Personal Data Protection Law (KVKK) Information Text

• Your personal data is collected electronically through the forms available on our website, cookies, server logs, and other digital channels.
• Identity and Contact Information: Name, surname, e-mail address, telephone number.
• Customer Transaction Information: Requests, complaints, quotations, order details, and communication records.
• Transaction Security Information: IP address, website access records, and server log information.

• Managing and responding to your requests, inquiries, and communications;
• Conducting customer relationship management activities;
• Evaluating quotation and order requests;
• Performing contractual obligations and providing after-sales services;
• Ensuring information security and system continuity;
• Fulfilling legal obligations arising from applicable legislation.

• Compliance with legal obligations to which the Company is subject (Article 5/2-a);
• Processing necessary for the establishment or performance of a contract (Article 5/2-c);
• Processing necessary for the legitimate interests of the Company, provided that such processing does not violate your fundamental rights and freedoms (Article 5/2-f).

Personal data processed for analytics and performance measurement activities through non-essential cookies is processed solely based on your explicit consent.

• Authorized public institutions and authorities;
• Information technology and infrastructure service providers;
• Hosting and technical support providers;
• Legal, financial, and professional advisors.

Where personal data is transferred abroad, such transfers shall be carried out in accordance with the applicable provisions of the KVKK.

Data Security Measures: Malkan Makina implements appropriate technical and administrative measures to ensure the security of personal data and to prevent unlawful processing, unauthorized access, disclosure, alteration, or loss of personal data in accordance with Article 12 of the KVKK.

• Personal data is retained for the periods specified under the applicable legislation and the Company's Retention and Disposal Policy.
• Upon expiry of the applicable retention periods, personal data is deleted, destroyed, or anonymized in accordance with the relevant legislation and the Company's internal procedures.

• Learn whether your personal data is being processed;
• Request information regarding the processing of your personal data;
• Learn the purpose of processing and whether your personal data is used in accordance with such purpose;
• Learn the third parties to whom your personal data is transferred domestically or abroad;
• Request the rectification of incomplete or inaccurate personal data;
• Request the deletion or destruction of personal data under the conditions stipulated by law;
• Request notification of rectification, deletion, or destruction operations to third parties to whom personal data has been transferred;
• Object to any adverse result arising exclusively from the analysis of your personal data through automated systems;
• Claim compensation for damages arising from the unlawful processing of personal data.

• You may submit your requests regarding your rights under Article 11 of the KVKK in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.
• Your requests will be evaluated and concluded within a maximum period of thirty (30) days, depending on the nature of the request.
• Detailed information regarding the application methods is available on our Data Subject Request Page.