Last updated: October 12, 2026
This Privacy Policy explains how EBR HVAC collects and uses personal data when you visit ebrhvac.com or contact us through it.
Who We Are
EBR HVAC is the HVAC duct machinery brand of EBR METAL. The data controller for this website is:
EBR METAL MAKİNE İÇ VE DIŞ TİC. LTD. ŞTİ.
Araplar Mah. Ankara Cad. No: 74/28, Karatay / Konya / Türkiye
Email: [email protected]
Phone: +90 332 502 88 48
What Data We Collect
Data you give us
- Contact and quote forms: first and last name, email address, phone or WhatsApp number, company, country, subject, inquiry type, machine group, machine or model, quantity and your message.
- Newsletter: your email address.
- Email, phone and WhatsApp: any details you choose to share when you write or call us directly.
Data collected automatically
- Form submission details: date and time, the page you sent the form from and your browser’s user agent. These are attached to the message we receive.
- Security and delivery data: your IP address and basic request data are processed by our hosting provider and by Cloudflare to deliver the site and protect it from attacks and spam.
- Spam protection: our forms use Cloudflare Turnstile, which checks your browser for signs of automated activity before a form is sent.
We do not ask for sensitive data. Please do not include it in your messages.
How We Use Your Data
| Purpose | Legal basis |
|---|---|
| Answering your inquiry and preparing quotations | Steps taken at your request before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Sending our newsletter | Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
| Website statistics (Google Analytics) | Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
| Keeping the website secure and free of spam | Our legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Meeting legal and tax obligations once you become a customer | Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
We do not sell your personal data and we do not use it for automated decision-making.
Who We Share Data With
We share data only with service providers who help us run the website and our email, and only as far as needed:
- Cloudways (website hosting)
- Cloudflare (content delivery, security and Turnstile spam protection)
- Google Workspace (business email; form messages and replies are handled in our Google mailboxes)
- Google Analytics (website statistics, only with your consent)
- EBR METAL sales and support staff
- Authorized EBR METAL dealers or service partners in your region, only when you ask us to put you in touch with them
If you contact us on WhatsApp, WhatsApp’s own privacy terms apply to that conversation.
International Transfers
Some of our service providers process data outside Türkiye and outside the European Economic Area. Where this happens, we rely on the safeguards these providers offer, such as standard contractual clauses, and on the conditions of KVKK Article 9.
Cookies and Similar Technologies
ebrhvac.com uses the following technologies:
- Security and spam protection: Cloudflare and Cloudflare Turnstile may set or read technical data to tell real visitors from bots.
- Embedded videos: when product videos are added, YouTube may set cookies once you play a video.
- Statistics (only with your consent): we use Google Analytics to understand how visitors find and use the site, for example which pages are viewed and which country visitors come from. Google Analytics cookies are set only after you accept them in the cookie banner. You can change your choice at any time through the cookie settings link at the bottom of every page.
We do not use advertising cookies.
How Long We Keep Data
- Inquiries and quotation requests: for as long as needed to answer you and follow up on your request, and up to 3 years afterwards for business correspondence.
- Website statistics: Google Analytics data is kept for the retention period set in our Google Analytics account (14 months).
- Customer records: for the periods required by Turkish commercial and tax law.
- Newsletter: until you unsubscribe.
Your Rights
Depending on where you live, you can ask us to:
- tell you whether we process your personal data and give you a copy of it,
- correct inaccurate data,
- delete your data or restrict its use,
- object to processing based on our legitimate interest,
- withdraw your consent (for example, unsubscribe from the newsletter) at any time,
- move your data to another provider where this applies.
These rights come from the EU General Data Protection Regulation (GDPR) and from Article 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK). To use them, email [email protected]. We will reply within 30 days. You may also complain to your local data protection authority or, in Türkiye, to the Personal Data Protection Authority (KVKK).
Security
The site runs on HTTPS. Access to form messages is limited to the staff who handle inquiries.
Children
This website is intended for businesses. We do not knowingly collect data from children.
Changes to This Policy
We may update this policy when our website or services change. The date at the top shows the latest version.
Contact
Questions about this policy or your data: [email protected]