Pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”), MERTAŞ Endüstriyel Temsilcilik ve Dış Tic. Ltd. Şti. (the “Company”), acting as data controller, informs data subjects of the following matters.

1. Data Controller
MERTAŞ Endüstriyel Temsilcilik ve Dış Tic. Ltd. Şti.
Merdivenköy Mh. Nur Sok. A Blok K:12 D:115 Business, 34730 Kadıköy/İSTANBUL
Phone: 0216-417 48 60 | Mobile: 0549-345 69 00 | Email: [email protected]

2. Personal Data Processed

• Identity Data: Name and surname, national ID number, vehicle license plate.
• Contact Data: Email address, address, and telephone number.
• Financial Data: Bank account information.
• Employment Data: Social Security (SGK) registration notification, assignment documents, start date, title, signature circular.
• Visual Data: Camera recordings.
• Online Visitor Data: Name, surname, email and phone number submitted via web forms; IP address.

3. Method and Legal Basis for Collecting Personal Data
Personal data is collected through partly automated means, such as the completion of forms and the submission of CVs. The legal grounds set out under Article 5/2 of the KVKK are:

• Explicitly provided for by law,
• Necessary for the data controller to fulfil a legal obligation,
• Necessary for the establishment, exercise, or protection of a right,
• Necessary for the data controller’s legitimate interests.

4. Purposes of Processing Personal Data
Personal data is processed for the purposes of conducting business activities, managing customer relations, contract processes, finance and accounting, human resources, follow-up of legal affairs, information security, logistics and supply-chain management, regulatory compliance, and providing information to authorized bodies. Web contact forms
are processed for customer relations purposes, career forms for candidate evaluation processes, and site traffic and cookies for information security purposes.

5. Transfer of Personal Data
Personal data may be transferred to the Company’s business partners and to authorized public institutions and organizations within the framework of Articles 8 and 9 of the KVKK, provided that the necessary security measures are taken.

6. Rights of the Data Subject (KVKK Article 11)

• To learn whether personal data concerning them is being processed,
• To request information if it has been processed,
• To learn the purpose of processing and whether the data is used in accordance with that purpose,
• To know the third parties to whom the data is transferred, domestically or abroad,
• To request correction of incomplete or inaccurate data,
• To request deletion or destruction of data within the framework of Article 7 of the KVKK,
• To request that correction or destruction be notified to third parties to whom the data has been transferred,
• To object to a result that is to the data subject’s detriment which arises from analysis conducted exclusively through automated systems,
• To request compensation for damages arising from unlawful processing.
  You may exercise these rights by submitting a written application accompanied by identity-verifying documents. Applications are concluded free of charge within 30 days at the latest.

7. Data Security
The Company takes all necessary administrative and technical measures to prevent the unlawful processing of, and unlawful access to, personal data.

8. Amendments
MERTAŞ reserves the right to update this Disclosure Text due to changes in the KVKK or in its data-processing methods.