Personal Data Protection Notice

1. Data controller

In this notice, "Prinwork", "we" and "us" refer to the data controller. This notice covers the forms on our website; Prinwork's general privacy notice, covering all of its data processing activities, is available here.

2. Personal data we process

Depending on which form you fill in, we process the following data. You may leave optional fields empty.

• Identity: first name, last name.
• Contact: email address, phone number, city.
• Request and application details: your current selling situation, store link, company name, product group, monthly production capacity, website or social media account, and the message you write.
• Transaction security: the date and time you submit the form, your IP address and browser information.

Our forms do not ask for special categories of personal data (health, religion, ethnic origin, etc.); please do not include such information in the message field.

3. Purposes

• Receiving and reviewing your contact, consulting or manufacturer application request and getting back to you,
• Scheduling and preparing for your consulting call,
• Reviewing manufacturer applications and discussing samples, pricing and production conditions,
• Establishing and managing the service relationship related to your request,
• Ensuring information security and preventing misuse and spam,
• Fulfilling our legal obligations and responding to requests from competent authorities.

4. Legal grounds

Your personal data is processed on the following legal grounds listed in Article 5(2) of the KVKK:

• (c) — processing is directly related to the establishment or performance of a contract (getting back to you, setting up the consulting or manufacturer relationship),
• (ç) — processing is necessary for the data controller to fulfil its legal obligations,
• (f) — processing is necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms (information security, preventing spam and misuse).

Your explicit consent is not required for these purposes. We will only send you commercial electronic messages such as campaigns or announcements if you give separate consent.

5. How we collect it

Your personal data is collected electronically, by automated means, when you fill in the contact, consulting or manufacturer application forms on prinwork.com. Information you share in later emails and phone calls about your request is processed for the same purposes.

6. Transfers

Limited to the purposes above and in line with Articles 8 and 9 of the KVKK, your personal data may be shared with:

• Our domestic and international infrastructure and software service providers offering hosting, backup, email and data processing services,
• For manufacturer applications, our business partners, to the extent needed to review the application,
• Competent public authorities and courts, upon their request.

7. Retention

Your personal data is stored electronically for the period required by our legal obligations and processing purposes. At the end of that period, it is deleted, destroyed or anonymized in line with Prinwork's personal data retention and destruction policy.

8. Your rights under the KVKK

Under Article 11 of the KVKK, you have the right to apply to the data controller to:

• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties in Türkiye or abroad to whom it is transferred,
• Request correction if it is incomplete or inaccurate,
• Request its deletion or destruction under the conditions in Article 7 of the KVKK,
• Request that corrections, deletions or destructions be notified to the third parties to whom it was transferred,
• Object to any outcome against you arising from analysis exclusively by automated systems,
• Claim compensation if you suffer damage due to unlawful processing.

9. How to apply

In accordance with the Communiqué on the Procedures and Principles of Applications to the Data Controller, you can submit your requests:

• In writing to the address above, in person or through a notary, with documents proving your identity,
• Via registered electronic mail (KEP), secure electronic signature or mobile signature,
• From an email address you previously provided to us and that is registered in our systems, to [email protected].

Your application should include your name, surname, signature (for written applications), Turkish ID number (or nationality and passport number for foreign nationals), address for notifications, email address and phone number if any, and the subject of your request.

We will conclude your request free of charge as soon as possible and within thirty days at the latest, depending on its nature. If the process requires an additional cost, the fee schedule set by the Personal Data Protection Board may apply.

This English version is provided for information; in case of any discrepancy, the Turkish version prevails. Last updated: 24 September 2026