Cookie Policy
As Izmir Commodity Exchange (“Data Controller”), we use various cookies to ensure that our users can benefit from our website services securely and without interruption, improve the user experience, collect statistical information and protect the privacy of our visitors. In this context, your personal data may be processed through cookies.
This Cookie Policy explains the types of cookies used on our website, their purposes, retention periods, the legal grounds for processing personal data and how you can manage your cookie preferences.
Strictly necessary cookies are used to ensure the security and proper functioning of our website. Non-essential functional, performance/analytics and marketing/advertising cookies are activated only with your consent where explicit consent is required.
As the Data Controller, we may process personal data collected through cookies based on the conditions for processing personal data specified in Article 5 of the Personal Data Protection Law No. 6698 (“Law”) or the explicit consent of the data subject. We may discontinue the use of cookies on our website or change their types or functions. Any updates to this Cookie Policy will take effect on the date they are published on our website.
What Are Cookies?
Cookies are small text files placed on your device through your browser by the websites you visit. Cookies may be used to ensure the proper functioning of a website, remember your preferences, analyze website usage and provide content or advertisements tailored to users' preferences.
What Types of Cookies Do We Use on Our Website?
- Strictly Necessary Cookies: These cookies are used to enable the basic functions of our website, manage sessions, ensure form security and remember cookie preferences. As they are essential for the secure and proper functioning of the website, they cannot be disabled through the cookie preference panel.
- Functional Cookies: These cookies facilitate the use of our website by remembering user preferences such as language and region.
- Performance/Analytics Cookies: These cookies are used to collect visitor statistics, analyze website usage, improve the user experience and measure website performance.
- Marketing/Advertising Cookies: These cookies are used to display advertisements relevant to users' interests, evaluate the performance of advertising campaigns and measure conversions. These cookies are activated only with your explicit consent.
Cookie Inventory
| Cookie Name | Category | Purpose | Duration | Party |
|---|---|---|---|---|
| cookie_consent_level | Strictly Necessary | Recording your cookie preferences | 365 days | First-party |
| .AspNetCore.Antiforgery.* | Strictly Necessary | Ensuring security during form submissions and providing CSRF protection | Session | First-party |
| .AspNetCore.Session / ASP.NET_SessionId | Strictly Necessary | Managing session information | Session | First-party |
| _ga | Performance/Analytics | Distinguishing visitors through Google Analytics | 2 years | Google (third-party) |
| _ga_* | Performance/Analytics | Tracking session status through Google Analytics 4 | 2 years | Google (third-party) |
| _gid | Performance/Analytics | Distinguishing visitors over short periods through Google Analytics | 24 hours | Google (third-party) |
| cookie_consent_user_accepted | Strictly Necessary | Remembering cookie acceptance or rejection preferences | 180 days | First-party |
| cookie_consent_user_consent_token | Strictly Necessary | Storing the unique identifier of the consent record (ConsentLog) and providing proof of consent | 180 days | First-party |
| _gcl_au | Marketing/Advertising | Google Ads conversion tracking and evaluation of advertising performance | 90 days | Google (third-party) |
| arm_consent_proof | Strictly Necessary | A security token that helps verify that the client has received a valid cookie preference page or banner response from the server; contains a random or pseudonymous identifier (HttpOnly, Secure over HTTPS, SameSite=Lax) | 24 hours | First-party |
| Google Maps embedding (iframe) | Functional | Displaying the location map on the contact page; the iframe is not loaded without consent | Subject to Google's Cookie Policy | Google (third-party) |
This inventory is kept up to date according to the analytics and advertising integrations actively used on our website. Necessary updates will be made whenever a new cookie or tracking technology is introduced.
Purposes of Processing Personal Data
Your personal data collected through cookies may be processed exclusively for the following purposes:
- Ensuring secure and uninterrupted access to our website services,
- Conducting website visitor analyses,
- Improving the user experience,
- Collecting statistical information,
- Measuring and improving website performance,
- Remembering user preferences,
- Evaluating feedback about our website and carrying out improvement activities,
- Conducting advertising and marketing activities based on explicit consent,
- Carrying out information security processes,
- Establishing evidence in potential disputes and protecting legal rights,
- Fulfilling obligations arising from applicable legislation.
Legal Grounds for Processing Personal Data
Your personal data may be processed based on the following legal grounds specified in Article 5 of the Personal Data Protection Law No. 6698, depending on the nature of the processing activity:
- Processing is necessary to fulfill legal obligations arising from Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through Such Publications, the Turkish Penal Code No. 5237 and other applicable legislation,
- Processing is necessary for the legitimate interests of the Data Controller, provided that it does not prejudice the fundamental rights and freedoms of the data subject,
- Processing is necessary for the establishment, exercise or protection of a legal right,
- The personal data has been made public by the data subject,
- The data subject has given explicit consent.
Where explicit consent is required for non-essential cookies, your personal data will be processed only if you provide explicit consent for the relevant cookie category.
Transfer of Personal Data
Your personal data obtained through cookies may be transferred solely for the purposes of conducting website operations, maintaining the quality standards of the services provided, performing visitor analyses, ensuring technical infrastructure and fulfilling obligations arising from applicable legislation, in accordance with the conditions stipulated in Articles 8 and 9 of the Law.
Within this scope, your personal data may be shared with website developers, technical infrastructure and hosting service providers, website analytics companies, advertising and marketing service providers, business partners, public institutions and organizations legally authorized to request such data, and regulatory authorities.
The use of third-party services such as Google Analytics, Google Ads and Google Maps may involve the transfer of data to the relevant service providers. Where the transfer of personal data abroad is necessary, the conditions stipulated in Article 9 of the Law will be observed.
Managing Cookie Preferences
You may change your preferences regarding non-essential cookie categories or withdraw your previously given explicit consent at any time through the Cookie Settings link located at the bottom of our website.
You may also delete cookies through your browser settings or configure your browser to block cookies. However, blocking strictly necessary cookies may prevent certain sections of our website from functioning properly.
Retention of Consent Records
To provide proof of your cookie preferences and consent, the following data is processed as part of the ConsentLog record:
- The unique identifier of the consent record (ConsentId) and the unique transaction/event identifier (EventId),
- Your cookie category preferences (functional, performance/analytics, marketing/advertising),
- Date and time of consent,
- Your language preference,
- The version of the Cookie Policy applicable at the time of consent (PolicyVersion) and the integrity hash of the notice displayed to you (ConsentNoticeSha256),
- Your browser information (User-Agent),
- Your truncated or minimized IP address (with the last octet/64 bits set to zero).
This data is processed within the scope of the relevant legal grounds specified in Article 5 of the Law for the purposes of recording consent transactions, ensuring information security and fulfilling legal obligations.
Consent records are retained for a maximum of 180 days from the date of the most recent consent and are deleted or anonymized at the end of this period. Records may also be manually deleted by authorized administrators through the administration panel.
Retention and Destruction of Personal Data
Your personal data processed through cookies is retained only for the period necessary to fulfill the purposes of processing and within the retention periods prescribed by applicable legislation.
When the purpose of processing no longer exists or the statutory retention period expires, your personal data will be deleted, destroyed or anonymized in accordance with applicable legislation.
Your Rights as a Personal Data Subject Under Article 11 of the Law
Pursuant to Article 11 of the Personal Data Protection Law No. 6698, you have the following rights as a personal data subject:
- To learn whether your personal data has been processed,
- To request information regarding the processing of your personal data, if it has been processed,
- To learn the purpose of processing your personal data and whether it has been used in accordance with that purpose,
- To know the third parties to whom your personal data has been transferred, whether domestically or abroad,
- To request the correction of your personal data if it has been processed incompletely or inaccurately,
- To request the deletion or destruction of your personal data,
- To request that corrections, deletions and destruction operations be communicated to third parties to whom your personal data has been transferred,
- To object to any result that is detrimental to you and arises from the analysis of your processed data exclusively through automated systems,
- To request compensation for damages incurred as a result of the unlawful processing of your personal data.
You may submit applications regarding the rights listed above by completing the Izmir Commodity Exchange Data Subject Application Form available at www.itb.org.tr and sending it in writing to the headquarters of Izmir Commodity Exchange in accordance with Article 5 of the “Communiqué on the Procedures and Principles of Application to the Data Controller,” or by sending it to [email protected] in accordance with the methods and conditions prescribed by applicable legislation.
Your applications will be processed as soon as possible and no later than 30 days, depending on the nature of your request. Applications are generally processed free of charge. However, if processing your request incurs additional costs, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.
Contact
For questions regarding our cookie practices or the processing of your personal data, you may contact us using the following details.
Data Controller: Izmir Commodity Exchange
Website: www.itb.org.tr
Email: [email protected]
