Privacy Notice (KVKK/GDPR)

Clarification Text under the Personal Data Protection Law No. 6698

1. Identity of the Data Controller

• Data Controller: İstanbul Döküm Sanayi ve Ticaret A.Ş.
• Address: 5. Cadde 11. Sokak No: 1 Köseler Köyü 41455 Dilovası Kocaeli / TURKEY
• Email: kvkk@istanbuldokum.com
• Phone: +90 262 728 13 00
• Web: www.istanbuldokum.com

2. Processed Personal Data

The following data may be processed within the scope of the website, quotation requests, contact forms, customer and supplier processes, and human resources applications:

• Name, surname
• Company name
• Phone number
• Email address
• Title / position information
• IP address and log records
• CV and resume information
• Supplier / customer transaction records
• Request, complaint, and communication contents

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Executing quotation and order processes
• Managing customer quality processes
• Supplier evaluation and purchasing activities
• Responding to communication requests
• Human resources and recruitment processes
• Fulfilling legal obligations
• Ensuring information security and data security processes
• Website security and log management
• Audit, quality, and traceability processes

4. Transfer of Personal Data

Your personal data may be transferred to:

• Authorized public institutions and organizations
• Legally authorized auditing authorities
• ERP / server / email service providers
• Logistics, audit, and certification bodies
• Parties providing legal consultancy and financial advisory services
in accordance with Articles 8 and 9 of the KVKK.

5. Method and Legal Basis for Data Collection

Your personal data is collected electronically or physically via:

• Website contact form
• Email correspondence
• Phone calls
• Business card sharing
• Physical visitor forms
• Job application forms
• Contracts and order documents.

Legal bases:

• Establishment or performance of a contract
• Legal obligation of the data controller
• Legitimate interest
• Explicit consent (when necessary)

6. Your Rights under the KVKK/GDPR

Under Article 11 of the KVKK, you have the right to:

• Learn whether your data is being processed
• Learn the purpose of processing
• Know the third parties to whom it is transferred
• Request correction if processed incompletely or incorrectly
• Request deletion or destruction
• Object to processing
• Claim compensation in case of damages.

You can submit your applications to kvkk@istanbuldokum.com.

7. Data Security Commitment

Our company takes technical and administrative measures for the protection of personal data; in this context, it implements information security, access authorization, document control, backup, log monitoring, and privacy policies. This article is directly compatible with the current Information Security Policy in our Policy Manual.

8. Special Note for Employee and Candidate Data

In accordance with the policy of not employing child labor under Labor Law No. 4857, our company processes identity and age verification data during recruitment processes solely for the purpose of fulfilling legal obligations.