KVKK notice

Data Controller

Under the Turkish Personal Data Protection Law No. 6698 (“KVKK” or the “Law”), your personal data is processed by Çelik Dövme San. Tic. Ltd. Şti. (the “Company”) as data controller, within the scope described below.

Head office / Istanbul plant: Cebeci, 2803. Sk. No:12, 34270 Sultangazi / İstanbul, Türkiye. Bursa plant: Organize Sanayi Bölgesi, 3. Cadde, No: 26, Mustafakemalpaşa / Bursa. Phone: +90 212 594 27 90 · E-mail: info@celikdovme.com.

This notice is prepared under Article 10 of the Law and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.

Categories of Personal Data

Depending on your relationship with the Company, the following data may be processed:

• Identity: first name, last name.
• Contact: phone number, e-mail address, company address.
• Professional: company, title / role.
• Customer transaction: content of the quotation request, product group, material, weight and quantity, reference number, correspondence.
• Transaction security: timestamp of the form submission and technical server-side records.

Purposes of Processing

Your data is processed in line with the general principles in Article 4 of the Law for the following purposes:

• Receiving, assessing and answering quotation and information requests,
• Conducting pre-contract negotiations and planning orders, production and shipments,
• Managing customer and supplier relations and communication,
• Fulfilling obligations under commercial and tax legislation,
• Running information security processes and preventing misuse,
• Establishing, exercising and defending legal claims.

Legal Grounds

Processing relies on the following grounds in Article 5(2) of the KVKK:

• (c) processing is necessary for the establishment or performance of a contract,
• (ç) processing is necessary for compliance with a legal obligation of the controller,
• (e) processing is necessary for the establishment, exercise or protection of a right,
• (f) processing is necessary for the legitimate interests of the controller, provided it does not harm your fundamental rights and freedoms.

Method of Collection

Data is collected partly by automated and partly by non-automated means through the quotation / contact form on our website, e-mail, phone and in-person meetings.

Transfers

For the purposes above and in line with Articles 8 and 9 of the KVKK, data may be transferred to competent public authorities, to business partners as permitted by law, to logistics and customs service providers, and to IT service providers.

Website hosting and form infrastructure are provided by service providers whose servers may be located abroad. Cross-border transfers take place under the appropriate safeguards (including standard contractual clauses) and procedures set out in Article 9 of the KVKK as amended by Law No. 7499.

Retention

Data is kept for as long as the purpose requires and for the limitation and retention periods set by applicable law, such as the Turkish Commercial Code No. 6102 and the Tax Procedure Law No. 213. Afterwards it is erased, destroyed or anonymised under the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.

Your Rights

Under Article 11 of the KVKK you may apply to the Company to:

• learn whether your data is processed and request information about it,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties in Türkiye or abroad to whom it is transferred,
• request rectification of incomplete or inaccurate data,
• request erasure or destruction under the conditions in Article 7,
• request that rectification, erasure or destruction be notified to recipients,
• object to an adverse outcome resulting exclusively from automated analysis,
• claim compensation for damage arising from unlawful processing.

How to Apply

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may send your request with a signed letter identifying you to Cebeci, 2803. Sk. No:12, 34270 Sultangazi / İstanbul, Türkiye, in person or via a notary, or by secure electronic signature, mobile signature or from an e-mail address registered with the Company to info@celikdovme.com.

Requests are concluded free of charge as soon as possible and within thirty (30) days at the latest; where an additional cost arises, the fee set by the Personal Data Protection Board may be charged. If your request is refused, the answer is insufficient or no timely answer is given, you may complain to the Board under Article 14 of the KVKK.