Yılmaz Makine Sanayi ve Ticaret Anonim Şirketi (“the Company” or “Yılmaz Makine”) places great importance on your privacy and the security of your personal data. Protecting your personal data and privacy is not merely a matter of fulfilling a legal obligation for us; it is a fundamental commitment to our customers, suppliers, and business partners, enabling you to save with confidence and peace of mind through our business model.
Since its founding, Yılmaz Makine has embraced the mission of continuously providing solutions that make a difference, are long-lasting, and utilize innovative technologies; continuously providing solutions that enhance our business partners’ market strength and elevate our customers’ manufacturing capabilities to the highest level; and by introducing advanced engineering technologies to the industry with flawless quality standards and accessible terms; we operate with the vision of creating a happy, productive, and thriving ecosystem.
Yılmaz Makine fulfills its obligations under the Law on the Protection of Personal Data No. 6698 (“the Law”) regarding the processing, erasure, destruction, anonymization, and transfer of personal data, as well as informing the data subject and ensuring data security, in accordance with the principles set forth by the Law. In this Privacy and Personal Data Protection Policy, we will strive to provide you with information regarding the processes involved in the processing of personal data and to keep you fully informed.
The Company collects personal data in audio, electronic, or written form through our call center, websites, CCTV system, social media accounts, chatbot, email, mail, cookies, fax, notifications from administrative and judicial authorities, and other communication channels, in accordance with the personal data processing conditions specified in the Personal Data Protection Law.
Your personal data is processed for different legal grounds depending on the nature of your legal relationship with the Company (e.g., customer, prospective customer, employee, job applicant, on-site visitor, online visitor, business partner/supplier). Likewise, we collect different types of personal data depending on the nature of the process.
As a company, our goal is to ensure that all our processes are conducted in compliance with the law and to provide you with the best possible service. The Company processes personal data for different specific purposes depending on the process in which the data is processed and the different groups of individuals whose personal data is processed. Each privacy notice details the purposes for which personal data is processed.
The Company takes care to process your personal data in accordance with the principles of “need to know” and “need to use,” ensuring the necessary data minimization and implementing the required technical and administrative security measures. However, since the conduct or supervision of business operations, the assurance of business continuity, and the operation of digital infrastructure necessitate a continuous flow of data with various stakeholders, we are required to transfer the personal data we process to third parties for specific purposes. Furthermore, it is crucial that your personal data be accurate and up-to-date so that we can fully and properly fulfill our contractual and legal obligations. To this end, we must work with various business partners and service providers. Under all circumstances, personal data transfers are conducted through secure environments and channels.
Your personal data is transferred internally only to the extent necessary for the purpose of processing and is shared with group companies, natural persons or private legal entities, business partners, affiliates and subsidiaries, suppliers, and authorized public institutions and organizations in accordance with the rules set forth in the Law. Each privacy notice details the purposes for which personal data is processed and the purposes for which it is transferred to third parties.
In addition, your personal data may be transferred to service providers located abroad. During such transfers, methods determined by the Personal Data Protection Board (“the Board”) are used; processes such as standard contractual clauses, binding corporate rules, or Board-approved data transfer protocols are implemented.
The Company undertakes to take all necessary technical and administrative measures and exercise due diligence to ensure the confidentiality, integrity, and security of your personal data. In this context, we take the necessary precautions to prevent the misuse of personal data, its unlawful processing, unauthorized access to the data, and the disclosure, alteration, or destruction of the data. The Company implements administrative measures to prevent unlawful access to the personal data it processes, to prevent the unlawful processing of such data, and to ensure the protection of personal data.
Although the Company takes the necessary information security measures, in the event that personal data is compromised or falls into the hands of unauthorized third parties as a result of attacks on platforms operated by the Company or the Company’s systems, the Company will immediately notify you and the Personal Data Protection Board of this situation and take the necessary measures.
The Company retains the personal data it processes in compliance with the Law for the periods stipulated by applicable legislation or as required by the purpose of processing.
The Company retains the personal data it collects and processes through channels such as physical, electronic, website, and email as part of its business processes for the periods prescribed by the relevant laws pursuant to Articles 7 and 17 of the Law and Article 138 of the Turkish Penal Code, and/or for the periods required by the purpose of processing. Upon the expiration of these periods, the Company will delete, destroy, or anonymize such data in accordance with the provisions of the Regulation on the Deletion, Destruction, or Anonymization of Personal Data and the Guide on the Deletion, Destruction, or Anonymization of Personal Data.
As an individual whose personal data is processed, you may exercise your rights under Article 11 of the Law, which governs the rights of the data subject (right to be informed about the processing of personal data, right to request information regarding the processing, right to verify the appropriateness of the processing for its purpose, right to know the recipients to whom data has been transferred, right to request the correction of incomplete or inaccurate data, right to request erasure or destruction, requesting that all automated processing be notified to third parties, objecting to analysis, and requesting compensation for damages) in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, please use the form available at the web address www.yilmazmachine.com.tr: Application Form Regarding the Protection of Personal Data , by filling out the relevant form and submitting it to the KEP address yilmazmakine@hs02.kep.tr, via an email message sent to verisorumlusu@yilmazmachine.com.tr; via a message sent with a mobile signature or e-signature; or by submitting a handwritten, wet-signed application in person at the address Taşdelen Mah. Atabey Cad. No:9-1 Çekmeköy – Istanbul, or through a notary public. If you submit your request to us in this manner, your requests will be reviewed and resolved as soon as possible and no later than 30 (thirty) days.
For your requests to be evaluated in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, your application must include your first name, last name, your Turkish Republic ID number if you are a citizen of the Republic of Turkey; your nationality along with your passport number or foreign ID number if you are a foreign national; your residential or business address for service of process; your email address, if available; and your phone or fax number, along with the subject of your request. Depending on the nature of your request and the method of submission, we may request additional verification to confirm that the request is genuinely from you and to protect your rights.
The Company reserves the right at all times to make changes to this text for reasons arising from the Law, secondary regulations, and Board decisions. Any changes made to this text and the updated text will take effect immediately as of the date of publication.
