Data Subject Request Form
Version: 2.0 — 26 August 2026
Use this form to exercise any of your rights under the GDPR, the UK GDPR or Turkish Law No. 6698 (KVKK). You are not obliged to use it — a plain e-mail to [email protected] carries exactly the same weight — but the form helps us answer you faster and more completely.
Send to: [email protected] Or by post: Oz Ra Tekstil İhracat, Kuşpınar Mah. Muammer Aksoy Cd. No 11/8, 20150 Pamukkale / Denizli, Türkiye
Part 1 — About you
| Field | Your answer |
|---|---|
| Full name | |
| Company (if your enquiry was made on behalf of a business) | |
| E-mail address used when contacting us | |
| Telephone (optional) | |
| Country of residence | |
| Preferred reply channel | E-mail / Post |
If you are acting on behalf of someone else, please attach written authority. We cannot release a person's data to a third party without it.
Part 2 — What you are asking for
Mark one or more:
- [ ] Confirm whether you hold personal data about me
- [ ] Give me a copy of the personal data you hold (access request)
- [ ] Correct data that is inaccurate or incomplete
- [ ] Erase my personal data
- [ ] Restrict processing while a dispute is resolved
- [ ] Provide my data in a portable format so I can transfer it elsewhere
- [ ] Stop processing carried out on the basis of legitimate interest (objection)
- [ ] Withdraw my consent to analytics cookies
- [ ] Tell me who my data has been shared with
- [ ] Notify recipients of a correction or erasure you have made
- [ ] Other — please describe below
Part 3 — Details
Please help us find the right records. Anything you can give here shortens the process:
- Approximate date of your enquiry:
- Product or category you asked about:
- Any reference number from our reply:
- If you are asking for correction, what should the data say instead:
- Anything else:
Part 4 — Verifying who you are
We must be satisfied that you are who you say you are — otherwise we would risk disclosing your data to someone else. In most cases, replying from the e-mail address used in your original enquiry is enough. If we cannot match your request to a record, we may ask one further question about the enquiry. We will not ask you to send identity documents unless the request concerns a large volume of data and identity is genuinely in doubt.
What happens next
| Step | Timing |
|---|---|
| We acknowledge receipt | Within 3 business days |
| We verify your identity and locate the records | Within the response period |
| We reply substantively | Within 30 days of receiving a complete request |
| If the request is complex, we may extend | We will tell you why, before the 30 days expire |
The response is free of charge. We would only charge for a request that is manifestly unfounded or repetitive, and we would tell you before doing anything.
If we cannot act on part of your request — for example where commercial records must be retained under tax legislation — we will say exactly which part, and why.
If you are not satisfied with our answer
You may complain to a supervisory authority at any time:
- EEA: the data protection authority of your country of residence, place of work, or where the issue arose
- United Kingdom: the Information Commissioner's Office
- Türkiye: Kişisel Verileri Koruma Kurumu (Personal Data Protection Authority)
You do not need our permission, and you do not have to contact us first — though we would rather have the chance to resolve it directly.