Customer and After-Sales Privacy Notice

We built your machine; we also protect your information.

Data controller

Malkan Makina Sanayi ve Ticaret A.Ş.

MERSİS

0611088265100001

Address

Karayolları Mah. 559. Sok. No:16/1 Gaziosmanpaşa / İstanbul

KEP

malkanmakina@hs06.kep.tr

Telephone

+90 212 477 97 97

From quotation to spare part, the same care at every contact.

This notice covers customers who purchase products and services from us, employees and representatives of our customer companies, persons requesting quotations by telephone or e-mail, people we meet at trade fairs, and those requesting technical service.

For the use of our website, the Privacy Notice, and for our WhatsApp line, the WhatsApp Privacy Policy also apply.

We ask only for what our work requires.

• Identity: name, surname, job title.
• Contact: business telephone, e-mail, company and delivery address.
• Customer transaction: quotation, order, shipment, installation, warranty, service and spare-part records; the serial number of your machine.
• Finance: invoice and payment information.
• Visual: photographs of the machine taken during service for fault diagnosis.

Information comes through the channel you use to reach us.

• Your quotation requests by telephone, e-mail and in writing.
• Business cards you give us at trade fairs and events.
• Order, contract, invoice and shipping documents.
• Technical service requests, field service forms and warranty records.
• Customer satisfaction surveys and your complaints.

Every operation has a purpose; every purpose has a legal basis.

• Preparing quotations and answering your questionsIdentityContactArt. 5/2-cArt. 5/2-f
• Receiving, manufacturing, shipping and installing the orderIdentityContactCustomer transactionArt. 5/2-c
• Invoicing, accounting and tax obligationsIdentityFinanceArt. 5/2-ç
• Warranty, technical service and spare partsCustomer transactionVisualArt. 5/2-cArt. 5/2-e
• Product safety and traceability; product recall where necessarySerial no.ContactArt. 5/2-ç
• Quality management, complaint and satisfaction follow-upContactCustomer transactionArt. 5/2-f
• Communication with people we meet at trade fairsBusiness cardArt. 5/2-f

Promotional commercial electronic messages are sent in accordance with Law No. 6563; every message offers an opt-out.

We share, but we do not sell.

• Courier and transport companies and customs brokers (for delivery and export).
• The Revenue Administration and our e-invoice service provider (legal obligation).
• Banks and payment institutions (collection).
• Our IT and hosting service providers; they process data only on our instructions and under a contract.
• Lawyers, judicial authorities and competent public institutions (legal obligation and protection of rights).
• Our affiliate in Germany (intra-group sales and service cooperation; under a standard contract pursuant to Article 9 of the Law).

Customer information is not shared with our authorised service centres and dealers. Your personal data is never sold or rented under any circumstances.

When the period ends, we destroy it and record every destruction.

• Quotation requests and trade fair business cardsIf no order follows; from the date of the request5 years
• Complaint and survey recordsAfterwards, anonymous statistics only2 years
• Orders, contracts, invoices and paymentsFrom the end of the relevant year10 years
• Warranty and service recordsFrom the end of the service or warranty10 years

If there is a dispute, the record is kept until the dispute is concluded. Data whose retention period has expired is deleted or destroyed in the periodic destruction carried out every six months.

If you have a question, the answer comes from us.

Under Article 11 of the Law, you have the following rights:

• aTo learn whether your personal data is processed
• bTo request information if it has been processed
• cTo learn the purpose of processing and whether the data is used in line with that purpose
• çTo know the third parties in Türkiye or abroad to whom the data is transferred
• dTo request rectification if the data is incomplete or inaccurate
• eTo request erasure or destruction within the framework of Article 7 of the Law
• fTo request that the actions taken under (d) and (e) be notified to the third parties to whom the data has been transferred
• gTo object to a result to your detriment arising from analysis exclusively by automated systems
• ğTo claim compensation for damage suffered due to unlawful processing

You may submit your application in writing, to our KEP address, with a secure electronic or mobile signature, or from the e-mail address you have previously notified to us. Applications are concluded free of charge within 30 days at the latest; where the process requires an additional cost, the fee set by the Board may be charged. If you find the response insufficient, you may file a complaint with the Personal Data Protection Board.