Privacy Notice
This notice explains how personal data is handled when you visit chaileanaturalsoaps.com or contact Chailea about wholesale and export. It is written to meet Articles 13 and 14 of the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK, Law No. 6698).
1. Controller
| Controller | ChaiNovi Sanayi Ticaret Limited Şirketi (brand: Chailea) |
|---|---|
| Address | Sabuncular Mahallesi Sadrazam Mehmet Ali Paşa Caddesi Örnek Sanayi Sitesi No:26/23, 53200 Çayeli / Rize, Türkiye |
| chaileanaturalsoaps@gmail.com | |
| Telephone | +90 545 242 45 32 |
| EU representative (GDPR Art. 27) | Not appointed. Processing is occasional and low-risk; the exemption under GDPR Art. 27(2)(a) is relied upon. |
2. What data is processed, why, and on what legal basis
Method of collection: all of the data below is collected by electronic means through this website — the consent banner, the inquiry form that runs in your browser, and the technical records kept by the hosting provider.
| Website analytics (Google Analytics 4) | Only after you accept analytics cookies in the banner. Until you accept, the Google tag is not loaded and no analytics data reaches Google. Data: pseudonymous identifiers, device and browser information, pages viewed, interactions with the inquiry form (which send button was used), approximate location derived from IP address (Google states that it does not log or store the individual IP addresses of visitors from the EU, Switzerland and the United Kingdom; for those visitors the IP address is used only to derive an approximate location and is then discarded). Purpose: measuring site traffic. Legal basis: consent (GDPR Art. 6(1)(a); KVKK Art. 5(1) — explicit consent). You can decline in the banner, and you can change or withdraw your choice at any time using the “Cookie settings” link in the page footer; withdrawal does not affect the lawfulness of processing carried out before it. |
|---|---|
| Wholesale / export inquiries | The inquiry form runs in your browser and opens your own WhatsApp or e-mail application; Chailea receives what you choose to send (name, company, country, product interest, estimated volume, message, and your phone number or e-mail address). Purpose: answering your inquiry and preparing a possible business relationship. Legal basis: steps prior to entering a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c) — processing directly related to the conclusion or performance of a contract) and legitimate interest in business-to-business communication (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f) — legitimate interest of the controller, provided that the fundamental rights and freedoms of the data subject are not harmed). Providing this data is voluntary; there is no statutory or contractual obligation to provide it. If you do not provide contact details, Chailea cannot reply to your inquiry. When you press a send button, an analytics event recording only which method you chose (WhatsApp, e-mail or copy) is sent to Google Analytics; it contains no part of your message, and it reaches Google only if you have accepted analytics cookies. |
| Server logs | The hosting provider records technical access data (IP address, time, requested URL, user agent) for security and stability. Legal basis: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). Retention: no server access logs are retained by Chailea. Such logs remain solely with the hosting provider, which keeps them only for security and stability purposes and only for as long as is necessary for those purposes; the specific period is set by the hosting provider. |
3. Cookies and local storage
Google Analytics cookies (_ga, _ga_*) are set only after consent. Your consent choice is stored in your browser's local storage under the key chln_consent; it contains no personal data. No advertising cookies are used. Where they are set, the _ga and _ga_* cookies expire two years after they were last set — the Google Analytics default, which this site does not shorten; browsers may enforce shorter limits of their own, for example 400 days in Chrome and 7 days in Safari. The chln_consent entry has no expiry date and remains in local storage until you change your choice, use the “Cookie settings” link in the page footer, or clear this site's data.
4. Recipients and processors
Google Ireland Limited / Google LLC (Google Analytics 4 and e-mail service); Hostinger International Ltd. (web hosting); WhatsApp (Meta Platforms) when you choose to contact Chailea via WhatsApp, under WhatsApp's own terms. Data is not sold and is not shared with other third parties, except where required by law.
5. International transfers
The controller is established in Türkiye, outside the European Economic Area. Data you send with an inquiry is therefore processed in Türkiye. Google may process analytics data in the United States.
The European Commission has not adopted an adequacy decision for Türkiye; data you send with an inquiry therefore reaches the controller in a third country that is not covered by an adequacy decision. For the United States, transfers to Google LLC rely on the European Commission's EU–US Data Privacy Framework adequacy decision, under which Google LLC is certified, and in addition on the EU Standard Contractual Clauses that form part of Google's data processing terms. A copy of those Standard Contractual Clauses can be obtained free of charge by writing to chaileanaturalsoaps@gmail.com.
Transfers abroad by the controller — analytics data to Google Ireland Limited / Google LLC and, if you choose that channel, message data to WhatsApp (Meta Platforms) — are subject to Article 9 of Law No. 6698, as amended by Law No. 7499 and in force since 1 June 2024. No adequacy decision of the Personal Data Protection Board exists for the countries concerned, and no standard contract under Article 9(4)(c) has been concluded. Such transfers are occasional and are therefore made under Article 9(6)(a) of Law No. 6698, on the basis of your explicit consent: for analytics, the consent you give in the cookie banner; for messages, your own choice to open WhatsApp or your e-mail application. Before consenting, please note that the countries concerned may not provide a level of protection equivalent to that of Law No. 6698 and that enforcing your rights there may be more difficult. The EU Standard Contractual Clauses and the EU–US Data Privacy Framework mentioned above are instruments of EU law and do not by themselves satisfy Article 9 of Law No. 6698.
6. Retention
Inquiry correspondence is commercial correspondence within the meaning of Article 82 of the Turkish Commercial Code (Law No. 6102) and is kept for ten (10) years, counted from the end of the calendar year in which the correspondence took place. Where tax legislation prescribes a longer period for a particular document, that longer period applies to that document. At the end of the period the data is deleted, destroyed or anonymised. Analytics data is retained in Google Analytics for 14 months.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Consent to analytics cookies can be withdrawn as easily as it was given, using the “Cookie settings” link in the page footer. To exercise your rights, write to chaileanaturalsoaps@gmail.com. You may lodge a complaint with the supervisory authority of the EU/EEA member state of your residence.
Right to object. Where processing is based on legitimate interest (GDPR Art. 6(1)(f)) — namely your inquiry correspondence and the server logs kept by the hosting provider — you have the right to object to that processing at any time, on grounds relating to your particular situation. An informal message to chaileanaturalsoaps@gmail.com is sufficient. The processing will then stop unless there are compelling legitimate grounds that override your interests, rights and freedoms.
Under Article 11 of Law No. 6698 you also have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of the processing and whether the data is used in accordance with that purpose; to know the third parties in Türkiye or abroad to whom the data is transferred; to request rectification of incomplete or inaccurate data and erasure or destruction of your data; to request that such rectification, erasure or destruction be notified to the third parties to whom the data was transferred; to object to a result to your detriment produced by analysis carried out solely by automated means; and to claim compensation for damage suffered as a result of unlawful processing. Under Article 13 of Law No. 6698 such a request must be addressed to Chailea first, at chaileanaturalsoaps@gmail.com; it will be answered within thirty (30) days at the latest and free of charge. A complaint cannot be made to the Turkish authority before that application has been made. If the request is refused, the answer is insufficient, or no answer is given within thirty days, you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), the decision-making body of the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu), within thirty days of learning the answer and in any event within sixty days of your application.
8. Other information
No automated decision-making or profiling takes place. This website is aimed at business customers and is not directed at children. This notice may be updated; the current version is always published at this address.