Privacy Notice (KVKK)

Purpose

This notice explains how personal data shared with Tarandir Group of Companies (the “Company”) by visitors of the website it operates (the “Site”), or generated while using the Site, is processed under Turkish Personal Data Protection Law No. 6698 (“KVKK”).

What data is processed?

If you contact us through the Site, identity (name, surname), contact (email, phone) and request-related information may be processed.

The Site does not use cookies other than those technically necessary for it to function. For security purposes, server logs may record IP addresses and access times.

Data that has been irreversibly anonymized is not considered personal data under the KVKK.

For what purposes is data processed?

Data is processed to review and respond to inquiries and applications, to manage business partnerships and commercial relationships, to keep the Site secure and to comply with legal obligations.

Who can access the data?

Personal data may be shared, only to the extent required by the purposes above, with the relevant group companies, hosting and technical service providers, and public authorities legally entitled to request it. Your data is not shared with third parties for marketing purposes.

Legal grounds

Data is processed on the grounds set out in Article 5 of the KVKK: explicit provision by law, the establishment or performance of a contract, legal obligation, the establishment and protection of a right, and legitimate interest, provided that fundamental rights and freedoms are not harmed.

Rights of the data subject (KVKK Art. 11)

• To learn whether personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether data is used accordingly
• To know the third parties in Türkiye or abroad to whom data is transferred
• To request correction if data is incomplete or inaccurate
• To request deletion or destruction under the conditions set by law
• To request that third parties to whom data was transferred be notified of corrections, deletions or destruction
• To object to a result against you arising solely from automated analysis
• To claim compensation for damages arising from unlawful processing

Applications

You may submit your requests in writing to our group headquarters, to our registered e-mail (KEP) address, or to our email address using a secure electronic or mobile signature, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are concluded free of charge within thirty days at the latest; if the process requires an additional cost, the fee set by the Board may apply.

Retention and security

Personal data is kept for as long as the purpose of processing requires and as provided by law; afterwards it is deleted, destroyed or anonymized. The Company takes the necessary technical and administrative measures to prevent unlawful processing of and access to data.

Changes

The Company may update this notice when necessary. The updated notice takes effect on the date it is published on the Site.