KVKK Disclosure Notice

1. Introduction

As Aktif Çelik, within the scope of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), in our capacity as data controller, we attach great importance to the lawful processing, storage, and sharing of your personal data.

This disclosure notice has been prepared in accordance with Article 10 of the KVKK and the Communique on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform you about the processing of your personal data.

2. Data Controller

In accordance with the KVKK, your personal data may be processed by Aktif Çelik as the data controller within the scope explained below.

3. Personal Data Processed

The following personal data may be processed when you visit our website and/or use the contact form:

3.1. Identity and Contact Data

Data submitted through the contact form:

• Full name
• Email address
• Phone number
• Company/organization name
• Message content

3.2. Transaction Security and Technical Data

Data automatically collected when you visit our website:

• IP address
• Browser type and version
• Operating system information
• Device information (desktop, mobile, tablet)
• Screen resolution
• Page view data
• Date and time of visit
• Referring page (referrer) information
• Click and scroll behavior
• Session duration

3.3. Cookie Data

For detailed information about data collected through cookies used on our website, please review our Cookie Policy.

4. Purposes of Personal Data Processing

Your personal data is processed within the framework of the personal data processing conditions specified in Articles 5 and 6 of the KVKK for the following purposes:

• Receiving, evaluating, and responding to contact requests
• Fulfilling information requests about our products and services
• Preparing quotations and conducting commercial communication activities
• Improving user experience through website usage analysis
• Ensuring website security and detecting technical issues
• Monitoring and improving website performance
• Fulfilling legal obligations
• Conducting statistical analyses (on an anonymous and aggregate data basis)
• Improving business processes and ensuring corporate communication

5. Legal Bases for Processing Personal Data

Your personal data is processed based on the following legal grounds stipulated in Article 5, paragraph 2 of the KVKK:

• Explicit consent: Within the scope of your explicit consent when you submit your personal data to us through the contact form
• Legitimate interest: Within the scope of the data controller's legitimate interest for collecting website analytics data, ensuring website security and performance (KVKK m.5/2-f)
• Legal obligation: For the purpose of fulfilling obligations arising from legal regulations (KVKK m.5/2-ç)
• Performance of a contract: Within the scope of establishing and conducting a commercial relationship (KVKK m.5/2-c)

6. Transfer of Personal Data

Your personal data may be transferred to the following parties in compliance with the personal data transfer conditions specified in Articles 8 and 9 of the KVKK:

6.1. Domestic Transfer

• Authorized public institutions and organizations within the scope of legal regulations
• Lawyers and legal consultants for the conduct of legal proceedings

6.2. International Transfer

Your personal data may be transferred abroad within the scope of third-party analytics services used on our website:

These service providers take security measures in compliance with international data protection standards, and your data is transferred to countries that provide adequate protection or where appropriate protection is ensured through undertakings within the scope of Article 9 of the KVKK.

7. Personal Data Retention Periods

Your personal data is stored for the periods required by the processing purposes and within the statute of limitations periods prescribed by the relevant legislation:

Personal data whose retention period has expired is deleted, destroyed, or anonymized within periodic destruction periods.

8. Data Security Measures

In order to ensure the security of your personal data, the necessary technical and administrative measures are taken in accordance with Article 12 of the KVKK:

Technical Measures

• Secure data transmission with SSL/TLS encryption
• Firewall and intrusion detection systems
• Regular security updates and patches
• Access control mechanisms

Administrative Measures

• Informing employees about personal data protection
• Regular auditing of personal data processing procedures
• Maintaining a data processing inventory
• Confidentiality agreements with third-party service providers

9. Data Subject Rights (KVKK Article 11)

In accordance with Article 11 of the KVKK, as a personal data subject, you have the following rights:

10. Application Methods

You may choose one of the following methods to exercise the rights stated above:

Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of your request. However, if the process requires an additional cost, the fee determined by the Personal Data Protection Board may be charged.

11. Right to Complain to the Personal Data Protection Board

In case your application is rejected, the response is found insufficient, or no response is given within the deadline; you have the right to file a complaint with the Personal Data Protection Board within 30 (thirty) days from the date you learn of the response and in any case within 60 (sixty) days from the date of application.

Personal Data Protection Authority: www.kvkk.gov.tr

12. Changes to the Disclosure Notice

This disclosure notice may be amended from time to time in line with changes in legal regulations or updates in our data processing activities. The current disclosure notice will always be published on our website, and in case of significant changes, notification will be provided through our website.