Personal Data Protection Privacy Notice:
As EKMAŞ GIDA MAKİNALARI SAN. VE TİC. LTD. ŞTİ. (“EKMAŞ” or the “Company”), acting as data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), we inform you about the purposes and legal bases on which your personal data are processed, the parties to whom they may be transferred, the methods by which they are collected and your rights.
1. Data Controller and Contact Details
Data Controller: EKMAŞ GIDA MAKİNALARI SAN. VE TİC. LTD. ŞTİ.
Address: Kağıthane Barbaros Cad. Şebnem Sokak No:10/A Seyrantepe, Kağıthane, Istanbul
Phone: 0850 650 00 00
Email: [email protected]
2. Methods of Collecting Personal Data
Your personal data may be collected electronically through membership, contact, quotation and order forms on the website, account and order transactions, email and telephone communications, cookie preferences and website usage records; and, where necessary, through physical documents and records by non-automated means.
3. Categories of Personal Data That May Be Processed
Identity: Name, surname; and, where required for a commercial transaction, company title and tax information.
Contact: Telephone number, email address, billing address and delivery address.
Customer Transaction: Membership, order, quotation, product, delivery, return, withdrawal, request and complaint information, and purchase history.
Financial: Invoice, collection and payment-transaction information. If full card details are not stored by EKMAŞ, payment transactions are carried out through the secure infrastructure of the relevant payment institution.
Transaction Security: IP address, session, access, cookie-preference and system records, where such data are actually generated by EKMAŞ systems or the infrastructure used.
4. Purposes of Processing and Legal Bases
Membership, orders, quotations, payments, delivery, returns and after-sales support: Processing is necessary for the establishment or performance of a contract to which the data subject is a party.
Invoice, accounting, tax and statutory obligations: Processing is necessary for the data controller to comply with a legal obligation.
Management of requests, complaints, warranties, returns and disputes: Processing is necessary for the establishment, exercise or protection of a right.
Website, account and transaction security: Processing is necessary for the legitimate interests of the data controller, provided that such processing does not prejudice the fundamental rights and freedoms of the data subject, and, where applicable, for compliance with legal obligations.
Analytics and marketing cookies: The user’s separate, freely given explicit consent. Reading this Privacy Notice or completing a membership or order transaction does not constitute explicit consent.
5. Transfer of Personal Data
To the extent necessary for the relevant activity and legally permissible, your personal data may be transferred, for the relevant purpose only, to banks and payment institutions for payment and collection transactions, courier/logistics companies for delivery and returns, service providers supplying e-commerce and information-technology infrastructure, advisers for the fulfilment of financial and legal obligations, and public authorities and institutions legally authorised to receive such data.
If explicit consent is given for Google Analytics and Google Ads and those services are activated, online identifiers and usage data may be processed by Google outside Türkiye. Regular international transfers of personal data must be carried out in accordance with the conditions and appropriate safeguard mechanisms set out in Article 9 of KVKK.
6. Cookies
Essential cookies may be used to enable the website to operate securely and perform its basic functions. Analytics cookies within Google Analytics and marketing cookies within Google Ads are not activated without user consent. For cookie types, the preference mechanism and further details, please see the Cookie Notice .
7. Retention and Deletion
Your personal data are retained for as long as required by the purposes of processing and for any mandatory retention periods prescribed by applicable legislation. When the reason for processing ceases to exist and there is no other legal retention obligation, the data are deleted, destroyed or anonymised in accordance with applicable law.
8. Your Rights under KVKK
To exercise your rights under Article 11 of KVKK, you may apply to EKMAŞ to learn whether your personal data are processed; request information if they have been processed; learn the purpose of processing and whether the data are used in accordance with that purpose; learn the third parties to whom they are transferred; request rectification, deletion or destruction where the relevant conditions are met; object to a result arising against you solely through analysis by automated systems; and claim compensation if you suffer damage due to unlawful processing.
9. Application Method
You may submit your requests under KVKK to EKMAŞ through the address and contact channels above using one of the methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application must contain sufficient information to identify you and your request.
10. Separation of Privacy Notice and Explicit Consent
This text is a privacy notice; it is not an explicit-consent form. If a personal-data processing activity requires explicit consent, that consent is obtained separately from the privacy-notice process and separately from acceptance of membership/order agreements.
11. Updates
If there is a change in personal-data processing activities, purposes, legal bases, recipient groups to whom data are transferred or applicable legislation, this Privacy Notice will be updated.