PERSONAL DATA PROTECTION NOTICE
Effective Date: 01 January 2026
This Personal Data Protection Notice explains how Ayda Cavuldar (SubmitParts Business), operating submitparts.com (“SubmitParts”, “we”, “our”, “us”), collects, processes, stores, and protects personal data in accordance with:
• Turkish Personal Data Protection Law No. 6698 (KVKK)
• General Data Protection Regulation (GDPR), where applicable
• Other applicable data protection laws and regulations
By using the SubmitParts website or mobile application, you acknowledge and agree to the practices described in this Notice.
- Data Controller
For the purposes of applicable data protection laws, the data controller is:
SubmitParts
Operated by: Ayda Cavuldar (SubmitParts Business)
Website: https://submitparts.com
Email: info@submitparts.com
- Personal Data We Collect
SubmitParts may collect and process the following categories of personal data:
Account Information
• Name and surname
• Email address
• Telephone number
• Company name
• Business address
• Username and account credentials
Membership Information
• Membership status
• Membership plan details
• Billing information
Communication Information
• Messages exchanged through the platform
• RFQ submissions
• Quote submissions
• Customer support requests
Technical Information
• IP address
• Browser information
• Device information
• Operating system information
• Application version information
• Login records
• Security logs
Mobile Application Information
• Device identifiers
• Firebase Cloud Messaging (FCM) tokens
• Notification preferences
• Application diagnostics
• Performance data
Uploaded Content
• Attachments
• Images
• Documents
• Files uploaded through RFQs, quotes, or messaging features
- Purposes of Processing
Personal data may be processed for the following purposes:
• Creating and managing user accounts
• Providing membership services
• Facilitating RFQ functionality
• Enabling communication between Buyers and Suppliers
• Sending notifications and alerts
• Maintaining platform security
• Preventing fraud and abuse
• Responding to customer support requests
• Improving platform functionality
• Complying with legal obligations
• Resolving disputes
- Legal Basis for Processing
Personal data may be processed on the basis of:
• User consent
• Contractual necessity
• Compliance with legal obligations
• Legitimate interests relating to platform security, fraud prevention, and service improvement
- Data Sharing
SubmitParts does not sell personal data.
Personal data may be shared only where necessary with:
• Payment service providers
• Hosting providers
• Cloud infrastructure providers
• Technical support providers
• Security service providers
• Government authorities where legally required
All service providers are required to implement appropriate security and confidentiality measures.
- International Data Transfers
As SubmitParts serves users internationally, personal data may be processed or stored outside the user’s country of residence.
Where required by law, appropriate safeguards will be implemented to protect personal data.
- Data Retention
Personal data is retained only for as long as necessary to:
• Provide services
• Maintain account records
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
When personal data is no longer required, it will be securely deleted or anonymized where appropriate.
- Data Security
SubmitParts implements reasonable technical and organizational measures to protect personal data, including:
• Secure hosting environments
• Access controls
• Encryption technologies
• Security monitoring
• Authentication procedures
Despite these measures, no system can guarantee absolute security.
- User Rights
Subject to applicable law, users may have the right to:
• Request access to personal data
• Request correction of inaccurate information
• Request deletion of personal data
• Request restriction of processing
• Object to certain processing activities
• Request data portability
• Withdraw consent where processing is based on consent
Users may exercise these rights by contacting:
- Automated Decision-Making
SubmitParts does not use fully automated decision-making processes that produce legal or similarly significant effects on users.
- Children’s Privacy
SubmitParts is intended exclusively for users aged 18 years and older.
We do not knowingly collect personal information from children.
- Changes to this Notice
SubmitParts reserves the right to modify this Notice at any time.
Updated versions become effective upon publication on submitparts.com.
Users are encouraged to review this Notice periodically.
- Contact Information
SubmitParts
Website: https://submitparts.com
Email: info@submitparts.com
For any questions regarding personal data processing or privacy matters, please contact us using the details above.