KVKK (Turkish Data Protection)

1. Identity of the data controller

• [Company name]
• [Address]
• E-mail: [e-mail address]
• Phone: [phone number]
• VERBIS registration: [registration number — delete this line if you are not required to register]

2. Personal data processed

• Identity: first and last name
• Contact: e-mail address, phone number, delivery address
• Customer transaction: order contents, rental dates, order number, notes added to the request
• Transaction security: log records such as IP address, browser and operating system details and time of the request

3. Purposes of processing

• Receiving and assessing rental requests and notifying you of approval or rejection
• Concluding the contract and organising delivery and collection of the equipment
• Answering stock and price enquiries
• Invoicing and meeting financial and legal obligations
• Securing the website and the management panel and preventing abuse

4. Legal grounds (Art. 5 KVKK)

• Directly related to the conclusion or performance of a contract (Art. 5/2-c)
• Fulfilment of a legal obligation (Art. 5/2-ç)
• Our legitimate interests, provided your fundamental rights are not harmed (Art. 5/2-f)
• Explicit consent — only if analytics tools are added in the future and you agree (Art. 5/1)

5. Method of collection

Your personal data is collected electronically by wholly or partly automated means: through the order and stock enquiry forms on this website and through server logs generated while you browse.

6. Transfers (Art. 8 and 9 KVKK)

Your data is transferred only to the extent necessary to the suppliers providing our hosting, database and e-mail delivery services. It may also be shared with competent public authorities upon a lawful request.

The servers of our infrastructure providers may be located abroad. Any transfer abroad is based on an appropriate mechanism under Article 9 KVKK, such as standard contracts, undertakings or an adequacy decision where available.

7. Retention and destruction

Your personal data is kept for as long as the purpose of processing requires and until the limitation and retention periods laid down in the applicable legislation expire. Once those periods end, the data is deleted, destroyed or anonymised.

8. Rights of the data subject (Art. 11 KVKK)

• To learn whether your personal data is processed and to request information about it
• To learn the purpose of processing and whether the data is used accordingly
• To know the third parties to whom the data is transferred, at home or abroad
• To request correction if the data is incomplete or inaccurate
• To request deletion or destruction where the conditions are met
• To request that corrections and deletions be notified to the third parties concerned
• To object to a result against you produced solely by automated analysis
• To claim compensation for damage suffered due to unlawful processing

9. How to apply

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your request in writing to [postal address], or by registered electronic mail or from the e-mail address you previously notified to us, to [e-mail address].

Your request will be concluded within thirty days at the latest. Where the request entails an additional cost, the fee set out in the tariff of the Board may be charged. If your request is rejected or left unanswered, you may lodge a complaint with the Personal Data Protection Board.