Data Protection Notice (KVKK / GDPR)

1. Data Controller

Sanica İstif Makina San. Tic. A.Ş. acts as the data controller under KVKK No. 6698. Contact details:

• Address: Kavaklı Mah. İstanbul Cad. No: 10 Beylikdüzü / İstanbul
• Phone: +90 850 460 77 47
• E-mail: [email protected]

2. Categories of Personal Data Processed

Within our business processes the following categories of personal data may be processed:

• Identity information: First name, last name, national ID (where mandatory)
• Contact details: E-mail, phone, address
• Customer / partner data: Company name, title, tax information
• Transaction security: IP address, log records, cookie data
• Financial data: Invoice, payment and quotation information
• Physical premises security: CCTV recordings at our facilities
• Marketing: Preferences, survey responses (with explicit consent)

3. Processing Purposes

• Execution of contracts (sales, rental, service, maintenance)
• Quote preparation and customer relationship management
• Provision of site analysis and technical support services
• Invoicing, accounting and financial processes
• Fulfillment of legal obligations
• Facility and operational security
• Information security and protection against cyberattacks
• Marketing activities and customer satisfaction research (with explicit consent)

4. Legal Basis

Personal data is processed under KVKK articles 5 and 6 on the following legal grounds:

• Necessary for the establishment and execution of a contract
• Fulfillment of a legal obligation
• Legitimate interest of the data controller
• Explicit consent of the data subject (especially for marketing and special category data)
• Establishment, exercise or protection of rights

5. Data Transfer

Your personal data may be shared only in the following cases and within legal bounds:

• Authorized public institutions (tax office, courts, social security, etc.)
• Independent audit and accounting firms
• IT infrastructure service providers (Cloudflare, e-mail services)
• Logistics and service partners within contract execution
• Lawyers and legal counsel

International data transfer is performed under KVKK article 9 based on your explicit consent or a Board decision.

6. Data Collection Methods

Your personal data is collected via forms filled on our website, e-mail correspondence, phone calls, physical documents, commercial activities and CCTV cameras on our premises, through both automated and non-automated means.

7. Data Subject Rights

Under KVKK article 11 your rights are:

• To learn whether your personal data is processed
• To request information about processing if so
• To learn the purpose of processing and whether it's used accordingly
• To know third parties to whom data is transferred domestically or abroad
• To request correction of incomplete or inaccurate processing
• To request deletion or destruction under conditions stipulated in KVKK article 7
• To object to outcomes arising against you via automated systems
• To request compensation for damages from unlawful processing

8. Application Method

To exercise the rights listed above, submit your request in writing or send a secure electronic signature e-mail to [email protected]. We will respond in writing within 30 days. Identity verification is required for applications.