Personal Data Protection — Information Notice

Identity of the Data Controller

Your personal data is processed by Gökçeler Makina San. ve Tic. Ltd. Şti. (the “Company”) as data controller, within the scope explained in this notice. Our contact details are listed at the top of this page.

Personal Data Processed

The following categories of data may be processed through our website and business processes:

• Identity data: name, surname, job title.
• Contact data: e-mail address, phone number, company address.
• Customer transaction data: quotation and work order requests, technical drawings and order correspondence.
• Transaction security data: IP address, browser and device information, site usage records (only where consent-based cookies are used).
• Request and complaint management data: the content of messages you send via the contact form.

Purposes of Processing

Your personal data is processed for the following purposes:

• Responding to quotation, order and work order requests,
• Answering your questions about our products and services and carrying out communication activities,
• Establishing and performing contracts, conducting sales and procurement processes,
• Fulfilling financial, legal and administrative obligations, storage and archiving activities,
• Conducting information security processes and operating the website securely,
• Where you have given explicit consent, performance measurement and promotional activities.

Legal Grounds

Your data is processed on the following legal grounds set out in Article 5 of the KVKK:

• Processing is directly related to the establishment or performance of a contract (Art. 5/2-c),
• Processing is mandatory for the data controller to fulfil its legal obligations (Art. 5/2-ç),
• Processing is necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f),
• Your explicit consent for non-essential cookies and promotional activities (Art. 5/1).

Method of Collection

Your personal data is collected through the contact form on our website, e-mail, telephone, fax, courier and physical documents, as well as correspondence within commercial relationships, by partly automated and non-automated means.

Transfers

Your personal data may be transferred, only to the extent necessary for the purposes above and in accordance with Articles 8 and 9 of the KVKK, to authorised public institutions, our legal and financial advisors, courier and logistics companies, and our hosting and IT service providers. Where data is transferred abroad, the conditions set out in Article 9 of the KVKK are met.

Retention Period

Your personal data is retained for as long as necessary for the purpose of processing and until the end of the statutory limitation and retention periods. Once these periods expire, your data is deleted, destroyed or anonymised.

Rights of the Data Subject (KVKK Art. 11)

Under Article 11 of the Law you have the right to:

• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether the data is used accordingly,
• Know the third parties, at home or abroad, to whom the data is transferred,
• Request rectification if the data is incomplete or incorrect,
• Request erasure or destruction under the conditions in Article 7,
• Request notification of rectification, erasure or destruction to third parties to whom the data was transferred,
• Object to a result against you arising from analysis solely by automated systems,
• Claim compensation if you suffer damage due to unlawful processing.

How to Apply

You may submit your requests in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller: by a signed written application delivered in person or via notary to the address above, or by e-mail from the address registered in our systems (or via registered electronic mail, KEP) to omermert@gokcelermakina.com or ahmetnazmi@gokcelermakina.com. Applications are concluded free of charge within 30 days at the latest; where the process entails an additional cost, the fee set by the Board may be charged.