Pursuant to the Law No. 6698 on the Protection of Personal Data (“Law”), your personal data are processed by Yılmaz Makine Sanayi ve Ticaret Anonim Şirketi (“Yılmaz Makine” or the “Company”), acting as the data controller, having its registered address at Taşdelen Mah. Atabey Cad. No:9-1 Çekmeköy-İstanbul, registered KEP address yilmazmakine@hs02.kep.tr, and registered with the Anadolu Corporate Tax Office under tax number 9660294072, within the scope of the conditions explained below.
Our Company obtains personal data directly through business partner/supplier processes, the contractual relationship established between you and us, our website, chatbot, e-mail, postal mail, fax, notifications received from administrative and judicial authorities, and other communication channels, in the form of data obtained through audio, electronic, or written means. Such personal data are processed in accordance with the personal data processing conditions specified in the Law and, primarily, for the purposes of executing the relationship between you and us and ensuring compliance of our activities with applicable legislation, limited to the purposes set forth below. Your personal data are processed where it is necessary to establish a contractual relationship with you or to perform obligations arising directly from such contract, where processing is mandatory for the fulfillment of our legal obligations (including approval and record-keeping processes relating to commercial electronic communications), and, where necessary, based on your explicit consent.
Your personal data will be processed primarily for establishing a contractual relationship with you and managing all stages of such contractual process, planning and executing end-to-end marketing processes, preparing and presenting the most suitable offer for you, ensuring information security and legal transaction security, and ensuring that activities are carried out in compliance with applicable legislation. In addition, your personal data will be processed for conducting communication activities, ensuring the accuracy of your data, carrying out statistical evaluations and market research, managing business partner/supplier relationship processes, conducting activities aimed at customer/business partner satisfaction, managing risk management processes, and organizing and managing events.
Our Company takes utmost care to process your personal data in accordance with the principles of “need to know” and “need to use” by ensuring data minimization and implementing the necessary technical and administrative security measures. Since the execution or supervision of business activities, ensuring business continuity, and operating digital infrastructures require continuous data flow with various stakeholders, we are required to transfer the personal data we process to third parties established both domestically and abroad for specific purposes. Furthermore, in order to fully and properly fulfill our contractual and legal obligations, it is essential that your personal data remain accurate and up to date. Therefore, we cooperate with various business partners and service providers.
Your personal data may be transferred and processed domestically or internationally, limited to the purposes stated above and only to the extent necessary for fulfilling such purposes; to our shareholders, business partners, affiliates, subsidiaries, and group companies; to companies and shareholders with whom we have special business partnerships for the purposes of conducting and supervising business activities, ensuring business continuity, and managing information security processes; to our solution partners operating in the fields of communication and electronic communications; to the relevant service providers and business partners for communication purposes; to our business partners and service providers providing profiling, segmentation, analysis, usage preference analysis, service personalization, marketing, and advertising services; to the Ministry of Trade and the company authorized by the Ministry within the scope of the Message Management System (İYS) registration process for the management of communications, as well as to the authorized commercial electronic communication infrastructure provider for the delivery of communications; to our business partners and service providers that provide, operate, or support our information technology infrastructure; to our business partners and service providers providing quality control, complaint management, and risk analysis services; to legally authorized public institutions and private persons or organizations, to third parties specifically designated where required by the legitimate interests of the data controller, to relevant lawyers, auditors, and experts for the fulfillment of legal obligations, and to competent authorities such as regulatory and supervisory bodies, courts, and enforcement offices, limited to the purposes specified in this Privacy Notice.
Furthermore, your personal data may be transferred to service providers located abroad. During such transfers, the methods determined by the Personal Data Protection Board (“Board”) are applied, including processes such as standard contractual clauses, binding corporate rules, or data transfer protocols approved by the Board.
Your personal data will be retained in accordance with the principle of being limited and proportionate to the purpose for which they are processed, solely for the purposes specified in this Privacy Notice and for the retention periods stipulated under the applicable legislation to which we are subject. Upon the expiration of such periods, your personal data will be deleted, destroyed, or anonymized. In the event of any legislative amendments regarding data processing and retention periods, your personal data will be processed and retained in accordance with such amendments.
As the data subject whose personal data are processed, you may exercise your rights under Article 11 of the Law, which regulates the rights of data subjects (to learn whether personal data are being processed, to request information regarding the processing, to learn the purpose of processing and whether the data are used in accordance with such purpose, to know the third parties to whom the data are transferred, to request the correction of incomplete or inaccurate data, to request the deletion or destruction of personal data, to request notification of such actions to third parties to whom the data have been transferred, to object to analyses carried out exclusively through automated systems, and to request compensation for damages), in accordance with the Communiqué on the Principles and Procedures for the Application to the Data Controller. To exercise these rights, you may complete the Personal Data Protection Application Form available at www.yilmazmachine.com.tr, and submit it to our KEP address yilmazmakine@hs02.kep.tr, our e-mail address verisorumlusu@yilmazmachine.com.tr, by means of a message signed with a mobile signature or secure electronic signature, or by delivering a wet-signed written application in person to Taşdelen Mah. Atabey Cad. No:9-1 Çekmeköy – İstanbul, or through a notary public. Upon receipt of your application, your request will be evaluated and finalized as soon as possible and, in any event, within a maximum period of 30 (thirty) days.
In order for your application to be evaluated in accordance with the Communiqué on the Principles and Procedures for the Application to the Data Controller, it must include your name and surname; if you are a citizen of the Republic of Türkiye, your Turkish Republic Identity Number; if you are a foreign national, your nationality together with your passport number or foreign identity number; your residential or business address for notification purposes; where available, your e-mail address, telephone or fax number; and the subject of your request. Depending on the nature of your request and the method of application, we may request additional verification information in order to confirm that the application has indeed been submitted by you and to protect your rights.
The Company reserves the right at all times to amend this Privacy Notice due to reasons arising from the Law, secondary legislation, or decisions of the Personal Data Protection Board. Any amendments to this Privacy Notice and the updated version shall become effective immediately as of the date of publication.
