Privacy Notice on the Processing of Personal Data

1. Data controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), personal data you share through the contact form on our website is processed by DEMİRİZ ELEKTRİK İNŞAAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ ("Demiriz Elektrik") as data controller, as described below.

• Address: Ortaköy Sanayi Bölgesi Tiftik Sk. No:16, Selimpaşa, Silivri / İstanbul, Türkiye
• Email: info@demirizelektrik.com.tr
• Phone: +90 212 734 39 25

2. Personal data processed

• Identity: name, surname
• Contact: email address, phone number (optional)
• Professional: company name (optional)
• Customer transaction: subject of the request, product of interest, message content, product page from which the form was sent
• Transaction security: IP address; browser and device information during bot verification

Please do not include special categories of personal data (e.g. health, religion, ethnicity) in your message.

3. Purposes of processing

• Receiving, evaluating and responding to your information, quotation and technical support requests
• Carrying out quotation processes for our products and services
• Protecting the form against automated (bot) submissions, misuse and excessive requests; ensuring information security

4. Collection method and legal grounds

Your personal data is collected electronically, partly by automated means, through the contact form on our website and is processed on the following legal grounds:

• Quotation and product requests: KVKK Art. 5(2)(c), processing of the personal data of the parties is necessary, provided that it is directly related to the conclusion or performance of a contract
• General information and technical support requests: KVKK Art. 5(2)(f), processing is necessary for the legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed
• Bot protection and information security: KVKK Art. 5(2)(f), legitimate interest of the data controller
• Requests from authorities and other legal obligations: KVKK Art. 5(2)(ç), processing is necessary for the data controller to fulfil its legal obligations

5. Transfer of personal data

Your personal data may be transferred, limited to the purposes above, to:

• Our email and hosting service provider: to deliver and store the form message as email
• Cloudflare, Inc. (United States): IP address and browser and device information for bot verification of the form (Cloudflare Turnstile). This is a transfer of personal data abroad.
• Legally authorised public institutions and organisations: upon request, to fulfil our legal obligations

6. Retention period

Form data is not stored on our web server; your message is delivered by email. These emails are kept for as long as necessary to conclude your request, taking into account the periods required by applicable legislation, and are then deleted, destroyed or anonymised.

To prevent excessive submissions, a one-way hash of your IP address (not the address itself) is kept briefly; this record expires after 10 minutes and is deleted automatically.

7. Your rights under Article 11 of the KVKK

By applying to the data controller, you have the right to:

• (a) learn whether your personal data is processed,
• (b) request information if your personal data has been processed,
• (c) learn the purpose of processing and whether it is used in accordance with its purpose,
• (ç) know the third parties in Türkiye or abroad to whom your personal data is transferred,
• (d) request correction if your personal data is incomplete or inaccurately processed,
• (e) request erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
• (f) request that the actions under (d) and (e) be notified to third parties to whom your personal data has been transferred,
• (g) object to a result against you arising from the analysis of the processed data exclusively by automated systems,
• (ğ) claim compensation for damage arising from the unlawful processing of your personal data.

8. How to apply to the data controller

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests regarding your rights:

• In writing to our address above
• With a secure electronic signature or mobile signature
• From an email address you have previously provided to us and that is registered in our system, to info@demirizelektrik.com.tr

Your request will be concluded free of charge as soon as possible and within 30 days at the latest, depending on its nature. If the action requires an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.