KVKK information notice
Information we provide as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).
We, Yağmaksan Makina A.Ş., process the personal data of natural persons who visit our website, use our quotation, contact and job application forms, or contact us by email or phone, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation. This notice is provided to inform you under Article 10 of the KVKK and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.
1. Data controller
Yağmaksan Makina Anonim Şirketi, Organize Sanayi Bölgesi 12.
2. Personal data processed, purposes and legal grounds
| Activity | Personal data processed | Purpose of processing | Legal ground (Art. 5 KVKK) |
|---|---|---|---|
| Quotation and contact requests | Identity (name and surname); contact (email, phone); professional information (company, country); request content (message, uploaded drawings) | Receiving, assessing and answering the request; preparing quotations and conducting pre-contractual discussions | Establishment or performance of a contract (Art. 5(2)(c)); legitimate interest (Art. 5(2)(f)) |
| Job applications | Identity (name, date of birth, gender, nationality, military service status); contact and address; education, professional experience and CV; optionally disability status (health data) | Assessing the application; conducting candidate selection and placement | Establishment of a contract (Art. 5(2)(c)); legitimate interest (Art. 5(2)(f)) |
| Website operation and security | Transaction security data (IP address, date and time, server logs) | Keeping the website running and information secure; preventing misuse | Legitimate interest (Art. 5(2)(f)) |
| Analytics (only with your explicit consent) | Pseudonymous usage data collected via Google Analytics 4 | Measuring which pages are useful and improving the website | Explicit consent (Art. 5(1)) |
| Map (only when you click) | IP address transmitted to Google | Showing the location of our facilities on a map | Explicit consent (Art. 5(1)) |
| Legal obligations | The data above, as far as necessary | Answering information requests from competent authorities and institutions; protecting our rights in the event of a dispute | Legal obligation (Art. 5(2)(ç)); establishment, exercise or protection of a right (Art. 5(2)(e)) |
The disability question on the application form is optional; you can choose "Prefer not to say". If you state a disability, we process this information only on the basis of your separate explicit consent (KVKK Art. 6) to assess your application. Please do not include other special categories of personal data, such as religion, sect, or association or trade union membership, in your CV. Applications, CVs, quotation and contact requests and uploaded files are stored in the database and file storage services of our hosting provider Cloudflare in the European Union; only authorised employees can access them, through an admin panel protected by one-time SMS codes. To prevent abuse of the forms, an irreversible hash of your IP address is kept for one day.
3. How personal data are collected
Your personal data are collected electronically: directly from you through the quotation, contact and job application forms on our website, by email and by phone, and by automated means through server logs, cookies and similar technologies. Details on cookies are in our cookie policy.
4. Transfer of personal data
Your personal data may be transferred to the following groups of recipients, limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK:
- Hosting and form processing: Cloudflare, Inc. (USA) — to deliver the website, keep it secure and process form submissions.
- Email delivery: Resend (USA) — to forward form submissions to the responsible department.
- Google LLC (USA): analytics (only with your explicit consent) and map display (only when you click) — to provide the respective service.
- Our group company Yağmaksan GmbH (Berlin, Germany): if your request concerns customer, logistics or warehouse processes in the EU — to answer your request.
- Competent public authorities and institutions: on request — to fulfil our legal obligations.
5. Retention period
Your personal data are kept for as long as the purpose of processing requires and for the periods laid down in the relevant legislation; at the end of these periods they are deleted, destroyed or anonymised.
6. Your rights under Article 11 of the KVKK
By applying to our company as the data controller, you can exercise the following rights:
- to learn whether your personal data are processed,
- to request information if your personal data have been processed,
- to learn the purpose of the processing and whether the data are used in line with that purpose,
- to know the third parties in Türkiye or abroad to whom your personal data are transferred,
- to request correction if your personal data are incomplete or inaccurate,
- to request deletion or destruction of your personal data under the conditions of Article 7 of the KVKK,
- to request that correction, deletion and destruction be notified to third parties to whom your personal data have been transferred,
- to object to a result to your detriment that arises from the analysis of the processed data exclusively by automated systems,
- to claim compensation if you suffer damage because your personal data were processed unlawfully.
Where processing is based on your explicit consent, you can withdraw your consent at any time; you can change your cookie choice via "Cookie settings" at the bottom of every page.
7. How to apply
Your application must state your name and surname, your signature (for written applications), your Turkish identity number (for foreign nationals: nationality and passport number), your address for notifications, your email address and phone number if any, and the subject of your request.
Your application is concluded free of charge as soon as possible, depending on the nature of the request, and within thirty days at the latest; if the process involves an additional cost, the fee set in the tariff of the Personal Data Protection Board may be charged. If your application is rejected, you find the answer insufficient or no answer is given in time, you can file a complaint with the Personal Data Protection Board within thirty days of learning of the answer and in any case within sixty days of the application date.
Information under the GDPR for data subjects in the European Union is provided in our privacy notice.
Last updated: