KVKK Privacy Notice

1. Data controller

Your personal data is processed, as the data controller, by the company whose details are given below:

2. Personal data processed

• Identity data: first name, last name.
• Contact data: e-mail address, phone number.
• Customer / request data: company name, type of request, message content, quote and sample request details.
• Transaction security data: IP address, browser and device information, date and time of the transaction, the page from which the form was submitted, language preference.
• Cookie data: language preference cookie (see the Cookie Policy for details).

3. Purposes of processing personal data

• Receiving, evaluating and responding to contact and quote requests,
• Carrying out sample, order and sales processes and providing pre-sales and after-sales support,
• Providing information about the promotion of products and services (only in accordance with the applicable legislation),
• Carrying out information security processes and preventing spam and misuse,
• Providing the functions of the website and remembering user preferences,
• Fulfilling legal obligations; establishing, exercising and protecting rights in legal disputes,
• Carrying out accounting, finance and tax processes.

4. Method of collection and legal bases

Your personal data is collected by automated or partially automated means in electronic form, such as the contact / quote forms on the website, e-mail, phone, WhatsApp and cookies. Processing activities are based on the following legal bases set out in Article 5, paragraph 2 of the KVKK:

• It is directly related to the establishment or performance of a contract (Art. 5/2(c)) — quote, sample and sales processes,
• It is mandatory for the data controller to be able to fulfill its legal obligation (Art. 5/2(ç)) — accounting and tax legislation,
• It is mandatory for the establishment, exercise or protection of a right (Art. 5/2(e)),
• It is mandatory for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5/2(f)) — site security and request management,
• Your explicit consent (Art. 5/1) for processing that is not mandatory (for example, commercial electronic messages or optional cookies).

5. Transfer of personal data

In accordance with Articles 8 and 9 of the KVKK, and limited to the purposes of processing, your personal data may be transferred to the following groups of recipients:

• Website hosting, e-mail and technical infrastructure service providers,
• Business partners and advisors in the fields of law, financial advisory and accounting,
• Public institutions and organizations authorized by law and judicial authorities.

Where service providers are located abroad, the transfer is carried out on the basis of your explicit consent, an adequacy decision, or the existence of the appropriate safeguards provided for in Art. 9 of the KVKK (standard contract, undertaking, etc.).

6. Your rights under Art. 11 of the KVKK

By applying to the data controller, you have the following rights regarding your personal data:

• To learn whether your personal data is being processed,
• To request information if it has been processed,
• To learn the purpose of processing and whether it is used in accordance with that purpose,
• To know the third parties to whom it is transferred, domestically or abroad,
• To request correction if it has been processed incompletely or inaccurately,
• To request its deletion or destruction within the framework of Art. 7 of the KVKK,
• To request that the correction, deletion and destruction operations be notified to the third parties to whom the data has been transferred,
• To object to the emergence of a result against you through the analysis of the processed data exclusively by automated systems,
• To request compensation for the damage if you suffer damage due to unlawful processing.

7. Application procedure

You may submit your requests regarding the rights above, together with information and documents verifying your identity, in writing, by hand, through a notary or by post to Güzeltepe Mah. Pelin Sokak No:12/1 Üsküdar/İstanbul, or by sending an e-mail to muhasebe@bakirdisticaret.com.

Your application must include your full name, signature (for written applications), Turkish Republic ID number (for foreigners, nationality and passport/ID number), your residential or business address for notification purposes, your e-mail and phone details if any, and the subject of your request. We may request additional information or documents to verify that the applicant is the data subject.

Depending on the nature of the request, your applications are concluded free of charge within 30 days at the latest. If the process requires an additional cost, a fee in the tariff determined by the Personal Data Protection Board may be charged. If you find the response to your application insufficient, you may lodge a complaint with the Personal Data Protection Board within 30 days from the date you learn of the response and, in any case, within 60 days from the date of application.