As KEF Endüstriyel İmalat İthalat İhracat Turizm Ticaret Limited Şirketi (the “Company”), we attach importance to processing and storing the personal data of all natural persons associated with our Company — including customers who use our products and services, people who request a quote or contact us, and visitors to our website — in accordance with Turkish Personal Data Protection Law No. 6698 (“KVKK” or the “Law”).

As data controller, and as required by the Law, we would like to inform you through this Privacy Notice about our data processing activities and the rights you have in this regard.

A) Which personal data do we process?

Our Company processes your personal data for specific purposes based on the legal grounds set out below. The personal data processed, with all necessary measures taken to achieve these purposes, and its categories are as follows:

1. Personal data of people who request a quote or contact us

Identity: Name and surname
Contact: Phone number, e-mail address, city, company details
Request details: Product of interest, message content
Transaction security: IP address, website login/logout information

2. Personal data of customers who purchase products or services

Identity: Name and surname, Turkish ID number
Contact: Phone number, e-mail address, address
Customer transactions: Quote and order details
Marketing: Purchase history, information obtained through campaigns

3. Personal data of website visitors

Transaction security: IP address, website login/logout information
Marketing: Cookie records (only to the extent you consent; for details see the Cookie Notice)

The personal data collected by our Company and the purposes of collection may vary depending on the service provided and the contracts concluded. Detailed information on our data processing activities, including purposes and legal grounds, can be found in our Personal Data Protection and Processing Policy.

B) For what purposes is your personal data processed?

Our Company processes your personal data in accordance with the Law and the principle of good faith for the following purposes:

Receiving, evaluating and responding to your quote and contact requests,
Verifying the identity of customers who purchase products or services, either in person or through a representative,
Communicating with the relevant persons electronically or physically,
Fulfilling obligations under applicable legislation and contracts to which we are a party, and exercising legal rights,
Conducting our activities in compliance with the law,
Providing information to authorised public institutions and organisations,
Informing our customers and visitors about products and campaigns that may interest them, in line with their expectations and wishes,
Conducting surveys, either ourselves or through contracted organisations, and carrying out trend and statistical analyses in order to increase customer satisfaction,
Ensuring the security of the website,
Managing and completing quote and order processes, and informing our customers about order and delivery status by SMS and e-mail,
Providing installation, technical service and after-sales support,
Carrying out finance and accounting activities,
Handling legal matters and following up and resolving requests and complaints.

C) To whom and for what purposes is your personal data transferred?

Personal data is shared with third parties in accordance with Articles 8 and 9 of the Law, and as a rule personal data is not transferred to third parties without the consent of the data subject. However, the Law provides that in certain cases personal data may be shared without seeking the data subject's consent.

Accordingly, as required by our legal obligations and upon request, your personal data is shared with judicial authorities and other public institutions and organisations. Personal data is also transferred to our contracted suppliers, our legal advisers, and the service providers from whom we obtain website hosting and e-mail services (whose servers may be located abroad), for the purposes of providing our products and services in the best possible way, fulfilling our contractual and legal obligations, monitoring and auditing the services provided, resolving legal disputes, carrying out finance and accounting activities, and ensuring the security of our website and your personal data.

D) How is your personal data collected?

Your personal data is collected and stored through various channels — such as the quote and contact form on our website, phone, e-mail, WhatsApp and SMS; information you provide when signing commercial contracts and/or during the business relationship; cookies used when you visit our website; and physical forms — verbally, in writing or electronically, by fully or partially automated means, or by non-automated means provided they are part of a data filing system.

E) On what legal grounds is your personal data processed?

As a rule, your explicit consent is required for your personal data to be processed. Explicit consent is consent relating to a specific matter, based on information and given freely. However, Article 5/2 of the Law lists cases in which data may be processed without explicit consent; where at least one of these applies, data may be processed without seeking the data subject's consent.

The personal data listed above is processed based on the following legal grounds under Article 5/2 of the Law:

It is expressly provided for by law (e.g. keeping traffic records and IP addresses under Law No. 5651),
It is necessary for the data controller to fulfil its legal obligations (e.g. your name and surname are needed to issue an invoice for your order),
Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (e.g. responding to your quote request, evaluating campaigns),
Processing the personal data of the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of that contract (e.g. processing your address to deliver the product),
Processing is necessary for the establishment, exercise or protection of a right (e.g. following up legal and financial matters).

Non-essential cookies and commercial electronic messages for marketing purposes are processed only on the basis of your explicit consent.

F) What are your rights under the Law?

Under Article 11 of the Law, data subjects have the right to:

Learn whether their personal data is being processed,
Request information about the processing if their personal data has been processed,
Learn the purpose of the processing and whether the data is used in line with that purpose,
Know the third parties, in Türkiye or abroad, to whom their personal data is transferred,
Request the correction of personal data that is incomplete or inaccurate, and request that third parties to whom the data has been transferred be notified of this,
Request the erasure or destruction of personal data where the reasons for processing no longer exist, even though it was processed in accordance with the Law and other applicable laws, and request that third parties to whom the data has been transferred be notified of this,
Object to a result that is to their detriment arising from the analysis of the processed data exclusively by automated systems,
Claim compensation for damage suffered as a result of the unlawful processing of their personal data.

You can submit applications regarding these rights, together with documents proving your identity, in person to Ferhatpaşa Mah. G-27 Sk. No:17, 34888 Ataşehir / Istanbul, Türkiye, through a notary public, or by other methods specified in the Law. Your applications will be concluded free of charge as soon as possible depending on the nature of the request, and within thirty days at the latest; however, if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Authority.

For any questions or comments regarding your personal data, you can contact us at kef@kef.com.tr.

This English version is provided for information only. In case of any discrepancy, the Turkish version prevails.