How your personal data is processed.

1. Identity of the Data Controller

This privacy notice has been prepared by Atakaş Demir Çelik Limited Şirketi (the "Company") as data controller, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (the "Law") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

2. Personal Data Processed

Within the scope of activities carried out through our website, the following categories of personal data are processed:

• Identity data: name and surname.
• Contact data: e-mail address, phone number, city, the company you represent.
• Customer transaction data: subject of the request and message content, together with any product and dimension details you share.
• Transaction security data: IP address, browser and device information (user agent), the page address from which the request was sent, date and time, server logs.
• Marketing data: usage data obtained through cookies, only where you have given explicit consent.

No special categories of personal data are requested through our website. Please do not enter such data into our forms.

3. Purposes of Processing

• Receiving, evaluating and concluding contact and quotation requests.
• Providing product and price information, preparing offers and managing contractual processes.
• Carrying out sales and after-sales support processes for goods and services.
• Following up requests and complaints, managing customer relations.
• Maintaining information security, preventing misuse and automated form submissions.
• Conducting activities in compliance with legislation and fulfilling retention and archiving obligations.
• Measuring website usage and carrying out promotional activities where explicit consent exists.

4. Legal Grounds and Method of Collection

Your personal data is collected through the contact form on our website as well as via e-mail, telephone and WhatsApp, by automated or partly automated means. Processing is based on the following legal grounds set out in Article 5 of the Law:

• Art. 5/2-c: Processing is directly related to the conclusion or performance of a contract (quotation and order processes).
• Art. 5/2-ç: Processing is mandatory for the data controller to fulfil its legal obligations (retention of commercial books and documents).
• Art. 5/2-f: Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed (information security, server logs, prevention of misuse).
• Art. 5/1: Explicit consent (non-essential cookies and promotional activities).

5. Transfer of Personal Data

Your personal data may be transferred in line with the conditions set out in Articles 8 and 9 of the Law, limited to the purposes listed above:

• To our hosting and e-mail infrastructure providers, only to the extent required by the service.
• To our shipping and logistics partners, for the purpose of delivery.
• To our accounting and audit service providers, within the scope of statutory obligations.
• To public authorities and judicial bodies legally entitled to request it, upon demand and within the framework of legislation.

Your data is not transferred abroad. Should such a transfer become necessary, the conditions under Article 9 of the Law will be met and this notice will be updated.

6. Retention Periods

Personal data whose retention period has expired is deleted, destroyed or anonymised in the first periodic destruction cycle.

7. Rights of the Data Subject (Art. 11)

Under Article 11 of the Law, you may apply to the data controller to exercise the following rights:

• To learn whether your personal data is processed.
• To request information if your personal data has been processed.
• To learn the purpose of processing and whether the data is used in accordance with that purpose.
• To know the third parties to whom data is transferred, in Türkiye or abroad.
• To request rectification if the data is incomplete or inaccurate.
• To request erasure or destruction under the conditions of Article 7 of the Law.
• To request that rectification, erasure and destruction be notified to third parties to whom the data was transferred.
• To object to an adverse outcome arising from analysis carried out solely by automated systems.
• To claim compensation if you suffer damage due to unlawful processing.

8. Application Procedure

You may submit your requests in accordance with the procedures set out in the Communiqué on the Principles and Procedures of Application to the Data Controller, together with information and documents establishing your identity and clearly stating the subject of your request.

• In writing: by signed petition to Akçaburgaz, Muhsin Yazıcıoğlu Cad. No:27, 34522 Esenyurt / Istanbul.
• By e-mail: from the e-mail address registered in our system to info@atakasdemir.com.
• Electronically, signed with a secure electronic signature or mobile signature.

Your application will be concluded free of charge as soon as possible and in any case within thirty days. If the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.

9. Entry into Force and Updates

This privacy notice may be revised in line with changes in legislation or in our business processes. The current version is always published on this page; you can follow the effective date from the "last updated" note at the top of the page.