Skip to content
HMA Yeşil Enerji — Kuru Buz

Legal

Privacy and GDPR (KVKK) Policy

Why your personal data is processed, who it is shared with, the legal grounds behind it and the rights you hold.

Last updated: 1 February 2026

As HMA Yeşil Enerji (“HMA Dry Ice”) we process the personal data of our visitors and customers lawfully, transparently and securely under the Turkish Personal Data Protection Law no. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR).

Data controller

The data controller is HMA Yeşil Enerji. You may send any request concerning your personal data to kvkk@hmakurubuz.com.

Personal data we process

  • Identity and contact data: name, company name, telephone number, e-mail address, delivery address.
  • Customer transaction data: quote requests, order history, shipment records, invoicing details.
  • Transaction security data: IP address, browser and device information, on-site navigation records.
  • Marketing data: newsletter subscription and communication permissions (only with your explicit consent).

Purposes of processing

  • Responding to quote and order requests, forming and performing the contract
  • Product delivery, shipment planning and after-sales support
  • Issuing invoices and meeting statutory retention obligations
  • Maintaining website security and improving service quality
  • Sending commercial electronic messages where explicit consent has been given

Your data is processed on one of the following grounds: necessity for the conclusion or performance of a contract, compliance with a legal obligation, legitimate interest, or explicit consent.

Transfers

Your personal data may be transferred — limited to the purpose and only to the extent necessary — to courier and transport companies, accounting and financial advisory providers, hosting and e-mail infrastructure providers, and to authorised public institutions. Transfers abroad only take place where the conditions required by KVKK and GDPR are met.

Retention period

Data is retained for as long as the processing purpose requires and until the end of the limitation and retention periods set out in the relevant legislation; once the period expires it is deleted, destroyed or anonymised.

Your rights

  • To learn whether your personal data is processed and to request information about it
  • To learn the purpose of processing and whether the data is used in line with that purpose
  • To know the third parties to whom data is transferred domestically or abroad
  • To request correction of incomplete or inaccurate data
  • To request erasure or destruction
  • To request that correction, erasure and destruction be notified to third parties
  • To object to a result against you produced solely by automated analysis
  • To claim compensation for damage arising from unlawful processing

Any questions?

Send any request regarding this text to kvkk@hmakurubuz.com.