files you attach and the raw (original) copy of your email are stored in the file storage named in section 6 (Cloudflare R2) and are subject to the same retention period as the correspondence record. Attachments can be downloaded only by our authorised team through the administration panel.

Only our authorised team can access the correspondence record, through the administration panel protected by two-step verification. The record is held with the database provider named in section 6.

WhatsApp: messages you send to our WhatsApp Business number reach us through Meta's infrastructure and are stored in a correspondence record linked to your phone number, under the rules described above. Photos, documents and voice notes you send are kept in the same file store (Cloudflare R2). WhatsApp's own business policy: whatsapp.com/legal/business-policy

10. Your Rights

You may contact us to exercise the following rights:

• To learn whether your personal data is being processed and, if so, to request information about it.
• To learn the purpose of processing and whether the data is used accordingly.
• To know the third parties to whom your data has been transferred, in Türkiye or abroad.
• To request correction of incomplete or inaccurate data.
• To request erasure or destruction of your data.
• To request that corrections and erasures be notified to third parties to whom the data was transferred.
• To object to a decision produced solely by automated analysis that has an adverse effect on you.
• To claim compensation if you suffer damage due to unlawful processing.

11. Deleting Your Account

You can delete your account yourself at any time: My Account → Delete My Account. This cannot be undone.

Your account data (name, email, phone, company, address details, password and saved models) is permanently removed from the database; any newsletter subscription is ended; upcoming meetings are cancelled and those time slots become available again.

Past enquiry and meeting records are not deleted, because of the statutory retention obligation above, but they are anonymised — your name, email, phone and company are removed from them.

Your email and contact-form correspondence is commercial correspondence, so it is not affected by account deletion and is kept for the period in section 8; if you want it deleted, you can apply as described in section 12 — records not covered by a statutory retention obligation are deleted.

12. Contacting Us

Please send requests concerning your rights to info@danielvoiwholesale.com. We respond within 30 days at the latest.

If you are not satisfied with our response, you may lodge a complaint with the Turkish Personal Data Protection Board or, if you are in the EU, with your local supervisory authority.

13. Changes

If we change this notice we will publish the updated version on this page and change the "last updated" date above. For significant changes we will notify account holders by email.