Cookie Policy and Privacy Notice

Last updated: 07.09.2026 · Policy version: 1.0

1. Data controller

Under Turkish Law No. 6698 on the Protection of Personal Data (the “Law”), the data controller is MENEKŞE TEKSTİL SANAYİ VE TİCARET ANONİM ŞİRKETİ.

• Address: Bozburun Mahallesi, Bozburun Caddesi No: 19/1, Merkezefendi / DENİZLİ
• Phone: +90 258 371 74 00
• E-mail: info@meneksetextile.com
• Website: www.meneksetextile.com

2. What is a cookie?

Cookies are small text files stored on your device through your browser when you visit a website. They are used to make the site work, to remember your preferences and — where you have consented — to produce statistics about site usage. Data obtained through cookies (cookie ID, IP address, browser and device information, pages visited) may qualify as personal data under the Law.

3. Consent model: non-essential cookies are off by default

On our website, no cookie other than strictly necessary ones is activated without your explicit consent. Even if you make no choice in the cookie bar shown on your first visit, analytics and similar cookies remain inactive (opt-in). The “Reject All” option is presented on the same layer, at the same size and with the same single click as “Accept All”.

If you give consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

⚙ Manage my cookie preferences / withdraw consent

4. Cookies used

The tables below list the cookies used on the site by category, together with each cookie’s purpose, retention period, first/third-party nature and cross-border transfer status.

5. Transfer abroad

No personal data is transferred abroad in respect of strictly necessary cookies. Fonts, stylesheets and JavaScript libraries used on the site — including Google Fonts — have been removed from third-party CDNs and are now served from our own server. As a result, simply opening a page does not cause your IP address to be sent to any server abroad.

Only if you give explicit consent to performance/analytics cookies does Google Analytics 4 load, and the data concerned is processed by Google LLC (United States). This transfer relies on your explicit consent under Article 9/1 of the Law. If you do not consent, or if you withdraw consent, Google Analytics is never loaded and the related cookies are deleted from your browser.

Unless analytics consent is given, no other personal data is transferred abroad.

6. Transfer to third parties within Türkiye

Data obtained through cookies is not sold, rented or transferred for marketing purposes to any third party within Türkiye. Data is stored solely on the servers of our hosting service provider, acting as a data processor under confidentiality and data security undertakings. In addition, disclosure may be made to authorised public authorities upon their lawful requests, to the extent required by applicable legislation under Article 5/2-(a) of the Law.

7. Security measures (administrative and technical)

• Opt-in architecture: Non-essential cookies are blocked at code level; the relevant scripts are never loaded unless consent is given, so a “reject” choice is technically enforced.
• Removal of third-party connections: Fonts and libraries are self-hosted; no request is made to any third-party domain before consent.
• Withdrawable consent: The preference panel can be opened from any page with one click; when consent is withdrawn the related cookies are deleted from the browser.
• Data minimisation: Consent logs do not store the raw IP address; only its irreversible digest (SHA-256 with a server-side secret) is kept.
• Transport security: Site traffic is encrypted with HTTPS/TLS; cookies are written with the SameSite=Lax and Secure attributes.
• Access control: The admin panel is protected by authentication; database queries use prepared statements.
• Time limit: Consent expires automatically after 180 days and is requested again; when the policy version changes, earlier consents are invalidated.

8. Consent records (logs)

Every cookie decision (accept, reject, custom selection, withdrawal) is recorded server-side, beyond user intervention. Records cannot be altered or deleted by the client. Each record contains:

• a consent record number (randomly generated; it does not identify you),
• the action taken (accept all / reject all / custom / withdrawal),
• the choice made per category,
• the policy version in force at the time of consent,
• a timestamp based on server time,
• an irreversible digest of the IP address (the raw IP is not stored),
• browser information (user agent), language and the page on which consent was given.

These records are kept solely to meet the burden of proof under the Law and are produced to the data subject or to the Turkish Data Protection Authority upon request.

9. Managing cookies in your browser

In addition to the “Manage my cookie preferences” link above, you can delete or block cookies through your browser settings. If strictly necessary cookies are blocked, some parts of the site may not work.

10. Data subject rights and applications

Under Article 11 of the Law you have the right to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether the data is used in accordance with that purpose; know the third parties to whom the data is transferred domestically or abroad; request rectification if the data is incomplete or inaccurate; request erasure or destruction under Article 7; request that rectification, erasure or destruction be notified to third parties to whom the data was transferred; object to a result to your detriment arising from analysis solely by automated systems; and claim compensation for damage arising from unlawful processing.

You may submit your requests in writing to the address above, or by e-mail to info@meneksetextile.com, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application will be concluded within 30 days at the latest.

11. Changes

This policy is updated where legislation or cookie usage on the site changes. When the policy version changes, earlier consents are invalidated and your cookie preference is requested again.