Which personal data we process under the Turkish Personal Data Protection Law No. 6698, why and on what legal basis; your rights and how to apply.
This is a translation; the Turkish text prevails.
Data controller
Under the Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is VERTEX SAFETY DONATIM VE KORUMA TEKNOLOJİLERİ TİCARET LİMİTED ŞİRKETİ (Aydınlı Mah. Çilek Sk. No: 9 İç Kapı No: 1, 34953 Tuzla / İstanbul, Türkiye). You can reach us at [email protected]. Company details are in the Legal notice.
Personal data we process
- Identity: name and surname.
- Contact: email address, phone number.
- Customer transaction: company name, product of interest, subject and content of your message; quote and order correspondence.
- Transaction security: IP address, date and time, requested page, browser information, referring page.
How we collect it
Electronically through the website contact form, email and WhatsApp messages; verbally in phone calls; and automatically through the access logs kept by the server. You enter the form details yourself; required fields are marked in the form.
Purposes and legal bases
| Purpose | Data | Legal basis (KVKK art. 5(2)) |
|---|---|---|
| Answering your quote, information and service requests; preparing quotes | Identity, contact, customer transaction | (c) conclusion or performance of a contract; (f) legitimate interest |
| Handling orders, delivery, service and invoicing | Identity, contact, customer transaction | (c) performance of a contract; (ç) legal obligation (commercial and tax law) |
| Keeping the website secure, preventing abuse and excessive requests | Transaction security | (f) legitimate interest |
| Meeting legal obligations and requests from competent authorities | Relevant records | (ç) legal obligation |
| Establishing, exercising or defending legal claims | Relevant correspondence and records | (e) establishment, exercise or protection of a right |
We do not add your data to marketing lists, sell it, or use it in any system that takes automated decisions about you.
Who receives it
- Hosting: the website runs on a server of Contabo GmbH (Germany); form submissions and access logs pass through this server.
- Email: form and email correspondence is stored on the servers of our email service provider in Türkiye.
- Courier and logistics companies: details needed for delivery when you place an order.
- Competent public authorities and courts: where required by law.
Transfers abroad are made under KVKK art. 9, using the standard contracts announced by the Turkish Personal Data Protection Board and the other safeguards provided by the law.
Retention
| Record | Period |
|---|---|
| Correspondence that leads to a quote, order or contract | 10 years (Turkish Commercial Code art. 82) |
| Information and quote requests that do not lead to an order | Up to 2 years |
| Server access logs | 14 days |
| Form submission logs (name, email, time sent) | 30 days |
When the period ends, the data is deleted, destroyed or anonymised.
Your rights (KVKK art. 11)
- to learn whether your personal data is processed,
- to request information about the processing,
- to learn the purpose of processing and whether data is used accordingly,
- to know the third parties in Türkiye or abroad to whom data is transferred,
- to request correction of incomplete or inaccurate data,
- to request deletion or destruction under the conditions of KVKK art. 7,
- to request that correction, deletion or destruction is notified to third parties who received the data,
- to object to an outcome against you that results solely from automated analysis,
- to claim compensation for damage caused by unlawful processing.
How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send requests:
- in writing, with a signed letter, to: Aydınlı Mah. Çilek Sk. No: 9 İç Kapı No: 1, 34953 Tuzla / İstanbul, Türkiye
- by email to [email protected] from an email address you have given us before and that is in our records
- by email signed with a secure electronic signature or mobile signature
Please include your name, Turkish ID number (for foreign nationals: nationality and passport number), postal address, email address and phone number if any, and the subject of your request. We reply free of charge within 30 days at the latest; if the request involves an additional cost, a fee under the Board’s tariff may be charged.
If your request is rejected, you find the reply insufficient or we do not reply in time, you can complain to the Personal Data Protection Board within 30 days of learning of the reply, and in any case within 60 days of your application.
For visitors from the EU/EEA, the Privacy policy also explains your rights under the GDPR.