Pursuant to the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data including identity, contact, customer transaction, legal transaction, and transaction security data are collected from you through written data transfer in electronic environments by automated means and are processed by us, Demsa İç ve Dış Ticaret Anonim Şirketi (“Company”), as the data controller, within the scope explained in detail below
Your personal data collected by us are processed in accordance with the purposes and legal grounds set forth below.
| Purpose of Data Processing | Data Category | Legal Ground |
|---|---|---|
| Conducting activities in compliance with applicable legislation | Transaction Security | Article 5/2-a of the Law No. 6698 – Explicitly stipulated by law. Article 5/2-ç of the Law No. 6698 – Processing is mandatory for the data controller to fulfill its legal obligations. |
| Carrying out information security processes | Transaction Security | Article 5/2-a of the Law No. 6698 – Explicitly stipulated by law. Article 5/2-ç of the Law No. 6698 – Processing is mandatory for the data controller to fulfill its legal obligations. |
| Conducting the sale of goods/services and after-sales support services | Identity, Contact, Legal Transaction, Customer Transaction | 6698 sayılı KVKK m.5/2-c Article 5/2-c of the Law No. 6698 – Processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract |
| Conducting goods/services production and operational processes | Identity, Contact, Customer Transaction | 6698 sayılı KVKK m.5/2-c Article 5/2-c of the Law No. 6698 – Processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract |
| Conducting contract management processes | Identity, Contact, Customer Transaction | 6698 sayılı KVKK m.5/2-c Article 5/2-c of the Law No. 6698 – Processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract |
| Conducting communication activities | Identity, Contact, Customer Transaction | Article 5/1 of the Law No. 6698 – Explicit consent of the data subject |
| Conducting processes related to advertising and marketing activities | Identity, Contact, Customer Transaction | Article 5/1 of the Law No. 6698 – Explicit consent of the data subject |
| Conducting customer satisfaction processes | Identity, Contact, Customer Transaction | Article 5/2-f of the Law No. 6698 – Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject |
| Conducting storage and archiving activities | Identity, Contact, Transaction Security, Customer Transaction | Article 5/1 of the Law No. 6698 – Explicit consent of the data subject Article 5/2-ç of the Law No. 6698 – Processing is mandatory for the data controller to fulfill its legal obligations |
Your personal data may be transferred to third parties under the following conditions.
| Legal Ground for Transfer | Purpose of Transfer | Recipient Party |
|---|---|---|
| Article 8/2-a of the Law No. 6698 – Processing is mandatory for the data controller to fulfill its legal obligations | Conducting activities in compliance with applicable legislation | Authorized Public Institutions and Authorized Private Persons |
| Article 8/2-a of the Law No. 6698 – Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject | Transfer of the necessary information to our business partners for the conduct of goods/services production and operational processes | Business Partners |
| Article 8/2-a of the Law No. 6698 – Processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract | Transfer of the necessary information to our business partners in order to fulfill our obligations arising from the service agreement | Business Partners |
As the data subject, you may submit your requests regarding your rights set forth under Article 11 of the Personal Data Protection Law No. 6698 by completing the Application Form Regarding the Protection of Personal Data, which can be obtained from our website, or by submitting an application that meets the minimum requirements stipulated in the Communiqué on the Procedures and Principles of Application to the Data Controller, through the methods specified below.
The Company shall conclude your application free of charge as soon as possible and no later than thirty (30) days, depending on the nature of the request. However, if the transaction requires an additional cost, the fee determined by the Personal Data Protection Board shall be charged by the Company.
| Method of Application | Application Address |
|---|---|
| Electronic message submitted via Registered Electronic Mail (KEP) | demsa@hs03.kep.tr |
| Message submitted via your e-mail address registered in our system or sent with a secure electronic signature or mobile signature | kvkk@demsagroup.com |
| Application submitted in writing in person or via a notary public | Kısıklı Cad. No:41 Altunizade 34662 Üsküdar/İSTANBUL |
In case of any conflict or discrepancy between the Turkish and English texts, the Turkish text shall prevail. This document is for informational purposes only.