Cookie Policy for European visitors
This Cookie Policy explains how Atabaş Grup Dış Ticaret Ltd Şti uses cookies and similar technologies on atabas.com.tr and related pages. It describes what these technologies are, why they are used, how visitor preferences are managed, and which rights individuals in the European Economic Area and the United Kingdom may exercise under the GDPR and applicable ePrivacy rules.
This version is prepared specifically for visitors located in the EEA and the United Kingdom. It is structured for transparency, consent control, retention clarity, third party disclosure, and user rights in a format aligned with the ATB HTML PAGE model used on the FAQ page.
Four main cookie categories
Strictly necessary, preferences, statistics, and marketing categories are separated clearly for easier visitor understanding.
Consent based processing
Non essential cookies are activated only after a valid and recorded user choice through the website cookie interface.
European privacy framework
The page is designed around GDPR and related ePrivacy expectations for transparency, control, and rights management.
Controller transparency
Data controller identity and contact route are presented in a dedicated governance section for practical reference.
Third party visibility
External providers, transfer safeguards, and retention logic are grouped in a readable and structured legal section.
Aligned page architecture
This fragment follows the same top alignment logic as the FAQ page so the content begins close to the header without unwanted white gaps.
What cookies and similar technologies are
This section explains the technologies covered by the policy and the functional difference between temporary, persistent, first party, and third party identifiers.
Visitors should understand that cookies are only one part of the broader technical environment. Local storage, pixels, tags, SDKs, and server side identifiers may also support services, preferences, security, and analytics depending on the tools active on the site.
Small text files used for continuity and functionality
Cookies are small text files stored on a device such as a computer, phone, or tablet when a visitor accesses a website. They help maintain sessions, preserve settings, improve security, and support a stable browsing experience.
Depending on their purpose, cookies may also support consent storage, technical continuity, and performance measurement in a proportionate and structured way.
Comparable tools used alongside standard cookies
Similar technologies may include local storage, pixels, tags, SDKs, and server side identifiers. These tools can support analytics, preferences, embedded services, and service reliability depending on the site features enabled.
Where such technologies process personal data or operate beyond what is strictly necessary, they are handled in line with the same consent and transparency principles described in this policy.
Session and persistent storage periods
- Session cookies are deleted when the browser session closes and are commonly used for navigation continuity and secure operation.
- Persistent cookies remain stored until they expire or are deleted manually and may preserve settings, consent choices, or technical identifiers across visits.
First party and third party distinction
- First party cookies are set directly by the Atabaş Group domain to support site operation and visitor choices.
- Third party cookies may be set by external services such as analytics tools, spam protection systems, embeds, content delivery services, or other integrations used by the website.
Data controller, purpose, and legal basis
The following blocks identify the controller, the main reasons cookies are used, and the legal basis applied under GDPR for visitors in Europe and the United Kingdom.
Strictly necessary technologies stay active because they are required for core service continuity. Preference, analytics, and marketing related technologies require consent before activation when European rules apply.
Why cookies are used
Cookies and related technologies are used to keep the website working correctly, maintain session integrity, support security controls, manage load balancing, and reduce abuse risk.
They may also remember user preferences, help evaluate website performance, support forms or embedded services, and where applicable support marketing only after valid consent.
Strictly necessary basis
Where cookies are essential to website operation or to provide a service requested by the visitor, the legal basis is legitimate interests in secure and reliable service delivery, and where relevant the necessity to provide the requested functionality.
Consent based basis
Preference, analytics, and marketing cookies are used only after a valid consent choice is made through the site banner or settings interface. Consent can later be adjusted or withdrawn by the visitor.
How categories are presented to visitors
The exact live cookie list may change depending on activated services. For that reason the cookie banner and settings panel remain the primary technical source for current cookie names, providers, and durations.
If non essential cookies are rejected, the website remains available, although some convenience functions, embeds, or measurement features may become limited.
Strictly necessary cookies
These cookies support core site operation, security, consent storage, session continuity, form protection, bot mitigation, and similar technical needs required for safe and stable service delivery. Because the website cannot function correctly without them, they remain active by default.
Preference cookies
These cookies store optional choices such as language, region, or selected interface preferences. They are activated only after a visitor accepts them through the cookie banner or settings panel.
Statistics and analytics cookies
These cookies measure usage patterns, page interactions, traffic flows, time on page, and broad performance signals. They help improve the website, but for European visitors they operate only after valid consent.
Marketing cookies
Where marketing technologies are actually enabled, these cookies may support conversion measurement, remarketing, or audience analysis. They are never activated without an active opt in by the visitor.
Consent management, browser controls, and visitor rights
European visitors must be able to manage cookies easily. This section explains both site level controls and broader GDPR rights where personal data is processed through cookies or similar identifiers.
Withdrawing consent does not affect processing already carried out before withdrawal. However, the visitor’s updated choice should apply going forward through the active cookie settings configuration.
Cookie banner and settings panel
When a visitor first enters the site, the cookie banner should present options to accept, reject, or customize non essential cookies. The same choices should remain accessible later through a cookie settings link or button, usually placed in the footer.
This approach supports meaningful consent management and aligns the page text with the technical configuration visitors actually use.
Additional management through browser tools
Visitors may also use browser settings to delete stored cookies, block future cookies, or request a warning before storage. These controls provide an additional layer of management, although blocking strictly necessary cookies may affect site performance or disable certain core functions.
Recipients, international transfers, retention, and updates
This final section groups the operational items visitors usually look for when reviewing a detailed cookie policy.
The goal is to explain who may receive data, whether international transfers occur, how long cookies remain active, and how policy updates are communicated.
Third party services and recipients
Some cookies may be placed by external providers when their services are embedded or used on the website, such as analytics tools, spam protection services, content delivery systems, maps, video players, or similar integrations. Depending on the service structure, those providers may act as processors or as independent controllers.
International transfers and safeguards
If a provider processes data outside the EEA or the United Kingdom, appropriate safeguards should be applied where required, such as Standard Contractual Clauses and supplementary measures where necessary. Transfer details should be reflected in the cookie settings panel or related privacy documentation where applicable.
Retention, expiry, and updates
Session cookies expire when the browser closes, while persistent cookies remain until they reach their expiry date or are deleted manually. The active cookie settings panel should show current durations for each cookie. This policy may be updated from time to time to reflect legal, operational, or technical changes.
Effective date, add the date of publication or the latest update when this page is published in production. The date should correspond with the active cookie banner configuration and the live service environment used on the website.
Need more information about privacy, cookies, or consent settings?
For privacy related requests, consent questions, or clarification about cookies used on the Atabaş Group website, visitors should use the contact route shown in the Privacy Notice or the website contact form.