Privacy Policy

Effective Date: 04.08.2026

Last Updated: 04.08.2026

1. Introduction

Welcome to Cabineri, a brand of Isın Pres Yapı ve Mobilya Malzemeleri A.Ş. (“Company”, “we”, “our”, or “us”).

We are a Türkiye-based manufacturer specializing in the design, engineering, and production of custom and semi-custom cabinetry solutions, including kitchen cabinets, bathroom vanities, wardrobes, closets, laundry cabinets, storage systems, and other architectural millwork products for commercial and residential projects.

Our customers primarily include contractors, developers, builders, distributors, wholesalers, retailers, architects, interior designers, project managers, procurement companies, and other business entities operating in international markets.

We are committed to protecting the privacy and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, and safeguard personal information when you visit our website, request quotations, submit project documentation, communicate with us, or otherwise interact with our business.

This Privacy Policy has been prepared in accordance with applicable data protection legislation, including, where applicable:

Law No. 6698 on the Protection of Personal Data (“KVKK”) of the Republic of Türkiye;
The General Data Protection Regulation (EU) 2016/679 (“GDPR”);
Other applicable privacy and data protection laws governing our international business activities.

2. Scope

This Privacy Policy applies to personal information collected through our official website; contact, Request for Quotation (RFQ), dealer, distributor and supplier application forms; email, telephone and social media communications; online meetings; trade fairs, exhibitions and business meetings; customer support communications; technical documentation submitted to us; and any other interaction with our Company.

This Privacy Policy applies solely to business-related interactions and does not govern third-party websites or services that may be linked from our website.

3. Data Controller

For the purposes of applicable data protection legislation, the Data Controller is:

Isın Pres Yapı ve Mobilya Malzemeleri A.Ş.
Address: Akbelen Mah. Akbelen Bulvarı No:124/B, Toroslar, Mersin, Türkiye
Email: info@cabineri.com
Registered Electronic Mail (KEP): isinpres@hs01.kep.tr
Telephone: +90 324 323 0101
Website: https://www.cabineri.com

If you have any questions regarding this Privacy Policy or the processing of your personal information, you may contact us using the details above.

4. Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

4.1 Identification Information

We may collect your full name, business email address, business telephone number, company name, job title, department, country, business address, and company website.

4.2 Business Information

Where relevant to providing our products or services, we may collect company registration details, VAT or tax identification numbers, bank account details required to process payments (including account holder name, IBAN, bank name and SWIFT/BIC), shipping and billing information, preferred shipping destinations, preferred payment terms, purchase history, and commercial correspondence.

4.3 Project Information

As a manufacturer of custom and semi-custom cabinetry, we may collect technical information relating to your project. This includes design and layout documentation such as architectural drawings, cabinet layouts, kitchen plans and interior design drawings; specification documentation such as Bills of Quantities (BOQs), technical specifications, material, finish and hardware selections, and dimensions; and delivery-related documentation such as site requirements, project schedules, installation requirements, tender documentation, product schedules, and project photographs.

Some project documents may contain names or contact details of project participants.

4.4 Communications

We may collect information contained in communications between you and our Company, including emails, contact form submissions, meeting notes, telephone conversations, customer support requests, product inquiries, warranty requests, and complaint records.

4.5 Website Usage Information

When you access our website, certain technical information may be collected automatically. This includes device and connection data such as IP address, browser type and version, operating system, device type, screen resolution, preferred language and time zone; and usage data such as date and time of access, pages visited, time spent on pages, navigation paths, referring website, exit pages, click interactions, and website performance information.

5. How We Collect Information

5.1 Information You Provide Directly

You may provide information when you submit a quotation request, contact us through our website, download product catalogues, request technical documentation, apply to become a distributor or dealer, request samples, subscribe to newsletters, send us emails, participate in meetings, visit our exhibition stands, communicate with our sales team, or submit project drawings and specifications.

5.2 Information Collected Automatically

Some information is collected automatically through cookies, website analytics technologies, security monitoring tools, server logs, and device information.

5.3 Information Received from Third Parties

We may receive business-related information from business partners, distributors, architects, contractors, developers and project managers; from publicly available business directories, trade fair organizers and logistics providers; and from government authorities where legally required.

6. Why We Process Personal Information

We process personal information only where necessary for legitimate business purposes.

Pre-contractual and commercial purposes: responding to enquiries, preparing quotations and commercial proposals, reviewing project requirements, and carrying out engineering and technical evaluation.
Production and delivery: product development, manufacturing planning, order processing, production scheduling, logistics coordination, export documentation, and customs procedures.
Customer relationship: customer support, warranty administration, complaint handling, quality assurance, business relationship management, and improving our products and services.
Website and security: website administration, website security, and fraud prevention.
Legal and financial: compliance with legal obligations, and financial and accounting purposes.
Business development: commercial promotion and business development directed at corporate contacts whose professional field is directly relevant to our products.
Marketing: marketing communications where permitted by applicable law or based on your consent where required.

We do not use personal information for automated decision-making that produces legal or similarly significant effects on individuals.

7. Legal Bases for Processing Personal Information

Depending on the nature of our relationship with you and the applicable legislation, we process personal information on one or more of the following legal bases.

7.1 Performance of a Contract

We process personal information where it is necessary to:

Prepare quotations;
Respond to Requests for Quotation (RFQs);
Evaluate project documentation;
Manufacture products;
Deliver goods;
Provide after-sales support;
Fulfill our contractual obligations.

7.2 Steps Prior to Entering into a Contract

Where you request pricing, technical consultation, product information, samples, or engineering support before placing an order, we process your information in order to evaluate your request and determine whether a business relationship may be established.

7.3 Legitimate Business Interests

We may process personal information where necessary for our legitimate interests, provided such interests do not override your fundamental rights and freedoms. These legitimate interests include:

Operating and improving our business;
Managing customer relationships;
Responding to enquiries;
Improving website functionality;
Preventing fraud and cyber security incidents;
Protecting our legal rights;
Managing supplier and distributor relationships;
Conducting business development and commercial promotion directed at corporate contacts in relevant professional fields;
Maintaining business records;
Conducting internal reporting and analytics.

Where we contact you for commercial promotion purposes, the source from which we obtained your contact details is stated in our first communication, and every message provides a free-of-charge option to opt out. Following an opt-out request, no further promotional communication is sent to you.

7.4 Compliance with Legal Obligations

We may process personal information where required to comply with applicable laws, regulations, court orders, tax obligations, customs requirements, export regulations, accounting rules, or other legal obligations.

7.5 Consent

Where required by applicable law, we rely on your consent before:

Sending certain marketing communications;
Placing non-essential cookies on your device;
Using optional analytics or advertising technologies.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Sharing Personal Information

We do not sell, rent, or trade personal information. However, we may share personal information where necessary with trusted third parties in connection with our business operations, including:

Logistics and trade: shipping and freight companies, customs brokers, and warehousing providers.
Financial: banks and financial institutions involved in processing payments and trade finance instruments, external accountants, and auditors.
Professional advisors: legal advisors, insurance providers, and certification bodies.
Technology: IT service providers, cloud hosting and website maintenance providers, CRM and enterprise software providers, customer communication platforms, and email service providers.
Corporate: our shareholders, for the purposes of exercising shareholder rights and corporate reporting.
Authorities: government authorities where legally required.

Depending on the services we use, technology providers may assist with website hosting, email communications, cloud storage, customer relationship management, website analytics, security monitoring, fraud prevention, marketing communications, customer support, document management, and backup services.

Each recipient receives only the information reasonably necessary for the services they provide. Service providers are contractually required to process personal information only for authorized purposes and to maintain appropriate confidentiality and security measures.

9. International Data Transfers

As an international manufacturer serving customers in multiple countries, personal information may be transferred to or accessed from jurisdictions outside the Republic of Türkiye. Such transfers may occur in connection with international quotations, export documentation, international logistics, global customer support, cloud-based business systems, email communications, and collaboration with distributors or project partners.

Where such transfers are subject to the KVKK, they are carried out on the basis of one of the mechanisms set out in Article 9 of the Law, namely an adequacy decision, appropriate safeguards such as standard contractual clauses notified to the Personal Data Protection Authority, binding corporate rules, or a written undertaking approved by the Authority, or otherwise on the basis of one of the exceptional grounds permitted by the Law.

Where transfers are subject to the GDPR, they are carried out on the basis of an adequacy decision or appropriate safeguards, including the European Commission’s Standard Contractual Clauses, supplemented by technical and organizational measures where necessary.

10. Website Analytics and Marketing Technologies

To understand how visitors use our website and to improve our online services, we may use analytics and marketing technologies. These technologies help us understand website performance, visitor behavior, popular content, device usage, geographic trends, campaign effectiveness, and user experience.

The technologies currently used on our website are Google Analytics, Google Tag Manager, Google Consent Mode, LinkedIn Insight Tag, Meta Pixel, and Cloudflare Web Analytics. Where required by applicable law, these technologies are activated only after the appropriate consent has been obtained. This list is updated when the technologies we use change.

11. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve functionality, enhance security, remember user preferences, measure website performance, and support analytics and marketing activities.

Depending on applicable law, cookies may include strictly necessary, functional, performance, analytics, advertising, and preference cookies.

You may manage your cookie preferences at any time through our Cookie Preference Center or through your browser settings. Detailed information regarding the individual cookies we use, their purposes and their durations is available in our separate Cookie Policy.

12. Third-Party Websites

Our website may contain links to websites operated by third parties. These websites operate independently from us and have their own privacy practices. We do not control and are not responsible for the content, privacy practices, or security of third-party websites, and we encourage visitors to review the privacy policies of any third-party websites they visit.

13. Embedded Content

Our website may include embedded content or integrations provided by third parties, including videos, maps, social media content, downloadable documents, or interactive features. Interaction with such content may result in the collection of information by the respective third-party provider in accordance with their own privacy policies.

14. Data Security

We implement appropriate technical and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access. These measures include access controls and role-based permissions, encrypted communications where appropriate, firewall protection, malware monitoring, security updates, backup procedures, authentication controls, network monitoring, and staff confidentiality obligations.

Although we take reasonable steps to protect personal information, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

15. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy. The retention periods we apply are:

Commercial books, accounting records and contracts: 10 years from the end of the relevant financial year, in accordance with Article 82 of the Turkish Commercial Code No. 6102.
Tax and invoicing records: 5 years, in accordance with Tax Procedure Law No. 213.
Quotations and RFQs that do not result in an order: 3 years from the date of the last communication.
Project and technical documentation for completed orders: for the duration of the warranty period and 10 years thereafter, for product liability and after-sales support purposes.
General business correspondence: 3 years from the date of the last communication.
Website server and traffic logs: for the period required under Law No. 5651 and related regulations.
Marketing contact details and consent records: until consent is withdrawn, and 3 years thereafter as evidence of the withdrawal.
Job and dealer applications not resulting in a relationship: 1 year from the date of application.

Where a longer period is required by applicable law, or where information is needed for the establishment, exercise or defense of legal claims, retention may be extended accordingly.

When personal information is no longer required, we securely delete, destroy, or anonymize it using appropriate technical and organizational measures.

16. Your Privacy Rights

Depending on your country of residence and the applicable legislation, you may have the right to:

Request confirmation as to whether we process your personal information;
Request access to your personal information;
Request correction of inaccurate or incomplete personal information;
Request deletion of personal information where legally applicable;
Request restriction of processing under certain circumstances;
Object to specific processing activities where permitted by law;
Withdraw consent where processing is based on consent;
Request a copy of your personal information where applicable;
Request information regarding the recipients with whom your personal information has been shared, where required by law;
Lodge a complaint with the relevant supervisory authority.

These rights are not absolute and may be subject to limitations under applicable legislation.

17. Rights Under Turkish Personal Data Protection Law (KVKK)

If your personal information is processed within the scope of the KVKK, you may exercise the rights granted under Article 11 of the Law, including the right to:

Learn whether your personal data is being processed;
Request information regarding such processing;
Learn the purpose of processing and whether your personal data is used in accordance with that purpose;
Learn the third parties to whom personal data has been transferred domestically or internationally;
Request correction of incomplete or inaccurate personal data;
Request deletion or destruction of personal data where the conditions prescribed by law are met;
Request notification of correction, deletion, or destruction to third parties to whom personal data has been transferred, where required by law;
Object to a result arising against you through analysis exclusively by automated systems;
Request compensation for damages arising from unlawful processing.

If you are not satisfied with our response, or if we do not respond within the statutory period, you may lodge a complaint with the Personal Data Protection Authority of the Republic of Türkiye (Kişisel Verileri Koruma Kurumu) within thirty (30) days of becoming aware of our response, and in any event within sixty (60) days of the date of your application.

18. GDPR Rights

Where the GDPR applies to the processing of your personal information, you may have additional rights, including:

The right of access;
The right to rectification;
The right to erasure (“Right to be Forgotten”), where applicable;
The right to restrict processing;
The right to data portability, where applicable;
The right to object to processing;
Rights relating to automated decision-making and profiling, where applicable;
The right to withdraw consent at any time where processing is based on consent.

If you believe your personal information has been processed unlawfully, you may lodge a complaint with the competent data protection authority in your jurisdiction, which is generally the authority of the country where you reside, work, or where the alleged infringement occurred.

19. Exercising Your Rights

If you wish to exercise any of your privacy rights, you may contact us using the details in Section 24.

Where your request is made under the KVKK, it must be submitted in Turkish or English by one of the methods prescribed in the Communiqué on the Procedures and Principles of Application to the Data Controller: in writing to our registered address, in person or through a notary public; from your registered electronic mail (KEP) address to isinpres@hs01.kep.tr; using a secure electronic signature or mobile signature; or from an email address that you have previously notified to us and that is registered in our systems. Your request must include your name, your signature in the case of written applications, your Turkish identity number (or nationality and passport number for foreign nationals), your address or email address for notification, and the subject of your request. We will respond as soon as possible and in any event within thirty (30) days of receipt. Where the request requires additional cost, we may charge the fee set out in the applicable tariff. Where the response is provided on a recording medium such as a CD or flash drive, we may charge a fee equal to the cost of that medium.

Where your request is made under the GDPR, we will respond within one (1) month of receipt. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests, in which case we will inform you of the extension and the reasons for it within one month.

To protect personal information, we may request reasonable information necessary to verify your identity before responding to your request.

20. Children’s Privacy

Our website, products, and services are intended exclusively for business and professional use. We do not knowingly collect personal information from individuals under the age of eighteen (18). If we become aware that personal information relating to a child has been collected inadvertently, we will take appropriate steps to delete such information without undue delay.

21. Confidential Business Information

As part of quotation requests, engineering reviews, and project execution, customers may voluntarily provide confidential business information, including technical drawings, specifications, layouts, schedules, Bills of Quantities (BOQs), project documentation, pricing requests, and other commercially sensitive materials.

Such information is processed solely for legitimate business purposes, including technical evaluation, quotation preparation, engineering, manufacturing, logistics, customer support, and contractual performance.

We implement appropriate administrative, technical, and organizational measures to protect confidential business information against unauthorized access, disclosure, alteration, or misuse. Nothing in this Privacy Policy shall be interpreted as granting any third party ownership rights over confidential information submitted to us.

22. Intellectual Property Materials

Documents submitted through our website or directly to our representatives, including drawings, renderings, specifications, schedules, CAD files, BIM files, and other technical documentation, may contain intellectual property owned by customers, architects, designers, contractors, or other third parties.

We process such materials solely for the purpose of evaluating, quoting, manufacturing, or supporting the requested project, and do not acquire ownership of such intellectual property through their submission.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in applicable laws, regulatory requirements, business operations, technologies, security practices, website functionality, or our products and services.

Any updated version will be published on this page together with a revised Effective Date. Where required by applicable law, we will provide appropriate notice of material changes.

24. Contact Information

If you have any questions regarding this Privacy Policy or our privacy practices, please contact us.

25. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of Türkiye, without prejudice to any mandatory rights granted to individuals under applicable international data protection legislation, including the GDPR where applicable.