This text is a standard draft and must be approved by the company’s legal department before publication. Last updated: 10.08.2026

Identity of the Data Controller

This privacy notice has been prepared by Boykim Paint and Chemicals Import, Trade, and Industry Ltd. Co. (“Boykim” or “the Company”) in its capacity as the data controller, Article 10 of the Law on the Protection of Personal Data No. 6698 ("Law").

Company headquarters: Kavacık Otagtepe St., Erkan Yılmaz Business Center No. 49, Kavacık / ISTANBUL. Contact: info@boykim.com — +90 216 332 38 12

Personal Data Processed

The following personal data is processed in connection with the requests and applications you submit through our website:

  • Identification data: first name, last name
  • Contact data: email address, phone number, city
  • Customer transaction data: subject of the request, message content, your request for a quote
  • Professional experience data: company name, field of activity, and documents uploaded by you in a franchise application
  • Transaction security data: IP address, browser information, date and time of application

Purposes of Processing Personal Data

Your personal data is processed for the purposes of responding to your communication requests, preparing product and price quotes, evaluating your franchise application, managing your newsletter subscription, fulfilling our contractual and legal obligations, and ensuring the security of our website.

Legal Basis for Processing

Your personal data is processed based on the following legal grounds specified in Article 5 of the Law:

  • Directly related to the conclusion or performance of a contract (Art. 5/2-c) — quotation and franchise processes
  • Compliance with the data controller’s legal obligations (Art. 5/2-ç) — commercial and tax records
  • Legitimate interest, provided that it does not infringe upon the fundamental rights and freedoms of the data subject (Art. 5/2-f) — website security and prevention of misuse
  • Explicit consent (Art. 5/1) — newsletter subscription and sending commercial electronic communications

Transfer of Personal Data

Your personal data may be transferred, solely for the purposes listed above, to our hosting and email infrastructure providers, as well as to authorized public institutions and organizations where required by law. Your data will not be shared with or sold to third parties for marketing purposes.

In cases where data must be transferred abroad, the conditions set forth in Article 9 of the Law are complied with.

Method of Collection

Your personal data is collected electronically and through non-fully automated means via the contact form, franchise application form, and newsletter subscription form on our website.

Retention Period

Your personal data is retained for as long as necessary to fulfill the purpose for which it was processed and for the statute of limitations periods specified in applicable legislation. At the end of this period, your data will be deleted, destroyed, or anonymized.

Contact form records are retained for 2 years from the resolution of the request; franchise applications are retained for 3 years from the completion of the evaluation process; and newsletter subscription records are retained until you unsubscribe.

Your Rights as a Data Subject

Pursuant to Article 11 of the Law, you may exercise the following rights by contacting the data controller:

  • To find out whether your personal data is being processed
  • If so, to request information regarding such processing
  • To learn the purpose of the processing and whether it is being used in accordance with that purpose
  • To know the third parties to whom your personal data has been transferred, whether within the country or abroad
  • Requesting the correction of your personal data if it has been processed incompletely or incorrectly
  • Requesting that your personal data be erased or destroyed in accordance with the conditions set forth in Article 7 of the Law
  • Request that third parties to whom your data has been transferred be notified of any corrections, erasures, or destruction
  • Objecting to a decision made solely through automated processing that results in adverse consequences for you
  • To request compensation for damages incurred due to processing in violation of the Law

Application Procedure

You may submit your requests regarding your rights in writing to our company address or to info@boykim.com, in accordance with the Communiqué on the Procedures and Principles for Submitting Requests to the Data Controller. Your request will be resolved free of charge within thirty days at the latest, depending on the nature of the request.