NUERA

Privacy Policy

Clarification text under the Turkish Personal Data Protection Law No. 6698 (KVKK)

As data controller, we take the highest possible level of security measures to ensure that your personal data is collected, stored and shared lawfully and to protect your privacy. Our aim, in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data, is to inform you as transparently as possible about how your personal data is obtained, the purposes for which it is processed, the parties it is shared with, the legal grounds, and your rights.

a) Data controller

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is collected and processed, within the scope described below, by Nuera Sürdürülebilir Biyofabrikasyon Teknoloji Sanayi ve Ticaret A.Ş. ("NUERA"; Deliklikaya, Canyolu Cad. No:17, 34488 Arnavutköy / İstanbul, Türkiye), a company wholly owned by DESA Deri Sanayi ve Ticaret A.Ş., acting as data controller.

b) Method of collection, legal grounds and purposes of processing

Your personal data is collected through fully or partially automated means, and through non-automated means that form part of a data recording system, when:

  • you visit this website (technical access records: IP address, date and time, requested pages, browser information);
  • you submit a sample or information request through the website form (name, company, role, e-mail address, description of what you are developing, indicative volume and timeline), together with the record that this notice was presented to you and confirmed: the date and time of your submission, your IP address, your browser information (user agent and language), the page from which the form was sent, the wording of the confirmation sentence you ticked and the version of this text that was displayed;
  • you contact us by e-mail or other communication channels;
  • you engage with us in the context of corporate sales, sampling or product-development processes.

This data is processed for the following purposes and on the following legal grounds set out in Article 5 of the KVKK:

PurposeLegal ground (KVKK Art. 5/2)
Responding to sample, technical-pack and information requests; conducting the resulting commercial correspondence(c) processing necessary for the establishment or performance of a contract
Keeping the record that this notice was presented and confirmed, and the record of how your request was handled(ç) fulfilment of a legal obligation (KVKK Art. 10 and 12); (e) establishment, exercise or protection of a right; (f) legitimate interest
Operating the website securely and measuring its use (aggregated visitor statistics)(f) legitimate interest of the data controller; the hosting provider's own obligations under Law No. 5651 apply to the access records it keeps
Managing corporate sales and product-development relationships(f) legitimate interest of the data controller
Sending commercial electronic messages (only where you have separately opted in)Explicit consent (Art. 5/1)

c) Parties to whom personal data is transferred, and purposes of transfer

Within the conditions and purposes set out in Article 8 of the KVKK, your personal data may be transferred to: DESA Deri Sanayi ve Ticaret A.Ş., which operates in Türkiye the database in which request-form records are kept and receives the notification e-mails in mailboxes hosted in Türkiye by the data-centre company Doğru Bulut, and whose relevant teams — together with those of GOZEN — assess and answer your request as the people responsible for the material and its production; and to authorised public institutions where required by law.

Website hosting and transfers abroad (Article 9 of the KVKK): this website is served from the infrastructure of Vercel Inc. (United States), which processes technical access records (IP address, pages requested, time of access) in order to deliver the pages and provides the website's visitor statistics (Vercel Web Analytics: page views, referring site, country, browser and device type; no cookies are set and IP addresses are not stored). A move of the website to hosting in Türkiye is planned after the launch phase. Request-form records are not stored on that infrastructure: once the request form is connected, your form data is transmitted to and stored on servers operated by DESA in Türkiye, either directly from your browser or relayed by the website's server (in which case it passes through the hosting infrastructure in transit only, without being stored there), and the notification e-mails are delivered to DESA's mailboxes, which are hosted in Türkiye in the data centre of Doğru Bulut. Until the request database is in service, the website itself stores nothing: the website's server turns a submitted form into an e-mail to the mailboxes named above, where it is kept as the only record, and the content passes through the hosting infrastructure in transit only. Transfers abroad are carried out in accordance with Article 9 of the KVKK. All website assets, including fonts, are served from the hosting named above; no other third-party content-delivery network receives visitor data.

d) Retention and destruction

Request-form records are kept in a database on servers operated by DESA in Türkiye. Personal data is retained for as long as required by the purpose of processing and by the applicable legislation, and is then deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data. Technical access records are processed by the hosting provider named in section c under its own retention terms; NUERA keeps no separate access log. Where the hosting provider is established in Türkiye, it retains traffic records for the period prescribed by Law No. 5651. The content of a request that does not lead to a commercial relationship is retained for 2 years after the request is closed, and in any case for no longer than 3 years after it was received, and is then overwritten in the live database; the content of a request that leads to a commercial relationship is kept as part of our commercial records for 10 years, as required by Article 82 of the Turkish Commercial Code. Backup copies are destroyed within the periodic destruction cycle of at most six months provided for in the Regulation. The confirmation record that remains (reference number, dates, the material and backing selected, the wording of the confirmation sentence, the version and hash of this text, and a one-way hash of your e-mail address) is retained for 10 years so that the presentation of this notice can be evidenced, and is then deleted. Upon erasure, the identifying fields are overwritten in the database and the related notification e-mails are deleted from the recipient mailboxes.

e) Cookies

This website does not set cookies and does not run marketing tracking. Visitor statistics are collected with Vercel Web Analytics, which works without cookies and without storing IP addresses: it records page views, the referring site, the country, and the browser and device type, using a temporary identifier that cannot be traced back to you and is discarded within 24 hours. The only data kept in your browser is a flag, deleted when you close the browser, that remembers you have closed the fair invitation. The request form stores nothing in your browser; the reference number shown after submission is assigned by the server and recorded with your request.

f) Your rights under Article 11 of Law No. 6698

As a personal data subject you have the right to:

  • learn whether your personal data is being processed;
  • request information if it has been processed;
  • learn the purpose of processing and whether the data is used in accordance with that purpose;
  • know the third parties, in Türkiye or abroad, to whom the data has been transferred;
  • request rectification if the data is incomplete or inaccurately processed, and request that this be notified to third parties to whom the data has been transferred;
  • request erasure or destruction of the data where the grounds for processing cease to exist, even though it was processed lawfully, and request that this be notified to third parties;
  • object to a result arising against you from the analysis of processed data exclusively by automated systems;
  • claim compensation for damage suffered due to unlawful processing of your personal data.

Requests concerning these rights will be concluded as soon as possible and at the latest within thirty days, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications may be submitted in writing, with documents evidencing your identity, to Deliklikaya, Canyolu Cad. No:17, 34488 Arnavutköy / İstanbul, Türkiye, or electronically to ece.gozen@nuerabiotech.com. Applications must include your name and surname (and signature, if in writing), your Turkish ID number or, for foreign nationals, nationality and passport number, your address for notification, an e-mail address or telephone number if available, and the subject of your request together with any supporting documents. If you have it, please quote the reference number shown after your submission.

Last updated: 11.09.2026