Personal Data Protection Policy

Pursuant to the European Union General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law No. 6698 (KVKK), your personal data may be processed by our Company in its capacity as data controller for commercial purposes. Such processing may include recording, storing, updating, transferring and/or classifying your personal data within the framework described below.

In this context, our Company respects individuals’ fundamental rights and freedoms and protects the confidentiality of personal data under the KVKK. To prevent the unlawful processing of, access to, and storage of your personal data, our Company takes all necessary technical and administrative measures to ensure an appropriate level of security.

This policy applies to all natural and legal persons whose personal data is processed by our Company, except for our employees and/or job applicants.

  1. Data Controller

Under the KVKK, our Company acts as the data controller. Your personal data will be collected and processed by our Company within the framework described below.

The personal data processed may include, without limitation:

  • Full name;
  • Turkish Republic identification number;
  • Address;
  • Telephone number;
  • Email address;
  • Signature;
  • Video recordings obtained for the physical security of premises;
  • Call recordings made for call-center service quality purposes;
  • Bank account details; and
  • Cookie records.
  1. Purposes of Processing Personal Data

Our Company may collect personal data relating to current and prospective customers, employees, business partners, suppliers, and other parties. This may include identity information, contact details, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and sales and marketing information.

Personal data collected by our Company or provided by you may be processed for the following purposes:

  • Carrying out the necessary activities relating to products and services offered by our Company and/or for the benefit of the institutions and organizations you represent;
  • Determining and implementing our Company’s commercial and business strategies;
  • Conducting marketing, business development, and planning activities;
  • Carrying out administrative and communication operations conducted by our Company;
  • Ensuring the physical security and supervision of our Company’s premises;
  • Establishing relationships with business partners, customers, and suppliers, including their authorized representatives or employees;
  • Fulfilling contractual requirements and financial arrangements relating to the products and services offered with our business partners, suppliers, or other parties;
  • Implementing our Company’s human resources policies;
  • Conducting traffic measurement, statistical analysis, profiling, segmentation, and CRM activities for sales and marketing purposes;
  • Managing financial operations, communications, market research, social responsibility activities, and purchasing processes, including requests, quotations, evaluations, orders, and budgeting;
  • Managing the internal operation of systems and applications;
  • Managing legal processes;
  • Processing communications made through our Company’s call center or website;
  • Reviewing requests received from you or public authorities; and
  • Evaluating and responding to applications and facilitating participation in training sessions, seminars, or events organized by our Company.

Your information will be processed in accordance with the conditions and purposes stipulated in Articles 5 and 6 of the KVKK.

III. Method of Collecting and Retaining Personal Data

Personal data you share with our Company may be collected through automated or non-automated means and in oral, written, or electronic form through offices, branches, the call center, the website—including cookies—social media platforms, mobile applications, and similar channels.

Your personal data will be stored electronically and/or physically. Our Company designs the necessary operational processes and improves its technical security infrastructure to protect stored personal data against unauthorized access, alteration, loss, or damage.

Provided that your personal data is not used beyond the purposes and scope communicated to you, it will be processed using all necessary information-security measures. It will be retained for the applicable statutory retention period or, where no such period is prescribed, for as long as required for the purpose for which it was processed.

At the end of the applicable retention period, your personal data will be removed from our Company’s data records by deletion, destruction, or anonymization.

Transfer of Personal Data

The personal data collected by our Company may be transferred, within the limits prescribed by applicable legislation and for the purposes described above, to:

  • Futuris Elektronik A.Ş. and its group companies;
  • Companies, representatives, and authorized persons acting in the name and on behalf of our Company;
  • Persons and organizations authorized under the Turkish Commercial Code, the Turkish Code of Obligations, and other applicable laws and regulations;
  • Regulatory and supervisory institutions and public authorities;
  • Administrative and judicial authorities expressly authorized by law to request personal data;
  • Business partners engaged for the stated purposes;
  • Suppliers and subcontractors;
  • Banks, credit institutions, and financial institutions;
  • Other natural or legal persons;
  • Tax advisers and other persons whose involvement is required in connection with legal proceedings or compliance activities;
  • Auditors, consultants, and the institutions and organizations from which we receive consultancy services;
  • Our domestic and international business partners;
  • Natural or legal persons from whom we receive services and/or with whom we cooperate; and
  • Authorized persons and organizations engaged by us to deliver messages to our customers.

Such transfers may take place in accordance with the conditions and purposes governing the processing and transfer of personal data set out in Articles 8 and 9 of the KVKK.

Rights of the Personal Data Subject

Under Article 11 of the KVKK, you may apply to our Company and exercise the following rights concerning your personal data:

  • Learn whether your personal data has been processed;
  • Request information if your personal data has been processed;
  • Learn the purpose for which your personal data has been processed and whether it has been used in accordance with that purpose;
  • Know the third parties in Türkiye or abroad to whom your personal data has been transferred;
  • Request the correction of incomplete or inaccurate personal data;
  • Request the deletion or destruction of your personal data under the conditions stipulated in Article 7 of the KVKK;
  • Request that the correction, deletion, or destruction of your personal data be communicated to third parties to whom it has been transferred;
  • Object to an outcome that is detrimental to you and results from the analysis of your personal data exclusively through automated systems; and
  • Claim compensation if you suffer damage as a result of the unlawful processing of your personal data.

Application and Notification Form

Under Article 13(1) of the KVKK, you may submit requests concerning the exercise of the rights listed above to our Company in writing or through any other method specified by the Turkish Personal Data Protection Board.

To exercise these rights, you may complete and submit the application form together with the information necessary to verify your identity. You may deliver your application personally, send it through a notary public or by another method specified by the Personal Data Protection Board, or send it to info@futuris.com.tr using a secure electronic signature.

Personal data subjects may submit their questions, opinions, or requests through either of the following communication channels:

Email: info@futuris.com.tr
Telephone: +90 312 484 74 45

Our Company will respond to applications either favorably or unfavorably, together with the reasons for its decision, within thirty (30) days. Responses may be provided in writing or electronically.

As a rule, applications are processed free of charge. However, if processing an application incurs a cost, our Company reserves the right to charge the applicable fee. Such fees will be determined in accordance with the tariff established by the Turkish Personal Data Protection Board pursuant to Article 13 of the KVKK.