Privacy Notice

1. Data controller

Legal name

Cas Seed Tohumculuk San. ve Tic. Ltd. Şti.

Address

Samanlı Mahallesi, 2. Saray Sk. No: 29, 16290 Yıldırım / Bursa, Türkiye

E-mail

info@casseed.com.tr

Phone

+90 224 351 53 14

2. Personal data we process

• Identity: first and last name.
• Contact: phone number, e-mail address, province and district.
• Request details: requester type (farmer, dealer, cooperative, company), company name, varieties of interest, intended use, planting area and season, preferred channel and time, your message.
• Marketing: your consent to commercial electronic messages and when you gave it.
• Security: submission time, the version of the consent text you accepted, browser information and a keyed, irreversible digest of your IP address (the raw IP address is never stored).
• Site usage: anonymous visit data collected without cookies (see section 8).

3. Purposes

• Answering your request and recommending hybrids suited to your region and needs.
• Referring you to an authorised dealer where appropriate and following up.
• Prioritising follow-ups and measuring service quality.
• Sending campaign, product and seasonal updates, only with your explicit consent.
• Preventing form abuse, automated submissions and spam; ensuring information security.
• Complying with legal obligations and requests from competent authorities.

4. Collection method and legal bases

Your data is collected electronically, directly from you, through the forms on our website, on the following legal bases:

• Explicit consent (KVKK Art. 5/1): the consent box on the request form; and, if ticked, commercial messages and the newsletter.
• Necessity for entering into or performing a contract (Art. 5/2-c): pre-sale discussions and quotations.
• Legitimate interest (Art. 5/2-f): preventing spam and abuse, prioritising requests, anonymous site statistics.
• Compliance with legal obligations (Art. 5/2-ç).

5. Transfers

• To our authorised dealers in your region, only as needed to answer your request.
• To hosting, e-mail and infrastructure providers acting as data processors under confidentiality obligations.
• To competent public authorities upon request.

Website traffic passes through a content delivery network (CDN) provider for security and performance. Whether this constitutes a cross-border transfer and its legal basis under KVKK Art. 9 must be assessed by legal counsel before publication.

6. Retention

• Information requests: 2 years after the request is closed, after which personal fields are deleted or anonymised.
• Consent to commercial messages: 3 years after the consent ends (burden of proof).
• Newsletter subscription: until you unsubscribe.
• Raw cookieless measurement records: 13 months; anonymous daily totals are kept indefinitely.

These periods are placeholders and must be aligned with the Company's data retention and destruction policy.

7. Request prioritisation

Requests receive an automatic priority score based on criteria such as requester type, planting area and completeness. The score only helps order follow-ups; no request is rejected because of it and every request is reviewed by a staff member. You may object to automated assessment (KVKK Art. 11/1-g).

8. Cookieless measurement

To understand how our site is used we run our own measurement system with no third-party advertising or tracking services:

• No cookies are set and no persistent identifier is stored in localStorage.
• A random session number lives only in your tab's session storage and disappears when the tab is closed.
• Visitors are distinguished by a one-way digest of IP address and browser information combined with a secret that changes daily. The secret is deleted after 48 hours, so the digest cannot be traced back to you or your IP address.
• Raw IP addresses are never stored; location is kept at country level only.
• If your browser sends “Global Privacy Control” or “Do Not Track”, no measurement data is sent at all.
• The pages you visited are linked to your request only when you submit the form with your consent.

9. Your rights under KVKK Art. 11

You may apply to the data controller to:

• learn whether your personal data is processed,
• request information about the processing,
• learn the purpose of processing and whether data is used accordingly,
• know the third parties in Türkiye or abroad to whom data is transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction under the conditions of Art. 7,
• request that corrections and deletions are notified to third parties who received the data,
• object to an adverse outcome resulting solely from automated analysis,
• claim compensation for damages arising from unlawful processing.

10. Applications and withdrawing consent

You may submit your application in writing to the address above, by e-mail to info@casseed.com.tr from the address registered with us, or via registered e-mail (KEP), secure electronic signature or mobile signature. Applications are concluded free of charge within 30 days at the latest; if the process incurs an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.

You may withdraw your consent at any time, with effect for the future. You can leave the newsletter in one step using the unsubscribe link in every issue.