Fer Global
FerGlobal

Trade & Logistics

Privacy & Data Protection

Privacy Policy

We collect, process, and protect personal data in accordance with ISO 27001, KVKK, and international privacy standards. This notice explains how FER Global safeguards your information across our digital platforms and service delivery lifecycle.

Last updated: 29 October 2025
ISO 27001 & KVKK aligned

Our Privacy Commitments

We follow industry-recognized frameworks to keep your data secure, compliant, and under your control.

Transparent Processing

We explain why we collect data, the lawful basis we rely on, and who we share it with before any processing begins.

User Control

You can manage your preferences, access your data, and request corrections or deletion through clear processes.

Regulatory Compliance

Our governance program aligns with KVKK, GDPR principles, and ISO 27701 guidance for privacy management.

Data Inventory

Personal Data We Handle

We only collect the minimum data required to deliver services, respond to inquiries, and comply with regulatory obligations.

Identification Details

  • Name, surname, and title
  • National ID or tax numbers when mandated by customs legislation
  • Client account references used in our internal systems

Contact Information

  • Email addresses used for correspondence
  • Phone numbers supplied for service coordination
  • Company address or branch details provided in forms

Business Context

  • Industry, service interests, and shipment volumes
  • Contract documents, invoices, and customs filings
  • Support tickets and interaction history with our teams

Compliance Evidence

  • Identity verification records required by trade regulations
  • Consent logs and audit trails that demonstrate lawful processing

Website & Platform Usage

  • Device, browser, and session diagnostics for security monitoring
  • Preference cookies that remember language and portal settings
  • Aggregated analytics that help us improve user experience

Retention & Minimisation

We apply data retention schedules that comply with customs, tax, and commercial legislation while avoiding unnecessary storage.

Standard retention: Consent logs kept 18 months; contact and quote submissions retained 10 years to satisfy customs and tax obligations

How We Use Personal Data

Processing activities are mapped to lawful bases under KVKK and GDPR principles, supported by internal controls and audit evidence.

Service Delivery

Coordinating customs operations, logistics arrangements, and consultancy engagements you request.

Service Communication

Responding to contact, quote, and support requests and sending critical service updates.

Legal Obligations

Meeting statutory obligations for customs declarations, tax audits, and government reporting.

Performance & Quality

Monitoring service quality, security events, and anonymized analytics to enhance our platforms.

Security Monitoring

Detecting and preventing fraud, abuse, or unauthorized access to our systems and facilities.

Lawful Bases

Processing is grounded on contractual necessity, legal obligations, explicit consent, or legitimate interest assessments where appropriate.

KVKK Art.5, GDPR Art.6

Your Privacy Rights

You can exercise these rights at any time. We verify each request and respond within legal timeframes.

Access & Copies

Request confirmation about whether we process your data and receive a copy in a common format.

Rectification

Update incomplete or inaccurate records we hold about you.

Deletion

Ask us to delete personal data when it is no longer required or consent is withdrawn.

Restriction

Suspend processing while accuracy, objections, or legal claims are reviewed.

Objection

Object to direct marketing or processing based on legitimate interests.

How to Submit a Request

Please include enough information for us to identify you securely and describe the request you want to action.

Email: info@ferglobal.com.tr
KVKK request form: Download, sign, and send via secure channel or registered mail.
Response timeframe: We respond within 30 days as defined by KVKK.

If you are not satisfied with our response, you may apply to the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority.

Security Controls

Encrypted communications (TLS 1.2+), disk encryption, and token-based authentication guard all critical workloads.

Infrastructure Governance

Role-based access, network segmentation, and continuous monitoring aligned to ISO 27001 controls.

Retention & Disposal

Automated retention policies, secure wiping routines, and certificate-backed destruction for physical media.

International Data Transfers

Where data is processed outside Türkiye, we use contractual clauses, adequacy decisions, or explicit consent to maintain equivalent protection levels.

KVKK Art.9 & GDPR Art.45-49

Need More Information?

Our Data Protection Officer and compliance team are ready to help you with privacy questions or requests.