Privacy Policy

INTERNATIONAL GLOBAL PRIVACY POLICY AND NOTICE ON THE PROTECTION OF PERSONAL DATA

Last Update: October 31, 2026

This Privacy Policy describes how personal data is processed within the scope of the insidechina.tr website operated by Inside China and the services offered through this website.

Inside China; Türkiye can work with customers, partners and relevant parties located in different countries, including the European Union/European Economic Area, the Russian Federation and the People's Republic of China.

Personal data is processed within the applicable legislation, which may vary depending on the country where the relevant person resides and the nature of the data processing activity. To this extent, the applicable legislation, such as the Personal Data Protection Law No. 6698 (“KVKK”) in Turkey, the General Data Protection Regulation (“GDPR”) in the European Union, the Personal Data Protection Law (“PIPL”) in China, and the applicable legislation regarding the protection of personal data in the Russian Federation, are taken into account.

This Policy does not eliminate or limit the rights you have under applicable legislation.

 

1. DATA CONTROLLER

In personal data processing activities carried out by Inside China, depending on the nature of the relevant processing activity, the data controller, the data processor, or another data processing role may be involved.

Data controller in Turkey:

Company Title:
[COMPANY NAME]

Address:
[COMPANY ADDRESS]

Email:
[email protected]

KVKK applications:
[email protected]

Website:
insidechina.tr

 2. WHAT PERSONAL DATA DO WE PROCESS?

Depending on the nature of the service and the information provided by you, the following categories of data may be processed by Inside China:

Identity and representation information
– Name and surname
– Company/organization name
– Position or title
– Information regarding the authority to act on behalf of the company

Contact information
– Email address
– Phone number
– Country and city information
– Preferred communication channel

Demand and commercial information
– The content of the request submitted via the website
– Product or service requests
– Offers and purchase requests
– Technical or commercial explanations
– Documents and information provided by you for the evaluation of the request

Technical information
– IP address
– Date and time information
– Browser and device information
– Operating system information
– Technical records regarding the use of the website
– Security and error logs

Transaction and security records
– Request number
– Request generation and update records
– OTP/verification records, if applicable
– Security and access records

3. PURPOSE OF PROCESSING PERSONAL DATA

Your personal data may be processed for the following purposes:

– Receiving and evaluating requests submitted through the website
– Contacting you regarding the request
– Execution of product and service processes
– Requesting additional information or documents
– Execution of customer and business relationships
– Preparation and implementation of contracts
– Execution of billing and accounting processes
– Providing technical support
– Ensuring the security of the website
– Prevention of unauthorized access, misuse, and fraud
– Fulfillment of legal obligations
– Exercise and protection of legal rights
– Improving the quality of service

4. REQUESTING THROUGH THE WEBSITE

If you create a request through Inside China, in order to evaluate your request and carry out the service process, you may be contacted using the contact information you provided during the application.

This communication;

– Email,
– Phone,
– SMS,
– WhatsApp,
– Telegram,
– WeChat

or can be carried out through other communication channels deemed appropriate.

The use of these channels does not mean the creation of a new application or the creation of a separate customer profile.

The primary purpose of communication is to evaluate the request submitted by you through the website, provide information about the request, request additional information or documents if necessary, and carry out the service process.

If you use WhatsApp, Telegram, WeChat or similar third-party communication platforms, the respective platforms’ own privacy policies and terms of use may also apply.

5. LEGAL PROCESSING REASONS

Personal data may be processed based on one or more of the following legal grounds, depending on the relevant country's legislation and the nature of the processing activity carried out:

– Necessary for the establishment or performance of the contract
– Fulfillment of a legal obligation
– The existence of the data controller’s legitimate interest
– The establishment, exercise or protection of a right
– Explicit consent where the explicit consent of the relevant person is required
– Other applicable legal processing conditions

In cases where explicit consent is not legally required, the processing of personal data shall not be based solely on explicit consent.

6. TO WHO PERSONAL DATA CAN BE TRANSFERRED

Your personal data may be transferred to the following persons or organizations to the extent required by the service and in accordance with applicable regulations:

– Officials and representatives of Inside China
– Relevant representatives in Turkey, the European Union/EEA, Russia and China
– Hosting and server service providers
– Email and communication service providers
– DNS and internet security service providers
– Accounting, legal and professional consulting services providers
– Competent public institutions and organizations
– Other parties necessary for fulfilling legal obligations or protecting rights

The transfer is carried out only to the extent necessary.

7. HOSTING AND TECHNICAL INFRASTRUCTURE

Third-party hosting services are used in the technical infrastructure of the Inside China website.

The website server infrastructure is provided by Hostinger, and the current web hosting infrastructure is hosted on a server location in Malaysia.

Therefore, personal data submitted through the website may be processed or stored on the server infrastructure in Malaysia for the technical operation of the website, data storage, and the provision of the service.

If the server infrastructure or the service provider is changed in the future, data processing activities are carried out in accordance with the specifications of the relevant new infrastructure and applicable legislation.

Backup, security, maintenance, or support activities carried out within the hosting service provider’s own technical infrastructure may involve the use of infrastructure in different countries. In such a case, the relevant data transfer is carried out in accordance with the requirements of applicable personal data protection legislation.

8. CLOUDFLARE AND NETWORK SECURITY

The website’s DNS management can be used with third-party technical service providers such as Cloudflare for network security and to protect internet traffic.

As part of these services, IP addresses related to links to the website, technical connection information, security logs, and similar technical data may pass through third-party infrastructure or be processed on such infrastructure, depending on the nature of the service.

In the event of the use of such service providers, the relevant contracts regarding the protection of personal data, the terms of service, and applicable international data transfer rules shall be taken into account.

9. TRANSFER OF PERSONAL DATA OUTSIDE THE COUNTRY

Because Inside China operates in different countries and its website’s technical infrastructure is located outside of Turkey, personal data may be transferred to different countries as required by the service.

Data transfer abroad;

– the existence of an enforceable decision of qualification,
– the use of appropriate safeguards mechanisms,
– standard contracts,
– binding company rules,
– other transfer mechanisms provided for in the relevant legislation

or may be performed under applicable exceptional provisions.

In terms of data transfers from Turkey to abroad, Article 9 of the KVKK and the relevant secondary legislation provisions are taken into account.

In cases where the standard contract must be used under the KVKK, the relevant standard contract is signed and the notification obligations stipulated by the legislation are fulfilled.

Data transfers abroad are carried out only to the extent necessary for the relevant processing activity.

10. TRANSFER FROM TURKEY TO MALAYSIA

Due to the fact that the website is hosted on a server infrastructure in Malaysia, personal data obtained from Turkey via the website may be transferred to or processed in that infrastructure in Malaysia.

This transfer is carried out in accordance with the provisions of the KVKK regarding data transfers abroad.

If necessary, appropriate safeguards mechanisms within the scope of the KVKK, standard contracts, or other legal mechanisms provided for by the legislation are used for the transfer.

11. TRANSFER FROM THE EUROPEAN UNION / AEA TO OUTSIDE THE COUNTRY

If personal data belonging to the relevant persons in the European Union or the European Economic Area is transferred to third countries, the provisions of the GDPR regarding the transfer of data abroad may apply.

Where necessary, qualification decisions accepted by the European Commission, Standard Contract Clauses (SCCs), or other appropriate safeguards accepted under the GDPR can be used.

12. TRANSFER FROM CHINA TO OUTSIDE THE COUNTRY

In the event that personal information belonging to individuals located in the People's Republic of China is transferred outside of China, the PIPL and the relevant Chinese regulations regarding cross-border data transfers shall be taken into account to the extent applicable.

The necessary legal mechanisms applicable to the nature of the transfer can be used.

13. TRANSFER FROM RUSSIA TO OUTSIDE THE COUNTRY

The Russian Federation’s applicable personal data legislation is taken into account regarding the processing of personal data belonging to individuals located in the Russian Federation and the cross-border transfer thereof.

Data localization, cross-border transfers, notifications, and other legal requirements are applied according to the nature of the data processing activity, if necessary.

14. DATA PROCESSORS AND SERVICE PROVIDERS

Within China, the service may utilize third-party service providers for the technical or commercial execution of the service.

These service providers are:;

– Hosting
– DNS and network security
– Email
– Communication
– Technical support
– Accounting
– Law
– Professional consulting

We can provide services such as.

Personal data shared with service providers is limited to the data necessary for the provision of the service.

15. SECURITY OF PERSONAL DATA

Within China, it aims to implement appropriate technical and administrative security measures to protect personal data against unauthorized access, modification, loss, misuse, or unlawful processing.

These measures may vary depending on the nature of the data processed and the current technological capabilities.

Possible security measures include:;

– Authorization and access controls
– Secure connection protocols
– Server and application security
– Security wall and network security
– Controls to prevent unauthorized access
– Keeping records of the system and security
– Data backup and recovery procedures
– Restricting personnel access

It can be included.

16. COMPLETENESS OF DATA AND CRYPTOGRAPHIC CONTROLS

Cryptographic hash methods can be used to verify the integrity of files or records when necessary.

Hash values can help verify the integrity of data; however, they do not by themselves mean encrypting personal data or creating an electronic signature.

17. PERIOD OF STORAGE OF PERSONAL DATA

Personal data is stored for the duration necessary for the purpose of processing and taking into account the retention periods stipulated in the relevant legislation.

When determining the storage period;

– Nature of the request
– Contractual relationship
– Legal obligations
– Accounting and financial records
– Time limits for legal disputes
– Security and control requirements

can be taken into account.

Upon the expiration of the retention period, personal data is deleted, destroyed, or made anonymous in accordance with applicable regulations.

18. TECHNICAL LOG RECORDS

In order to secure and operate the website, IP address, access time, browser information, error logs, and similar technical information may be logged.

The retention period for these records is determined based on security needs and applicable legal obligations.

19. REMOVAL AND DESTRUCTION OF PERSONAL DATA

Personal data;

– The end of the processing purpose,
– The expiration of the legal retention period,
– The relevant person has a valid request for deletion and the deletion is legally possible

In such cases, it can be deleted, destroyed, or made anonymous in accordance with applicable legislation.

Data that is required to be stored legally may be retained for the relevant retention period.

20. RIGHTS OF THE PERSON IN QUESTION

Depending on applicable legislation, regarding your personal data;

– To learn whether your personal data is being processed or not
– Requesting information about the personal data processed
– Requesting the correction of incorrect or incomplete data
– Requesting deletion or destruction in cases permitted by legislation
– Requesting the restriction of processing
– Objection to the transaction
– Requesting data portability in some cases
– Taking legal action in the event of unlawful processing of personal data

You may have rights.

The scope of these rights may vary according to applicable country legislation.

21. RIGHTS OF INTERESTED PERSONS IN TURKEY

Under the KVKK, individuals may request information about their personal data within the scope of the rights provided in Article 11 of the Law and exercise other rights specified in the law.

Applications:

[email protected]

It can be sent to the address or the above-mentioned contact address of the data controller.

Applications are evaluated within the procedures and timeframes stipulated by the KVKK and the relevant secondary legislation.

22. PERSONALS IN THE EUROPEAN UNION / AEA

In cases where the GDPR is applicable, individuals can exercise their rights under the GDPR.

Among these;

– Access
– Correction
– Delete
– Restriction of processing
– Data portability
– Objection
– Withdrawal of consent in case of consent-based processing

rights may be available.

For the exercise of rights:

[email protected]

You can apply to their address.

23. INTERESTED PERSONS IN CHINA

In cases where PIPL is applicable, the relevant individuals may exercise their rights recognized under PIPL in accordance with the relevant legislation.

Applications:

[email protected]

It can be sent to the address.

24. PERSONS RESPONSIBLE IN RUSSIA

Within the scope of the applicable personal data legislation in the Russian Federation, the rights of the relevant persons are applied according to the relevant legislation and the nature of the processing activity.

Applications:

[email protected]

It can be sent to the address.

25. AUTOMATIC DECISION-MAKING AND PROFILING

Within China, this Policy does not aim to make fully automated decisions that affect the legal status of individuals or have similarly significant consequences.

In the event of security purposes, technical analysis, logging, or identifying misuse, these activities are carried out within the limits required by relevant legislation.

26. COOKIES

The website may use cookies or similar technologies to provide the necessary technical functions, maintain security, and improve the user experience.

The type of cookies used and, if necessary, consent may be obtained from the user according to the relevant legislation.

Cookie preferences can be managed through the browser used or the relevant tools on the website.

27. DATA OF CHILDREN

Inside China’s services are primarily designed for companies and adult users.

It is not intended to knowingly collect personal data of children without a necessary legal basis.

If it is thought that personal data belonging to a child has been processed inappropriately, you can contact us.

28. DATA SECURITY INFRINGEMENT

In the event of a data breach that may affect the security of personal data, Inside China will conduct the necessary assessments under applicable legislation and fulfill its related notification obligations.

If necessary, a notification can be made to the relevant regulatory authorities and/or the affected parties within the timeframes stipulated by the legislation.

29th DATA MINIMIZATION

Within China, it aims to avoid collecting and processing personal data that is not necessary for the provision of services.

The information requested from users is kept to the extent necessary to evaluate the relevant service or request.

30. THIRD-PARTY WEBSITES AND SERVICES

Links to third-party websites, communication platforms, or service providers may be found on the website.

These third parties may have their own privacy policies and terms of use.

Inside China, third parties are not responsible for their own independent data processing activities, subject to the responsibilities stipulated by relevant legislation.

31. CHANGES IN THE PRIVACY POLICY

This Privacy Policy may be updated due to changes in legislation, changes in our services, or changes in our technical infrastructure.

The current policy shall be effective as of the date it was published on the insidechina.tr website.

In the event of significant changes, the relevant individuals may also be informed, as required by applicable legislation.

32. CONTACT

For questions about privacy, the protection of personal data or data processing activities:

Email:
[email protected]

KVKK applications:
[email protected]

Web:
insidechina.tr

33. EFFECTIVE

This Privacy Policy came into effect on October 31, 2026.

This Policy should be evaluated in conjunction with applicable personal data protection legislation.