Personal data protection notice (KVKK)

Last updated: [to be completed]

1. Data controller

Your personal data is processed by the company below, acting as data controller:

2. What personal data we process

• Identity data: first name and surname.
• Contact data: phone number, email address (if you share it), company name.
• Request data: the product or service you are interested in, the content of your message, and photos and videos you send us.
• Customer transaction data: quote, order, delivery, installation and service records.
• Transaction security data: technical logs kept by the server and third-party service providers when you visit the site, such as IP address, browser and time of access.

3. Why we process your personal data

• To answer your information and quote requests and to prepare quotes for you.
• To enter into and perform the sales contract, and to plan delivery, installation and operator training.
• To handle your maintenance, spare parts and technical support requests.
• To meet our invoicing, accounting and other legal obligations.
• To keep the website secure and fix technical problems.

4. How we collect it and on what legal grounds

We collect your personal data verbally, in writing or electronically, through the contact form on the website (the form prepares your details as a WhatsApp message, which you send yourself), WhatsApp, phone, email and face-to-face meetings.

This data is processed on the following legal grounds set out in Article 5(2) of the Law:

• It is directly related to the conclusion or performance of a contract (quotes, sales, installation, service),
• It is necessary for the data controller to fulfil its legal obligations (tax and commercial legislation),
• It is necessary to establish, exercise or protect a right,
• It is necessary for the legitimate interests of the data controller, provided this does not harm your fundamental rights and freedoms (site security, following up requests).

For any processing outside these grounds (for example, sending marketing messages), we will ask for your explicit consent separately.

5. Who we transfer your personal data to

Limited to the purposes above, your personal data may be transferred to:

• Public authorities and institutions legally entitled to it, on request,
• Business partners who provide us with accounting, legal and financial advisory services,
• Shipping and logistics companies, for product delivery,
• Providers of our communication and hosting services.

When you message us on WhatsApp, your messages are transmitted through the servers of Meta Platforms, which provides the WhatsApp service, and these servers may be located abroad. The map (Google Maps) and typefaces (Google Fonts) on our site are served by Google, and some code libraries by Cloudflare (cdnjs); these services receive technical data such as your IP address when you open the page. Transfers abroad are made in line with the conditions set out in Article 9 of the Law.

6. How long we keep it

We keep your personal data for as long as the purpose it is processed for requires and for the retention periods set by the relevant legislation. At the end of these periods your data is deleted, destroyed or made anonymous. Retention periods: [to be completed]

7. Your rights under Article 11 of the Law

As the person whose personal data is processed, you have the right to:

• Find out whether your personal data is processed,
• Request information about it if it has been processed,
• Find out the purpose of processing and whether the data is used in line with that purpose,
• Know the third parties, in Türkiye or abroad, to whom it has been transferred,
• Ask for it to be corrected if it is incomplete or inaccurate,
• Ask for it to be deleted or destroyed under the conditions in Article 7 of the Law,
• Ask for any correction, deletion or destruction to be notified to the third parties the data was transferred to,
• Object to an outcome against you that results from the data being analysed exclusively by automated systems,
• Claim compensation if you suffer damage because of unlawful processing.

8. How to apply

To exercise your rights, you can send your application, in line with the Communiqué on the Procedures and Principles for Applications to the Data Controller and with information that identifies you, in writing to Kemalpaşa OSB Mah. 617 Sk. No: 8, Kemalpaşa / İzmir, via our registered electronic mail (KEP) address [to be completed], or from the email address registered in our system to info@onetechmachinery.com.

Your application will be concluded free of charge as soon as possible, depending on the nature of the request, and within thirty days at the latest, in accordance with Article 13 of the Law. If the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.

For information on cookies, see the cookie policy; for general information, see the privacy policy.