Privacy Policy

How we handle your personal data and shipping documents, which cookies and measurement tools this site uses, who we share data with, and the rights you have under Turkish data protection law.

Last updated: 27 July 2026

This document explains how SCK Temsilcilik ve Dış Ticaret, trading as SCK Representation, collects and uses personal data. It also serves as the disclosure notice required by Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), which is the law that governs our processing.

1. Who is responsible for your data

Your personal data is processed by the following company as data controller:

Company details
Registered name	SCK Temsilcilik Dış Ticaret Mehmet Kocabaşa (sole proprietorship)
Trading as	SCK Representation
Address	Fenerbahçe, Bağdat Cad. No: 122, 34726 Kadıköy / İstanbul, Türkiye
Email	sck@scktr.com
Phone	+90 216 366 17 99
Registry no	200106-5 (Istanbul Chamber of Commerce — İTO)

The company was founded in 2001 and acts as an authorised agent for obtaining ECTN, BESC, CTN, ACD and FERI cargo tracking certificates for the 32 destinations we serve across Africa and the Middle East.

2. Who this notice covers

This notice applies to our customers and their staff and representatives, prospective customers, visitors to this website, anyone who contacts us by form, email, phone or WhatsApp, and third parties named in the shipping documents our customers send us (the contact people for shipper, consignee and notify parties).

3. The data we process

3.1. Data you give us directly

When you complete a form on this site, email or message us on WhatsApp, or call us, we process:

Identity and contact data: name, company name, email address, phone number.
Enquiry data: destination country, anything you write in the message field, and our correspondence with you.
Files you upload: up to 3 files of up to 5 MB each, in PDF, PNG or JPEG format, through the application form.

3.2. Data contained in your shipping documents

We process the information in the bills of lading, freight invoices, commercial invoices, customs declarations where required, and any other documents the destination asks for. Some destinations require the contact name, phone number, email address and tax number of the shipper, consignee and notify parties before a certificate can be issued.

3.3. Data collected automatically

Technical data: IP address, browser and operating system, device type, pages viewed, time spent on the site, and the page or search that referred you.
Server logs: access records kept by our hosting provider for security and error tracking.
Cookie and measurement data: only if you have given consent (see Section 5).

3.4. Data we do not collect

We do not ask for or process special categories of data such as health, biometric, religious or membership data. Documents you send us should not contain data of this kind; if they do, please remove it first. We do not collect payment card details through this website.

4. Why we process your data, and on what legal basis

Purpose	Legal basis (KVKK Art. 5)
Preparing your certificate application, submitting it to the issuing council or authority, following it up and delivering the certificate to you	Necessary for the conclusion or performance of a contract — Art. 5/2-c
Responding to quote requests, contact forms and correspondence	Art. 5/2-c and legitimate interest — Art. 5/2-f
Invoicing, collection, accounting and commercial book-keeping	Expressly provided for by law — Art. 5/2-a, and legal obligation — Art. 5/2-ç
Meeting statutory retention, notification and disclosure obligations	Art. 5/2-ç
Establishing, exercising or defending legal claims	Art. 5/2-e
Keeping the website secure and preventing spam and abuse	Legitimate interest — Art. 5/2-f
Measuring website usage (Google Analytics 4) and advertising performance (Meta Pixel)	Explicit consent — Art. 5/1

Analytics and advertising measurement run only if you select “Accept” in the cookie notice. Refusing or withdrawing that consent has no effect whatsoever on the service you receive from us.

5. Cookies and tracking tools

sck-consent — stored in your browser’s local storage and holds nothing but your cookie choice (granted / denied). Without it we cannot remember your preference. It has no expiry date and is removed when you clear this site’s data. It is never shared with third parties.
Server access logs — this site is hosted on Netlify (a US-based provider). Technical records of your page requests are created there for security and error tracking.
Form submissions — application and contact forms reach us through Netlify Forms; the form content and any documents you attach are stored on that infrastructure.

A cookie notice appears the first time you visit. Until you select “Accept”, the tools below place no measurement cookies on your device and build no profile of you: under Google Consent Mode v2, analytics_storage, ad_storage, ad_user_data and ad_personalization are all denied by default.

For transparency: because these scripts load with the page, cookieless technical requests can still reach their providers before you consent. Those requests include your IP address.

Google Analytics 4 (measurement ID: G-8XPPD065JJ)

What it does: produces aggregate statistics on how many people visit, which pages they view, where they came from, and interactions such as starting or submitting a form (form_start, generate_lead).
When it runs: cookie-based measurement starts only after you select “Accept”. At that point we grant analytics_storage only; the three advertising signals (ad_storage, ad_user_data, ad_personalization) stay denied, so Google does not use this data to target advertising to you. If you do not consent, no measurement cookie is created in your browser and Google receives only the cookieless technical requests described above.
Cookies: _ga and cookies beginning _ga_; the provider’s default lifetime is up to 2 years.
Provider: Google LLC and its affiliates. Data may be processed on servers outside Türkiye, including in the United States.

Meta Pixel (pixel ID: 1579889363208105)

What it does: this is an advertising tool. Once you consent, it sends page views (PageView) and lead events such as form submissions and WhatsApp clicks (Lead) to Meta. Meta may use this to measure advertising performance and build advertising audiences.
When it runs: the pixel script loads in consent: revoke state. With JavaScript enabled in your browser, no events are sent to Meta until you select “Accept”. Downloading the script from Meta’s servers does technically disclose your IP address to Meta.
Cookies: _fbp (first party) and fr (third party, set on facebook.com); the provider’s default lifetime is up to 90 days.
Provider: Meta Platforms, Inc. and its affiliates. Data may be processed outside Türkiye, including in the United States.

Selecting “Accept” in the cookie notice enables both the analytics and the advertising measurement tools together. Selecting “Reject” leaves both switched off and records that preference.

5.3. Other third-party connections on this site

Typefaces — fonts are served from our own domain. No connection is made to a third-party font service, so your IP address is not disclosed to anyone for this purpose.
YouTube — on pages with video, the player loads from youtube-nocookie.com and only after you click play. Nothing is sent to YouTube unless you start a video.
WhatsApp — if you use the WhatsApp link, the conversation runs on Meta’s WhatsApp service and is subject to WhatsApp’s own terms.

Your cookie choice is stored in your browser, per device. To withdraw it:

Clear the stored site data and cookies for scktr.com in your browser settings. This deletes the sck-consent record, so the cookie notice will appear again on your next visit and you can select “Reject”.
You can also block cookies in your browser settings, switch Google Analytics measurement off entirely with Google’s browser opt-out add-on, or limit ad personalisation in your Meta account settings.
You are welcome to email sck@scktr.com and ask us instead.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

We do not sell your personal data, and we do not rent or transfer it to third parties for marketing. It is shared only with the following recipients, and only as far as necessary:

The shippers’ councils, customs authorities and their appointed platforms or agents that issue the certificate. Your documents are sent for the sole purpose of obtaining the certificate you asked for, limited to the documents that destination requires. Our agency contracts with these bodies impose strict confidentiality obligations on the documents we submit.
Our IT service providers: website and form infrastructure (Netlify), email and office software, and measurement tools (Google, Meta — only where you have consented).
Our accountant, auditors, lawyers and banks — for accounting, audit, collection and legal purposes.
Public authorities — where they are legally entitled to request information.

7. International transfers

Some of your data necessarily leaves Türkiye:

Your shipping documents are transferred to the shippers’ council, customs authority or appointed platform of the destination country. Without that transfer the certificate you have asked for cannot be obtained.
Website hosting, form infrastructure and — where you have consented — measurement data are processed on servers outside Türkiye, including in the United States.

These transfers are made under Article 9 of the KVKK as amended by Law No. 7499, in force since 1 June 2024. That article allows transfers where the Turkish Personal Data Protection Board has issued an adequacy decision, or, failing that, where appropriate safeguards such as a standard contract, an undertaking or binding corporate rules are in place, or where one of the derogations in Article 9(6) applies to an occasional transfer.

Your certificate documents are transferred to the relevant council or customs administration solely to obtain the certificate you asked for, and only to the extent needed for that purpose. The safeguard the transfer relies on varies by destination country; you can request that detail for a specific shipment at sck@scktr.com.

Transfers connected to the measurement tools rely on the consent you give in the cookie notice and stop when you withdraw it.

8. How long we keep data

Data	Retention period
Certificate application files and shipping documents	After the certificate process is complete, for the statutory retention periods that apply
Enquiries, quotes and form submissions	After your request is concluded, for the limitation period that applies to a potential dispute
Invoices, accounting records and commercial books	For the statutory periods required by law (the periods set by the Turkish Commercial Code and the Tax Procedure Law)
Server access logs	For the period set by our hosting provider for security and error tracking
Cookie preference (`sck-consent`)	Until you clear it from your browser
Google Analytics 4 measurement data	For the data retention period configured on the Google Analytics property (where you have given consent)

When the period ends or the purpose falls away, personal data is deleted, destroyed or anonymised in line with the Turkish regulation on the erasure, destruction and anonymisation of personal data.

9. Security

The main measures we take under Article 12 of the KVKK:

The whole site is served over HTTPS/TLS, with HSTS, a content security policy and framing protection in place.
Access to customer documents is limited to the staff who genuinely need it to do the work; access is restricted even inside the company.
Our staff are bound by confidentiality obligations.
Confidentiality and data processing obligations are agreed with our service providers.

That said, no transmission over the internet and no method of electronic storage is 100% secure.

If a breach occurs: we notify the Turkish Personal Data Protection Board without delay and within 72 hours of becoming aware of it, and we notify the people affected as soon as reasonably possible.

10. Third parties named in your documents

Bills of lading and invoices you send us may contain contact details of people other than you. Before sharing them, it is your responsibility to inform those people that their data will be passed to us and on to the relevant council for the certificate application, and to obtain their consent where that is required. Those people have all the rights set out in this notice and can contact us directly.

11. AI training

We do not use the documents you send us, or the data in them, to train artificial intelligence or machine learning models, and we do not give them to third parties for that purpose. Your documents are used only to obtain the certificate you requested and to meet the legal obligations attached to it.

12. Your rights

Under Article 11 of the KVKK you may apply to us to:

learn whether we process your personal data,
request information about that processing,
learn the purpose of the processing and whether the data is used in line with that purpose,
know the third parties, in Türkiye or abroad, to whom your data has been transferred,
have incomplete or inaccurate data corrected,
have your data erased or destroyed, subject to the conditions in Article 7 of the KVKK,
have any correction, erasure or destruction notified to the third parties your data was transferred to,
object to a result reached solely through automated analysis of your data that works against you,
claim compensation if you suffer loss because your data was processed unlawfully.

How to make a request

Under the Turkish Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request:

in writing with a wet signature to Fenerbahçe, Bağdat Cad. No: 122, 34726 Kadıköy / İstanbul, Türkiye,
or from the email address already registered with us to sck@scktr.com.

Your request should state your name, your Turkish ID number (for foreign nationals, your nationality and passport or ID number), an address for our reply, your email address and phone number if you want to be contacted that way, and what you are asking for.

We answer free of charge and within 30 days at the latest, depending on the nature of the request. Where responding involves a cost, we may charge the fee set in the Board’s tariff.

Complaints

If we reject your request, if you consider our answer inadequate, or if we do not answer in time, you may complain to the Turkish Personal Data Protection Board within 30 days of learning our answer and in any event within 60 days of your original request. Details are at kvkk.gov.tr.

If you are in the EEA or the UK, data protection law there may also give you rights in relation to some of this processing. Write to us at sck@scktr.com and we will deal with your request.

13. Children’s data

Our services are for commercial shipments and this website is not directed at children. We do not knowingly collect children’s personal data.

14. Changes to this notice

We may update this notice to reflect changes in our practice or in the law. The current version is always published on this page and the “last updated” date above is changed.

Substantive change in this version of 27 July 2026: the “data use for AI training” clause that appeared in earlier versions has been removed in full. Your documents are not used for that purpose. Sections on cookies, measurement tools, international transfers and your rights have been added.

15. Contact

For any question or request about this notice or your personal data:

Email: sck@scktr.com
Phone: +90 216 366 17 99
Address: Fenerbahçe, Bağdat Cad. No: 122, 34726 Kadıköy / İstanbul, Türkiye
Contact form: /en/contact-us/

Our service terms are set out in the Terms and Conditions.