Skip to content
Raw material supply for functional food and supplement manufacturersRequest a sampleMember login
English

Privacy

Privacy Notice on the Processing of Personal Data

Prepared pursuant to Article 10 of the Personal Data Protection Law No. 6698 (KVKK). This notice explains which data are actually collected on this site and what they are used for.

Last updated: September 28, 2026 · version 2026-09-28

This translation is provided for information only; the legally binding version is the Turkish original.

1. Data controller

The data controller is Phytonet. Address: Untere Paulistrasse 51, 8834 Schindellegi-Feusisberg, Switzerland. Contact: info@phytonet.com.

2. What data are processed and for what purpose

The table below covers all data collected on this site. Data not listed here are not collected.

Quote, sample and information form

Data processed
Full name, company name, email, phone, subject of the request, sample quantity, your message, IP address and time of submission.
Purpose
To handle your request, manage the sample and quotation process and prevent misuse of the form.
Legal basis
Establishment and performance of a contract (Art. 5(2)(c) KVKK); legitimate interest for the IP log (Art. 5(2)(f) KVKK).

Member area account

Data processed
Email, full name, company, job title, phone, membership date, last login time.
Purpose
To provide access to members-only technical documents and announcements.
Legal basis
Performance of a contract (Art. 5(2)(c) KVKK).

Login and document access logs

Data processed
Email, IP address, result of login attempts, which document was viewed and when.
Purpose
Account security, detecting unauthorized access and being able to track who has received technical files.
Legal basis
Legitimate interest (Art. 5(2)(f) KVKK).

Customer relationship records

Data processed
Company details, contact persons, meeting notes, request history, responsible account manager.
Purpose
To manage the business relationship and follow up on requests.
Legal basis
Performance of a contract (Art. 5(2)(c) KVKK) and legitimate interest (Art. 5(2)(f) KVKK).

Commercial electronic messages

Data processed
Your email address and the record of your consent.
Purpose
To send announcements about new products, stock availability and events.
Legal basis
Your explicit consent. It is obtained only if you tick the relevant box on the form; you can withdraw it at any time.

3. Method of collection

Data are collected electronically, solely through the forms you fill in, member area logins and the technical logs generated by the server during these operations (IP address, timestamp). We do not purchase data from third parties.

4. Transfers abroad

The site and database are hosted on Cloudflare infrastructure, and notification emails are sent via Resend. As the servers of both service providers are located outside Türkiye, your data are transferred abroad within the meaning of Art. 9 KVKK. The transfer is necessary to provide the service technically.

Visitors who type phytonet.org into the address bar without the leading “www” reach this site through the forwarddomain.net redirect service. This service's server is located outside Türkiye; for the request to be forwarded technically, your IP address and browser information reach that server. The service provider states that it does not keep traffic or visitor logs. This service is not involved when you use the portal.phytonet.org address directly.

Apart from this, your personal data are not sold to third parties or shared for marketing purposes. They are disclosed only upon request by legally authorized public authorities and only to the extent required by law.

5. Retention periods

  • Form requests and customer relationship records: 10 years from the end of the business relationship (retention periods under the Turkish Commercial Code and the Tax Procedure Law).
  • Membership record: for as long as the membership continues; 2 years after it is closed.
  • Login and document access logs: 2 years.
  • Consent to commercial messages: until you withdraw it; after withdrawal, 3 years for evidentiary purposes (the consent record itself).

Once the period expires, the data are deleted or anonymized.

6. Cookies

This site does not use advertising, tracking or analytics cookies. There is no Google Analytics, pixel or similar third-party tracker.

The only cookie used is the phytonet_oturum cookie, which is set when you log in to the member area. It keeps your session open, expires after 30 days and cannot be read by browser scripts (HttpOnly). Because it is strictly necessary for the service to work, it does not require consent; that is why no cookie consent banner is shown to you. It is deleted when you log out.

The map on the contact page is displayed using OpenStreetMap data via the openfreemap.org tile server and is not loaded until you click the “Show map” button. As long as you do not click it, no request is sent from this page to that server; when you click it, your IP address and browser information are transmitted to that server. The tile server does not set cookies or track you for advertising purposes, but your IP address still reaches a third party — which is why we leave the decision to you. Instead of using the map, you can read the address and look it up in your own map app.

7. Your rights

Under Art. 11 KVKK, you have the right to:

  • Learn whether your personal data are processed
  • Request information about the processing if your data have been processed
  • Learn the purpose of the processing and whether your data are used in accordance with that purpose
  • Know the third parties in Türkiye or abroad to whom your data have been transferred
  • Request rectification if your data have been processed incompletely or inaccurately
  • Request erasure or destruction of your data under the conditions set out in the Law
  • Request that third parties to whom your data have been transferred be notified of any rectification, erasure or destruction
  • Object to an outcome to your detriment arising from the analysis of your data exclusively by automated systems
  • Claim compensation if you suffer damage due to the unlawful processing of your data

8. Applications

You can send requests concerning your rights to info@phytonet.com. Your application will be concluded within 30 days at the latest. So that we can verify your identity, your application must include your full name, company and the email address you use to communicate with us.

If you are a member, you can correct your name, company and contact details yourself on the My profile page.