PRIVACY NOTICE
Privacy Notice
This notice explains what Pistami does with the personal details you share when you use this website, request a quote or a sample, or contact us. It is written for the people who visit the site on behalf of food businesses and trade customers.
It is provided to meet the information duties in Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR where they apply.
Version 7, effective from 9 October 2026.
1. Who we are
The data controller for this website is Pistami İÇ VE DIŞ TİCARET LİMİTED ŞİRKETİ, a limited company established in Türkiye and trading as Pistami. We supply pistachios, kernels and pistachio ingredients to food businesses, with delivery across Türkiye and anywhere in Europe.
For any question about this notice or about your personal data, write to trade@pistami.com. Please use the subject line “Personal data request” so we can route it quickly.
2. What this notice covers
This notice covers the website, the enquiry form, and the email and WhatsApp contact routes offered on it. If an enquiry leads to a commercial relationship, the offer, order confirmation or agreement for that relationship governs any further processing.
This website is an information and enquiry site. It has no user accounts, no online payments and no shop.
3. The information we collect
Details you give us in the enquiry form
- Product of interest, request type (price enquiry or sample request), estimated quantity and delivery destination, including the country if you choose “Other European destination”.
- Company name, contact name and work email address.
- Anything you write under “Additional requirements”.
- A submission reference generated in your browser so that a retried submission is not treated as a new enquiry.
Delivery destination, company name, contact name and work email are required so we can reply; the other fields are optional. The form has no file upload.
Details you give us by email or WhatsApp
If you email us or message us on WhatsApp, we receive what you send together with your email address or phone number.
Technical information
- To deliver the pages and protect the site, our hosting provider and our server receive standard connection data such as your IP address, the pages requested, the time of the request and browser information.
- When you send an enquiry, the server checks that the request comes from this website, rejects oversized or malformed requests, and uses your network address for a short time in server memory to limit repeated submissions. The form also contains a hidden field that only automated submissions fill in; if it is filled, the enquiry is not accepted.
- If our email service refuses an enquiry, we record the service’s status code so we can fix the problem. We do not log the content of your enquiry for this purpose.
What we do not collect
We do not ask for payment details, identity documents or any special categories of personal data. Optional advertising tools are explained in section 9. We do not send the name, email address or text of your enquiry to Google, LinkedIn or Meta through our tag integrations, including enhanced matching.
4. Why we use it and on what legal basis
| Purpose | Legal basis under KVKK | Legal basis under GDPR, where it applies |
|---|---|---|
| Optional measurement and advertising: Google Analytics website measurement, with Google Tag Manager, LinkedIn and Meta advertising measurement and remarketing. | Your consent, which you may withdraw at any time. | Your consent, which you may withdraw at any time. |
| Answering your price enquiry or sample request, preparing an offer and agreeing samples, specifications and delivery. | Article 5(2)(c): processing necessary to establish or perform a contract at your request, and Article 5(2)(f): our legitimate interest in responding to business enquiries. | Article 6(1)(b) for steps taken at your request before a contract, and Article 6(1)(f) where you act for a company. |
| Keeping in touch about the enquiry and the business relationship that follows from it. | Article 5(2)(f): legitimate interest. | Article 6(1)(f): legitimate interest. |
| Keeping the website secure and preventing abuse of the enquiry form. | Article 5(2)(f): legitimate interest. | Article 6(1)(f): legitimate interest. |
| Keeping commercial records and meeting accounting, tax and other legal duties. | Article 5(2)(a) and (ç): required by law. | Article 6(1)(c): legal obligation. |
We do not use enquiry details to send newsletters or marketing campaigns, and we do not make decisions about you by automated means. The information is collected electronically through the form, by email or through WhatsApp.
5. Your draft stays in your browser until you send it
While you fill in the form, the site keeps a draft in your browser’s session storage for the open tab only. Nothing is sent to us until you review the summary and choose “Send enquiry”.
- The draft is deleted when you close the tab, 24 hours after your last change, or as soon as an enquiry is accepted.
- It is not available to us, to other websites or to other tabs.
- If sending fails, the draft is kept so you can retry or edit it; a retry reuses the same submission reference.
- If your browser offers an assistant feature for forms, it can only fill in the visible fields on your device; it cannot send the enquiry.
6. Who receives your information
- Our team
- Each enquiry is delivered as an email to trade@pistami.com, with your work email set as the reply address, and is handled by the people responsible for sales and samples.
- Email delivery service
- The enquiry email is transmitted through Resend, Inc. (United States), which processes the message in order to deliver it and keeps delivery logs under its own terms.
- Hosting and content delivery
- The website is hosted by Vercel Inc. (United States). Its network delivers the pages and protects the site against abuse, the enquiry form runs on Vercel servers in the United States, and request logs are kept for about one day on our plan.
- The WhatsApp buttons open WhatsApp, a service of Meta, with a suggested message addressed to our Spanish number +34 669 260 133. You can edit or discard the message before sending it. Anything you send is processed by WhatsApp under its own privacy policy; we do not pass your details to WhatsApp ourselves.
- Advisers and authorities
- Professional advisers bound by confidentiality, and public authorities where the law requires disclosure.
- Google Analytics and Tag Manager, when you allow optional tags
- Google receives the technical connection information needed to load our Tag Manager container, such as your IP address and browser information. This service manages website tags; Google Analytics measures visits and interactions such as page views, scrolling, outbound link clicks and downloads. Google Ads tags are not currently configured. Google’s processing may take place outside your country, including in the United States. See Google’s Privacy Policy.
- LinkedIn, when you allow its cookies
- LinkedIn receives visit and device data for advertising measurement and remarketing as described in section 9. Its services may involve processing outside your country, including in the United States. See LinkedIn’s Privacy Policy for its processing and international transfer information.
- Meta, when you allow optional cookies
- Meta receives visit and device data through its pixel for advertising measurement and remarketing on Facebook and Instagram. Its services may involve processing outside your country. See Meta’s Privacy Policy.
We do not sell personal data.
7. Transfers outside Türkiye
We are established in Türkiye, and the service providers named above process data in the European Union and the United States. Transfers abroad are made only under one of the conditions set out in Article 9 of the KVKK, as amended in 2024: an adequacy decision of the Personal Data Protection Board, appropriate safeguards such as the Board’s standard contracts, or the limited exceptions the law allows. Where the GDPR applies, transfers out of the EEA are made under the safeguards in Chapter V of the GDPR.
You can ask us at trade@pistami.com which safeguard applies to a particular transfer.
8. How long we keep it
We keep personal data only for as long as it is needed for the purpose it was collected for, and then for as long as the law requires us to keep business records. In practice:
- Enquiry emails and the correspondence that follows are kept while we handle the enquiry and any resulting business relationship, and afterwards for the statutory record-keeping periods that apply to commercial correspondence and accounting records under Turkish law.
- The draft in your browser is deleted as described in section 5.
- Security and delivery logs held by our providers are kept for the short periods set by those providers.
When a retention reason ends, the data is deleted, destroyed or anonymised in line with Article 7 of the KVKK.
10. Security
Pages and form submissions are transmitted over encrypted connections. The enquiry service validates every submission, accepts requests only from this website, limits repeated submissions and never fakes a success message: you see a confirmation only after the email service has accepted your enquiry. Access to the enquiry mailbox is limited to the people who need it. No method of transmission or storage can be guaranteed to be completely secure, so we cannot promise absolute security, but we take reasonable steps to protect your information.
11. Your rights
Under Article 11 of the KVKK you have the right to:
- learn whether your personal data is being processed;
- request information about the processing if it is;
- learn the purpose of the processing and whether the data is used in line with it;
- know the third parties, in Türkiye or abroad, to whom the data is transferred;
- request that incomplete or inaccurate data be corrected;
- request that the data be deleted or destroyed under the conditions in Article 7;
- request that corrections or deletions be notified to the third parties who received the data;
- object to a result that affects you and that was produced only by automated analysis of your data;
- claim compensation for damage caused by unlawful processing.
If you are in the EEA or the United Kingdom, you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection under the GDPR or UK GDPR, and the right to lodge a complaint with your local supervisory authority.
How to make a request
Email trade@pistami.com with the subject line “Personal data request”. To protect your data we may need to confirm your identity before acting; the KVKK application rules ask for your name, your contact details and a clear description of your request. We will answer free of charge and within the time the law allows: at most 30 days under Article 13 of the KVKK, and within one month under the GDPR, which may be extended where a request is complex.
If you are not satisfied with our answer, you may complain to the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) after applying to us first, or, where the GDPR applies, to the supervisory authority in your country.
12. Business use and children
This website is intended for businesses and the people who work for them. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
13. Changes to this notice
We will update this notice when our practices or the law change. The current version is always published on this page together with its effective date. Material changes that affect how we use enquiry data will be highlighted here.
14. Contact
Pistami İÇ VE DIŞ TİCARET LİMİTED ŞİRKETİ, trading as Pistami. Privacy enquiries: trade@pistami.com. For product questions you can also use the enquiry form or WhatsApp on +34 669 260 133. See also our Website Terms of Use.
