Communication and quote request privacy notice

Last updated: 8 October 2026

Data controller

Arma Elektronik Metal San. ve Tic. Ltd. Şti. operates at Şerifali Mah. Başer Sok. No:31-33 Ümraniye, Istanbul, Turkey. This text has been prepared to inform individuals and company representatives who submit communication, quote, and technical support requests via the website, in accordance with Article 10 of the Personal Data Protection Law No. 6698.

Processed data and method of collection

Your first and last name, email address, information regarding your company and position, your phone number if shared; your message, request type, product and project information, and personal data contained in uploaded files may be processed. This data is obtained electronically or verbally through your entries in website forms, file uploads, or subsequent email and phone communication. It is processed by automated methods or non-automated methods that are part of a data filing system.

Purposes of processing and legal grounds

To understand your contact request, forward it to the relevant team, answer your technical questions, and follow up on correspondence: Article 5/2-f of the Law: Arma’s legitimate interest in request management and communication, provided it does not harm your fundamental rights and freedoms.

To carry out quotes, product selection, and pre-contractual processes directly related to a potential or existing contract to which you are a party: Article 5/2-c of the Law: necessity for the establishment or performance of a contract.

To evaluate a quote submitted on behalf of a company, communicate with the representative, and coordinate the commercial process: Article 5/2-f of the Law: legitimate interest in evaluating commercial requests, provided it does not harm your fundamental rights and freedoms.

To maintain necessary correspondence and evidence records regarding a specific right or dispute: Article 5/2-e of the Law: necessity for the establishment, exercise, or protection of a right.

To meet lawful information requests from authorized authorities and fulfill mandatory obligations: Article 5/2-a or 5/2-ç of the Law, depending on the relevant obligation.

Submitting a request via the form is not considered consent for promotional emails. Arma does not send promotional emails.

Recipients and purposes of transfer

Information may be used by authorized Arma employees evaluating your request. Data is processed via Webflow and Microsoft 365 services to provide form and email services; notifications are sent to arma@arma.com and sales@arma.com. Customer and quote data received through this site is not shared with Armatechnik GmbH. Information required in the context of legal obligations or specific disputes may be forwarded to authorized public institutions, judicial authorities, or legal advisors.

The necessary data processing and international transfer arrangements for Webflow and Microsoft 365 services have been completed. Transfers carried out through these services are subject to the applicable transfer arrangements under Article 9 of Turkish Law No. 6698.

Retention period

Quote requests that do not convert into sales are stored for two years from the date of the last communication. Once the purpose of responding to and following up on contact requests has been fulfilled, they are moved to the deletion process unless there is another valid processing or retention reason. Records of requests that convert into sales are subject to the retention policies governing customer and contract processes. Documents required in the context of a specific dispute or legal retention obligation are evaluated separately; this does not constitute a justification for the indefinite retention of the entire application file.

Your rights and application

Under Article 11 of the Law, you have the right to learn whether your personal data is being processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in accordance with that purpose; to know the third parties to whom it is transferred domestically or abroad; to request the correction of incomplete or inaccurate data; to request the deletion or destruction of data within the framework of the conditions set forth in Article 7 of the Law; to request that the recipients be notified of the correction and deletion/destruction processes; to object to any outcome against you resulting solely from analysis by automated systems; and to request compensation for damages incurred due to unlawful processing.

You may submit your request in writing to the company address provided above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or via the email address you have previously registered in our system by sending it to arma@arma.com. Including "Personal Data Request" in the subject line of your email will facilitate the routing process. Your application must include the identity, contact, and request information required by the Communiqué. Only the information necessary for identity verification will be requested. Applications will be concluded as soon as possible and within thirty days at the latest, depending on their nature; if the process incurs additional costs, a fee may be charged in accordance with the tariff determined by the Board.