Privacy Policy and KVKK Disclosure Notice

I Who is responsible for your data

The data controller is Efarms Modern Agriculture, Gülbahar Mah., Büyükdere Cd. Beng Plaza No:107, Kat 4, 34349 Şişli / İstanbul, Türkiye.

For any question about this notice or about your personal data, write to info@efarms.com.tr.

II What we collect

• —Inquiry form (/contact): your name, your e-mail address, the desk you selected and your message — plus, if you choose to give them, your organisation and telephone number. The language of the page and the IP address of the request are stored with the inquiry.
• —Newsletter: your e-mail address, the language you subscribed in, and the IP address of the request.
• —Partner Portal accounts: your name, e-mail address, organisation and the time of your last sign-in. Your passphrase is never stored — only an argon2id hash of it.
• —Audience measurement: the page visited, the language, the referring website or the campaign tag of the link you arrived on, whether you are on a desktop, a tablet or a phone, and the date and time.

That is the complete list. This site has no advertising pixels, no social-media trackers, no session recording and no third-party analytics service. Its content security policy blocks requests to any other domain, so no data about your visit leaves this server.

III Analytics without cookies, and without your IP address

Our audience measurement is first-party and deliberately minimal.

We do not set an analytics cookie and we do not store your IP address. To count a returning reader within a day without identifying anyone, the server computes a one-way hash of your IP address and browser user-agent together with a secret salt that is replaced every twenty-four hours. Once the salt rotates, yesterday's hash can never be linked to today's — and neither can be reversed back into an IP address. Requests recognised as bots are discarded.

If you arrive through a campaign link carrying a ?src= tag, that tag is kept in your browser's own session storage until you close the tab, so that it can be attached to the visit. It is a short label describing the campaign, not an identifier of you.

Measurement records are deleted automatically after roughly 400 days.

IV Cookies

Browsing this website sets no cookies at all.

A single strictly necessary session cookie (efarms_s) is set only if you sign in to the Partner Portal or to the Efarms Console. It carries a random session identifier, is marked HttpOnly, Secure and SameSite=Lax, and expires when you close the browser or when the session times out. Because it is required to keep you signed in and to protect the forms against cross-site request forgery, it is not subject to consent.

V Why we use your data, and on what legal basis

• —To answer you. Inquiry-form and WhatsApp messages are read, routed to the relevant desk and answered by e-mail or telephone.
• —Investor relations. If you ask about an allocation in a project, we use your contact details to send you information, to arrange a consultation or a site visit, and — if you decide to proceed — to prepare a contract.
• —Newsletter. If you subscribe, your e-mail address is used only to send the market briefing you asked for.
• —Security and abuse prevention. The IP address stored with a form submission is used to limit the rate of submissions and to investigate abuse.
• —Understanding, in aggregate, what people read, so that we can improve the site.

Under KVKK Article 5 we rely on your explicit consent where you give it (the newsletter), on the necessity of processing for the establishment or performance of a contract (investor and portal relationships), on our legal obligations (Article 5/2-ç) and on our legitimate interests (Article 5/2-f) for security and aggregate audience measurement. Special categories of personal data as defined in Article 6 are not collected by this website; please do not include any in a message to us.

VI Who else sees your data

We do not sell personal data, we do not rent it, and we do not share it for anyone else's marketing.

Inquiry and subscription data is held on the server that runs this website, operated by our hosting provider in a data centre under a service agreement. Inquiry notifications are delivered by e-mail through the same provider's mail service. Access is limited to Efarms staff who need it for their work.

We disclose personal data outside Efarms only where a law, a court or a competent public authority requires it, or where it is necessary to establish or defend a legal claim.

VII International transfers

The website and its database are hosted in Türkiye.

Many of our readers and investors are in the Gulf and elsewhere outside Türkiye. If you write to us from abroad, your message reaches a server in Türkiye; and when we reply to you or send you documents, the data travels to your country. Where a transfer abroad is required — to send you a contract or a report, for example — it is made on the basis of your explicit consent, or because it is necessary for the performance of a contract with you, in line with KVKK Article 9.

VIII How long we keep it

• —Inquiries: for as long as the relationship is live, and afterwards for as long as is needed to answer questions about it or to meet a legal obligation.
• —Newsletter subscriptions: until you unsubscribe.
• —Partner Portal accounts: for the duration of the partnership.
• —Audience-measurement records: about 400 days, then deleted automatically.

When a retention period ends, records are deleted or anonymised.

IX How your data is protected

• —The whole site is served over HTTPS, with HSTS.
• —Passphrases are stored as argon2id hashes, never in readable form, and sign-in attempts are throttled.
• —Documents that are not public are stored outside the web root and streamed through the application after an access check.
• —Uploaded images are re-encoded, so hidden content cannot travel inside them.
• —A strict content security policy prevents the site from loading code or assets from any other domain.

X Your rights under KVKK

Article 11 of Law No. 6698 gives you the right to learn whether your personal data is processed; to request information about it; to learn the purpose of the processing and whether the data is used in accordance with that purpose; to know the third parties to whom it has been transferred; to have incomplete or inaccurate data corrected; to request its erasure or destruction; to require that a correction or an erasure be notified to those third parties; to object to a result produced solely by automated analysis; and to claim compensation for damage caused by unlawful processing. If you are in a jurisdiction that grants comparable rights of access, rectification, erasure, restriction, portability or objection, we handle your request on the same terms.

To exercise any of these rights, write to info@efarms.com.tr from the address you used with us, or by post to the address in section I. We answer within thirty days at the latest. If our answer does not satisfy you, you may complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).

XI Children

This website is addressed to businesses and to adult investors. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to info@efarms.com.tr and we will delete it.

XII Links and messaging apps

Pages here link to WhatsApp, to map services and to our social-media profiles. Once you leave this site, the operator of that service handles your data under its own policy, not this one. The WhatsApp buttons open a conversation with a message already typed for you; nothing is sent until you send it, and the conversation happens inside WhatsApp.

XIII Changes to this notice

If this notice changes, the new version is published on this page and the date at the top is updated. Where a change materially affects how we use data you have already given us, we tell you directly.