Data Protection Notice

1. Controller

OrtakBazar (avristan.net) is the controller of the personal data described here. Write to bilgi@avristan.net for any request.

2. Data we process

Depending on how you use the platform:

• Identity and contact: name, e-mail address, phone number, authorised representative.
• Company data: trade name, sector, city, country, founding year, headcount, website, tax or registry number.
• Verification documents: the trade registry extract, signature circular or similar file you upload.
• Content: product listings, quote requests, quotes, reviews, the messages you exchange with other members and other text you write on the platform.
• Security data: IP address, session data, sign-in records, browser information.
• Usage data: companies you viewed, your saved searches and favourites (only if you have an account).
• Cookie data: analytics cookies, only if you consented (see the Cookie Policy).

3. Purposes

• Creating, managing and verifying your account and company profile.
• Delivering buyers' requests to the relevant suppliers so the two can talk.
• Platform security: preventing fake registrations, fraud and abuse.
• Checking content against the platform rules (see section 6).
• Sending service notifications and e-mails.
• Improving the service and — with your consent — aggregate usage statistics.
• Meeting legal obligations and responding to lawful requests from authorities.

4. Legal grounds

We rely on: performance of a contract (your account, company profile and quote requests), compliance with a legal obligation, establishment or defence of legal claims, legitimate interests that do not override your rights (security, abuse prevention), and your explicit consent for anything optional, such as analytics cookies.

5. Who we share data with

We never sell your personal data or hand it to third parties for marketing. For the service to work it is shared with:

• Other members: when you send a quote request, your name, contact details and the request itself reach the supplier. When you message a member, they see your name and the messages you write. Anything you publish on a company profile is public.
• Hosting and infrastructure providers: server, database and file storage.
• E-mail provider: verification, password reset and notification e-mails.
• AI moderation: the text of listings, reviews and requests, and of the messages you write in a conversation until the other side first replies, is sent to Google's Gemini API for automated review. Only the text is sent — never your name, e-mail or phone number.
• Analytics: Google Analytics, only if you accepted cookies.
• Public authorities, where legally required.

6. Automated review and automated decisions

Listings, reviews and quote requests are screened automatically for prohibited goods, fraud, contact-detail leakage and similar rule breaches: first a rule-based filter, then a language model.

Messages between members are screened only at the start of a conversation, until the other side first replies, and only for spam, fraud, harassment and similar abuse; sharing your own contact details is not a breach.

Content is published or withheld automatically only where the system is highly confident; anything uncertain goes to a person. If your content is refused automatically you are shown the reason in your panel and may object at bilgi@avristan.net — every objection is reviewed by a human.

7. Retention

We keep your data for as long as your account exists. When you delete your account, your personal data is deleted or anonymised; only records the law requires us to keep (such as security logs) are retained for the statutory period. Verification documents are deleted once the retention obligation ends.

8. Your rights

You may ask us to:

• Confirm whether we process your data and give you information about it.
• Tell you the purpose of processing and whether the data is used accordingly.
• Name the third parties the data has been transferred to, at home or abroad.
• Correct incomplete or inaccurate data.
• Erase or destroy your data where the conditions are met.
• Notify the recipients of any correction or erasure.
• Object to a decision produced solely by automated processing that affects you adversely.
• Compensate damage caused by unlawful processing.

9. How to reach us

Send your request, with information identifying you, to bilgi@avristan.net. We answer within 30 days at no charge. You can also delete your account and its data yourself, from the 'Delete account' section of your buyer panel.