Privacy Policy

1. Collected Personal Data

2. Data Processing Purposes

3. Data Sharing

4. Data Subject Rights (GDPR Art. 11)

5. Contact Information

Identity of the Data Controller

Information about the legal entity acting as data controller under Law No. 6698 on the Protection of Personal Data:

Methods of Collecting Personal Data

Your personal data is collected through the following channels, by wholly or partly automated means:

• Contact, quote and career application forms on our website
• Directly from you via telephone, e-mail and in-person meetings
• Contract processes and sales, rental and technical service records
• Cookies and server logs during your visit to our website

Legal Grounds for Processing Personal Data

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

• Article 5/2-c: Directly related to the establishment or performance of a contract (rental, sales and technical service agreements)
• Articles 5/2-a and 5/2-ç: Expressly provided for by law and necessary for the data controller to fulfil its legal obligations (tax and commercial legislation)
• Article 5/2-f: Legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed (information security, service quality measurement)
• Article 5/2-e: Necessary for the establishment, exercise or protection of a right
• Article 5/1: Your explicit consent (analytics and marketing cookies, and commercial electronic messages)

Categories of Recipients

Within the framework of Articles 8 and 9 of the KVKK, and limited to the relevant purpose, your personal data may be transferred to the following categories of recipients:

• Hosting and IT infrastructure service providers
• Electronic mail infrastructure service providers
• Analytics service providers (only in respect of analytics cookies subject to your explicit consent)
• Authorised business partners and suppliers engaged under a contractual relationship
• Public authorities and judicial bodies legally empowered to request data (upon a request arising from legislation)
• Legal, financial and audit advisors engaged by us

Your personal data is not shared with third parties other than the categories of recipients listed above and is not sold for marketing purposes. Transfers are carried out in accordance with the conditions set out in Articles 8 and 9 of the KVKK and limited to the relevant purpose.

Retention Period

Your personal data is retained for as long as necessary for the purpose for which it is processed and for the minimum retention periods prescribed by applicable legislation. Once the purpose ceases to exist and statutory retention periods expire, your data is deleted, destroyed or anonymised in accordance with Article 7 of the KVKK.

Retention and destruction processes are carried out in accordance with Article 7 of the KVKK and the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

How to Exercise Your Rights (Application Procedure)

To exercise your rights under Article 11 of the KVKK, you may apply through one of the following channels in accordance with the Communiqué on the Principles and Procedures for Applying to the Data Controller:

• By submitting a wet-signed petition together with a document verifying your identity, in person or through a notary, to the address above
• By submitting your application electronically, signed with a secure electronic signature or mobile signature
• By using the electronic mail address you have previously notified to us and which is registered in our system, to info@kopitek.com.tr

Information your application must contain:

• Your name and surname; your signature if the application is in writing
• Your Turkish ID number (if you are a foreign national, your nationality, passport number or ID number)
• Your residential or business address for notification
• Your e-mail address, telephone and fax number for notification, if any
• A clear and comprehensible statement of the subject of your request

Conclusion of your application

Your application will be concluded free of charge as soon as possible depending on the nature of the request, and in any case within thirty (30) days from the date it reaches us. If the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.

Complaint to the Personal Data Protection Board

If your application is rejected, if you find the response insufficient, or if no response is given within the prescribed period, you have the right to lodge a complaint with the Personal Data Protection Board under Article 14 of the KVKK within thirty (30) days of learning the response and in any case within sixty (60) days of the date of application.