Privacy Policy

Last updated: 26.10.2026

This policy explains, in line with Art. 13 GDPR and Art. 10 of Turkish Law No. 6698 (KVKK), how we process personal data when you visit hilfex.com or contact us.

1. Controller

HilfeX Teknoloji Ticaret Limited Şirketi
Address (Türkiye): Cevizli Mah. Ulubey Sok. Nursallar A Blok No: 4A, İç Kapı No: 113, 34846 Kartal / İstanbul
Address (Germany): Epplestraße 225, 70567 Stuttgart
Email: [email protected]

2. What we process and why

Visiting the website

Your browser technically sends your IP address, date and time, the requested page and browser information. Our hosting provider keeps these in server logs for a short time to run the site securely.

To choose the site language, your IP address is compared only at that moment with a country list on our own server. It is not sent to any third party and not stored.

Legal basis: Art. 6(1)(f) GDPR; KVKK Art. 5(2)(f) (legitimate interest).

Contact form and email

When you use the form, we process your name, email address, optional company name, chosen topic and message, solely to answer your request. For spam protection we keep a salted one‑way hash of your IP address for at most two hours, never the IP itself.

Legal basis: Art. 6(1)(b) and (f) GDPR; KVKK Art. 5(2)(c) and (f).

Analytics cookies (only with consent)

If you choose “Accept” in the cookie notice, Google Analytics 4 may be used for visit statistics. Without consent, no analytics code is loaded. See the Cookie policy.

Legal basis: consent, Art. 6(1)(a) GDPR; KVKK Art. 5(1).

Google Maps (only after you click)

The map on the contact page does not load until you click “Show map”. Then Google Maps (Google Ireland Ltd. / Google LLC) loads and technical data including your IP address is sent to Google. Legal basis: consent, Art. 6(1)(a) GDPR.

WhatsApp button

Whatever you type in the WhatsApp window at the bottom right is not sent to our server and not stored. When you press “Send on WhatsApp”, your message is handed to the WhatsApp app and transmitted to us via WhatsApp (Meta Platforms Ireland Ltd.). WhatsApp’s own privacy policy applies.

3. Recipients and international transfers

We never sell data. Recipients are limited to our hosting and email provider and, if you consent, Google Ireland Ltd. / Google LLC. Our servers are located in Türkiye, which has no EU adequacy decision; contact data is transferred there because it is necessary to answer your request (Art. 49(1)(b) GDPR).

4. Retention

  • Server logs: per the host’s rotation cycle, usually no more than 30 days.
  • Contact requests: two years after closure; if a contract follows, for the statutory retention periods.
  • Spam‑protection hash: at most two hours.

5. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR; KVKK Art. 11). You can withdraw consent at any time; for cookies use “Cookie settings” in the footer. Contact us at [email protected]. You may also complain to a data protection authority, such as the authority in your EU country or the Turkish Personal Data Protection Authority.

6. Security

The site runs only over HTTPS, and form data travels over encrypted SMTP. We do not load third‑party fonts, maps or social media plugins.