Last updated: 10 October 2026
Controller and scope
Alamaç Ltd. Şti. is responsible for personal data processed for dealer applications and account administration on bayi.alamac.com.tr, alamac.eu and alamachusa.com.
Address: Fevzi Çakmak Mh. Akyıldız Cad. Altınsan 4 San. Sitesi A Blok No:54/U Karatay – KONYA, Türkiye
Privacy requests: kurumsal@alamac.com.tr
Information, collection and purposes
Through the application form and uploads, we collect the company name, contact person’s name, email, mobile phone, tax authority, tax/company registration number, country, city, business address, tax registration and authorised signatory documents or their local equivalents. Documents may contain personal identification and signature information. Please mask unrelated personal information without obscuring information needed for review.
We record email verification, application region, submission/review times, application outcome and account/customer connections. For approved accounts, we use the ERP customer reference, trading group and customer information needed to operate the account. Dealers can view their own relevant balances and transactions.
We use this information to review applications, verify contact details and authority, match approved accounts to their ERP customer and permitted regional site, administer access, communicate outcomes and prevent abuse. Staff review applications; submitting a form does not automatically open an account or create an ERP customer record. Required information must be provided and verified to open an account.
Legal grounds
Where GDPR applies, necessary steps requested by an individual who would be a party to the contract are assessed under Article 6(1)(b). Processing representatives’ business contact information, checking authority and protecting account access is assessed under Article 6(1)(f), subject to balancing their rights against these business/security interests. Retention for legal obligations or claims is assessed under the law applicable to the relevant record; a third-country obligation is not automatically a GDPR Article 6(1)(c) basis. Turkish processing requirements also apply where relevant.
Acknowledging this notice is not consent to marketing or a blanket consent to international transfers. Applying does not subscribe you to advertising email or SMS.
Access and recipients
Authorised company staff review applications and documents. Information may be shared with hosting, email and ERP/technical service providers to the extent necessary for their actual services, and with competent authorities when legally required.
After email verification, an internal notification goes to kurumsal@alamac.com.tr, tugba@alamac.com.tr and mehmet@alamac.com.tr. It contains a restricted administration link; uploaded tax/signatory documents are not attached. Documents are stored outside the public media directory and require authorised access.
Security and international processing
We use connection information and attempt counters for login/application security. Cloudflare Turnstile helps reduce automated abuse. Cloudflare processes IP addresses, browser/connection signals and verification results; this service can involve processing outside your country. Our verification request sends the token and IP address, not submitted company fields or tax/signatory documents. Cloudflare also acts as a controller for certain technical signals.
Cloudflare Turnstile privacy information. Reading this notice does not itself establish a lawful transfer mechanism or consent to international transfers. Contact our privacy address for information about processing and transfers relating to your data.
Retention and cancellation
Uploaded documents for declined applications are automatically removed from active application storage; a daily check retries unsuccessful deletion. Approved documents are kept while the account and authority-verification purpose continues, and retention is reviewed if that purpose ends earlier.
Send account cancellation requests to kurumsal@alamac.com.tr. Authorised staff verify the requester and disable account access. Active application documents are deleted where the absence of a commercial relationship has been confirmed. Where commercial activity occurred, records necessary for applicable legal duties or claims are kept only to the extent and for the period necessary; commercial history does not justify retaining every document indefinitely.
The technical history check examines website orders and the current ERP accounting period. Staff also check other periods and transactions outside the website. Where history cannot be verified, documents remain restricted pending review. A zero balance does not establish the absence of commercial activity.
Application/review records, orders, accounting records, ERP customer records and backups are assessed separately. Deleting active application documents does not automatically erase all these records. Where processing grounds end, necessary deletion or anonymisation is carried out without waiting for an individual request.
Your rights
Where GDPR applies, you may request access, correction, erasure, restriction or portability where the relevant conditions are met, and object to processing based on legitimate interests. You may complain to the competent data protection authority. Consent can be withdrawn where processing actually relies on it. Applications are reviewed by staff rather than decided solely by automated assessment.
US privacy rights depend on applicable state law and its scope. Contact kurumsal@alamac.com.tr or the address above for access, correction, deletion or other privacy requests. We verify identity proportionately before releasing records or making account changes and assess applicable requirements and lawful exceptions. Turkish-law request procedures may also apply.