This notice explains what personal data playbox.com.tr collects and how it is handled. The site presents the Playbox product range and takes distribution enquiries. Nothing is sold through it.
Who is responsible
The data controller is Helikon Kozmetik, the owner of the Playbox brand. The company is based in Türkiye.
- Registered name, address and company registration number: [Company legal name, address and registration number — to be entered from the admin panel]
What is collected, and how
Data comes from forms you fill in and from server records. No data is bought from other sources.
Distribution enquiry form
Name, company, email address, phone number, country, products of interest, estimated order volume, private label interest and your message. On submission the server also records your IP address, browser user agent, the language you used, and the moment you ticked the consent box.
Contact form
Name, email address, phone number, subject and your message. The server also records your IP address and browser user agent.
Visit records
These are kept only if you turn on analytics in the cookie banner. Without that consent, no record is written at all. With consent, the following is stored: IP address, browser user agent, a session identifier derived from those two, device, browser and operating system name, the address you arrived from, campaign tags in the link, the pages you viewed and timestamps. The Cookie Policy describes this in detail.
Why it is processed
- To assess distribution and private label enquiries and reply to you
- To answer messages sent through the contact form
- To block form abuse and automated submissions
- To measure which pages are used, if you turned analytics on
Your data is not used for advertising, not sold, and not added to marketing lists.
Legal basis
- Form data: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries. The tick box on the form records that you read this notice.
- IP address and user agent: our legitimate interest in keeping the forms secure and free of automated abuse.
- Visit records: your consent. You can withdraw it at any time through the cookie settings link in the footer.
Who the data is shared with
Your data is not sold. It is shared only with the parties below, and only for the stated purpose.
- Hosting provider: the site and its database run on a server, and the provider has technical access to it. [Hosting provider and server country — to be entered]
- Cloudflare Turnstile: on the contact and distribution form pages only, a Cloudflare bot check is loaded to tell human submissions from automated ones. During that check your browser connects to Cloudflare, and Cloudflare processes your IP address and browser signals for that purpose. It is not loaded on any other page of the site.
- Public authorities: where disclosure is required by law.
Beyond these, the site carries no advertising pixels, no social media plugins and no third-party analytics.
How long it is kept
[Retention periods — to be entered after legal review]
When you ask us to delete a distribution enquiry, the identifying fields are removed from the record: name, company, email address, phone number, message, IP address and user agent. The country code, estimated volume, form language and date remain as anonymous statistics. On their own, those fields do not identify you.
Your rights
You can ask us to:
- Confirm whether we hold personal data about you
- Tell you what that data is and why it is processed
- Tell you which third parties it has been shared with, in Türkiye or abroad
- Correct it if it is incomplete or wrong
- Delete or destroy it
- Notify the recipients of any correction or deletion
- Object to a decision produced solely by automated analysis that works against you
- Compensate damage caused by unlawful processing
These are the rights granted by article 11 of Turkish Law No. 6698 on the Protection of Personal Data.
How to make a request
Requests must be made in writing and are answered within thirty days at the latest.
[Email and postal address for data protection requests — to be entered from the admin panel]
Changes
This notice may be updated. The date of the version you are reading is shown at the top of the page.