Personal Data Protection Law
Koçmet Metal Ürünleri San. ve Tic. A.Ş. (“Koçmet A.Ş.”, “Our Company”) processes your personal data as a data controller in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and other applicable legislation.
According to Article 10 of the KVKK, which regulates the obligation to inform, data controllers are obliged to inform the relevant persons whose personal data they process on certain matters.
Definitions
According to the Personal Data Protection Law No. 6698:
Personal data refers to any information relating to an identified or identifiable natural person;
Processing of personal data refers to any operation performed on personal data, such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data, whether fully or partially by automated means or by non-automated means provided that it is part of a data recording system;
Visitor / Relevant Person refers to all persons accessing www.kocmet.com and to the natural person whose personal data is processed;
Data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system;
Obligation to inform refers to the obligation of the data controller or the person authorized by the data controller to inform relevant persons, during the collection of personal data, about the identity of the data controller, the purposes for which personal data will be processed, to whom and for what purposes processed personal data may be transferred, the method and legal basis of collecting personal data, and the other rights listed under Article 11 of the Law;
Cookies are small text files sent to the Visitor by servers through browsers. Cookies allow the tracking of the Visitor’s browsing information and usage history on the Website in order to provide personalized services, improve service quality, and enhance page content. In this context, cookies may be stored on the Visitor’s device for a specified period.
Relevant Person
Due to your visit to our website, you are defined as a Visitor (Internet user) and are also considered a Relevant Person under the Law.
Data Controller
Koçmet A.Ş. is the data controller responsible for determining the purposes and means of processing your personal data and for establishing and managing the data recording system.
Collection of Your Personal Data
Your personal data is collected automatically through the website.
IP and log information, which is required under Law No. 5651, is stored on the servers where our website is hosted in accordance with the law. These records include IP information, connection date and time, request made, and amount of data transferred.
In addition, your personal data submitted through the “Contact” section of our website is collected electronically.
Apart from these, cookies may also be used on our website.
Purposes and Legal Grounds for Processing Your Personal Data
The legal grounds and purposes for processing your personal data are listed below.
- Due to being expressly provided for by law in accordance with Article 5/2-a of the KVKK; for the purpose of carrying out activities in compliance with legislation,
Pursuant to Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications, Article 7/2; transaction security information such as connection time, IP protocol used, visited page, connection end time, IP address, amount of data transferred, etc.
- Due to the necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person, in accordance with Article 5/2-f of the KVKK;
For the purpose of carrying out customer satisfaction activities through session cookies and persistent cookies.
- Due to the data having been made public by the Visitor and the necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person, in accordance with Article 5/2-f of the KVKK;
Information such as name, surname, institution, e-mail address, and phone number provided by the Visitor through the contact forms on our website.
Transfer of Your Personal Data
Your personal data may be transferred to relevant authorities without the obligation to inform and without seeking your explicit consent if requested within the scope of Article 28/1 of the KVKK.
Apart from this, in unforeseen cases, your personal data may also be transferred to public institutions specified by law, such as ministries and administrative authorities, if requested in cases expressly provided for by law and within the purposes and limitations set forth by law.
Measures Taken for Data Security
Our Company takes all necessary administrative and technical measures to prevent the unlawful processing of personal data and unlawful access to personal data, to ensure the protection of personal data, and to provide an appropriate level of security.
- Administrative Measures: As Koçmet A.Ş., we provide the necessary training to our personnel for the lawful processing and protection of your personal data and regularly audit our employees to measure their level of compliance with the Law. We adopt the compliance and diligence shown by our personnel regarding the Law as a criterion in their performance evaluation. In addition to these internal measures, we ensure your data security by signing confidentiality agreements and undertakings with the groups with whom we lawfully share your personal data, such as suppliers and business partners, and we ensure that our stakeholders also show due sensitivity regarding your personal data. In addition to these trainings, audits, and precautions, response plans have been prepared in case of a breach concerning your personal data, and our Company has made the necessary preparations to remedy such breaches.
- Technical Measures: We have an infrastructure equipped with appropriate security measures to ensure data security and prevent unlawful access to your data. The system established on this infrastructure is internally audited to ensure its proper operation, and the technical measures recommended by the Personal Data Protection Authority are observed.
If our website redirects users to other websites or applications, Koçmet A.Ş. has no knowledge of whether the redirected websites or applications comply with personal data protection legislation and assumes no responsibility for their privacy policies or content.
Your Rights Regarding Your Personal Data
Relevant persons must first apply to the data controller in order to exercise their rights regarding their personal data.
Under the Law, regarding your personal data, you have the right to:
a) Learn whether your personal data is being processed,
b) Request information if your personal data has been processed,
c) Learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
ç) Know the third parties to whom your personal data has been transferred, whether domestically or abroad,
d) Request correction if your personal data has been processed incompletely or inaccurately,
e) Request the deletion or destruction of your personal data if the reasons requiring its processing no longer exist,
f) Request notification of the actions taken under subparagraphs (d) and (e) to third parties to whom your personal data has been transferred,
g) Object to the emergence of a result against you through the exclusive analysis of your processed data by automated systems,
ğ) Request compensation for damages if you suffer damage due to the unlawful processing of your personal data.
You may exercise these rights by applying to the data controller, namely to us.
Application Method to the Data Controller
You may submit your requests regarding your rights listed under Article 11 of Law No. 6698 through one of the methods below, in accordance with Article 13 of the Law and Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller.
Your request will be answered free of charge within 30 days in accordance with Article 13 of Law No. 6698.
However, if the transaction requires an additional cost, no fee other than the fee specified in the relevant communiqué will be requested.
The applicant must submit the application together with documents proving their identity.
Applications must include name, surname, signature if the application is written, Turkish Republic ID number, residential or workplace address for notification, e-mail address for notification if available, telephone number, fax number if available, and the subject of the request. If these documents cannot be verified, a positive response will not be given to the application.
You may submit your application in writing to Kurtköy Mah. Arafat Sk. No:5/20 Pendik/ISTANBUL, or by using your registered electronic mail address to send it to our registered electronic mail address at kocmetmetal@hs03.kep.tr,
or by sending an e-mail with secure electronic signature or mobile signature, or by using your e-mail address registered in our system, to info@kocmet.com.
By using www.kocmet.com, the Visitor declares that they have read all the terms stated in this information notice and have been informed about the processing of their personal data.