INFORMATION REGARDING PRIVACY AND PROTECTION OF PERSONAL DATA

INFORMATION REGARDING PRIVACY AND PROTECTION OF PERSONAL DATA

Cemer Kent Ekipmanları Tic. San. A.Ş. (Cemer) attaches utmost importance to the protection of fundamental rights and freedoms, particularly the privacy of individuals as regulated in Article 20 of the Constitution. In this context, Cemer is committed to ensuring the lawful protection and processing of personal data and acts with this understanding in all its planning and activities.

Cemer does not view the protection of personal data, which is the foundation of privacy, merely as a compliance matter with the legislation, but places the value it gives to people at the core of its approach. Acting with this awareness, Cemer takes all necessary administrative and technical measures to securely store personal data and prevent its unlawful processing.

In this context, in accordance with the Personal Data Protection Law No. 6698, the following information is provided regarding the processing and transfer conditions of personal data produced or shared during the use of the website “http://www.cemer.com.tr” & "http://www.cemer.com."

  1. Definitions

    • Website: The website located at the address “www.cemer.com.tr.”
    • Website: The website located at the address “www.cemer.com.”
    • Law: The Personal Data Protection Law No. 6698.
    • Personal Data: Any information relating to an identified or identifiable natural person.
    • Online Visitor/Relevant Person: Any person who accesses the Website. This group is categorized as "Visitor" in the relevant company policies.
    • Board: The Personal Data Protection Board.
    • Company: Cemer Kent Ekipmanları Tic. San. A.Ş.
    • Host Provider: Refers to the natural or legal persons who provide or operate the systems that host services and content in the online environment.
  2. Personal Data Processed The personal data processed based on the Online Visitor's access to the Website and their actions on the Website are as follows:

    For Online Visitors visiting the Website:

    • Transaction Security Information (IP address, site traffic information, etc.)
    • Cookie Information

    For Online Visitors filling out forms on the Website:

    • Identity Information (name, surname)
    • Contact Information (email address)

    In addition to the above, other data that may be necessary for the operation, development, and security of the Website may also be processed in accordance with the Law.

  3. Method and Legal Reason for Collecting Personal Data Personal data is collected through the use of the Website and the filling out of communication forms, and is stored for the necessary duration, either automatically or partially automatically, for processing purposes.

    Personal data is processed based on the explicit consent of the Online Visitor. However, personal data can also be processed without explicit consent under the legal grounds set out in Article 5, Paragraph 2 of the Law, such as (i) explicit provision in laws, (ii) necessity for the data controller to fulfill a legal obligation, (iii) necessity for the establishment, use, or protection of a right, or (iv) necessity for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.

  4. Purposes for Processing Personal Data Personal data is processed in accordance with the conditions set out in the Law and the purposes described in the fourth paragraph based on the Online Visitor’s actions on the Website, such as:

    • "Identity and contact information" will be processed for purposes like conducting business activities, customer relationship management, tracking requests/complaints, and communication activities in case the communication form is filled.
    • "Site traffic information" will be processed for information security purposes. Additionally, the hosting provider has an obligation to record and store site traffic information under Law No. 5651 and other relevant regulations.

    The processing of personal data for the purpose of sending commercial electronic messages is subject to the explicit consent of the Online Visitor.

    The Website does not use third-party cookies. However, only necessary cookies for the operation and security of the site may be used. The Online Visitor may opt-out of cookies or set up notifications by adjusting their browser settings. If cookies are disabled, certain functions of the Website may not work properly.

    Below are links to guides on managing and disabling cookies in common browsers:

    • Chrome Browser: Link
    • Internet Explorer: Link
    • Mozilla Firefox: Link
    • Safari: Link
  5. Who Personal Data May Be Transferred To and For What Purpose Personal data may be transferred to Cemer's group companies, within the framework of the conditions outlined in Article 5, Paragraph 2 of the Law, for the purposes specified in the fourth section, provided that the necessary security measures are taken in accordance with Articles 8 and 9 of the Law.

    In the absence of the conditions mentioned in Article 5, Paragraph 2, the transfer of personal data is subject to the explicit consent of the Online Visitor.

  6. Rights of the Data Subject Under Article 11 of the Law In accordance with Article 10 of the Law, Cemer informs the data subject of their rights and provides guidance on how these rights can be exercised, ensuring the necessary administrative and technical arrangements are made for this purpose.

    Data subjects, under Article 11 of the Law, have the right to:

    • Learn whether their personal data is processed.
    • Request information about the processed personal data.
    • Learn the purpose of processing their personal data and whether it is being used in accordance with the intended purpose.
    • Know the third parties to whom their personal data is transferred, both domestically and abroad.
    • Request the correction of incorrect or incomplete data.
    • Request the deletion or destruction of personal data under the conditions set out in Article 7.
    • Request notification of the correction or deletion of personal data to third parties to whom it was transferred.
    • Object to a decision made solely based on automated processing, if it leads to an adverse result.
    • Request compensation for damages in case their personal data is processed unlawfully.

    Requests related to the implementation of the Law can be made by filling out the Personal Data Owner Application Form and submitting it in writing to the address “Bahçelievler, 430. Sk. No:16, 35375 Torbalı/İzmir,” by hand or by postal mail, or electronically through registered electronic mail (KEP) address cemerkent@hs01.kep.tr, using a secure electronic signature or mobile signature.

    If the data subject has previously provided an electronic mail address to Cemer, requests can also be sent to the email address muhasebe@cemer.com.tr.

    The following information must be included in the request:

    • Name and surname, and if written, signature.
    • For Turkish citizens, the Turkish ID number; for foreigners, nationality, passport number, or ID number if available.
    • Address for notification, phone number, and fax number.
    • If available, the email address, phone, and fax number for notifications.
    • Subject of the request.

    Cemer will respond to the requests and applications within 30 days, free of charge, unless there are additional costs that require a fee according to the fee schedule determined by the Board.

    Cemer may accept the request, explain the reasons for refusal, and notify the relevant person in writing or electronically. If the request is accepted, Cemer will implement it as soon as possible and inform the relevant person.

    If the request results from an error on Cemer's part, any paid fees will be refunded to the data subject.

    If the application is rejected, or if the response is inadequate or not provided within the time limit, the data subject has the right to appeal to the Personal Data Protection Board within 30 days from the notification of the response, or within 60 days from the application date.

  7. Data Security Cemer is required to take all necessary administrative and technical measures to prevent the unlawful processing of personal data and the unlawful access to personal data, and to ensure its safe retention.

    Cemer is not responsible for the privacy policies and contents of other sites or applications that may be linked to from the Website.

    By using the Website, the Online Visitor acknowledges that they have read and understood the terms written in this information notice and agrees to the processing of their personal data.