Information Notice, Consent Text and KVKK

Purpose

Within the scope of the Turkish Law on the Protection of Personal Data No. 6698 (“KVKK”), Karaport CNC Takım Tezgahları ve Bilişim Teknolojileri Makina Sanayi Dış Ticaret Limited Şirketi (“Karaport”), acting as the “Data Controller”, aims to fulfill its obligation to inform by providing information regarding the personal data processing activities carried out by us through this Information Notice and Consent Text, and to obtain the explicit consent of our customers and visitors for the situations specified below.

Definition of Personal Data and General Principles

Any information and documents that make our customers’ identities identified or identifiable, including identity information, access/contact information, consumer habits, information obtained during audio and visual communications, or information obtained as a result of transactions carried out within the scope of contracts established, are considered personal data pursuant to Article 3/d of the KVKK.

Karaport, acting as both the Data Controller and Data Processor, may collect, record, store, retain, update, modify, reorganize, disclose, transfer, share, classify, anonymize, and process personal data in other ways permitted by applicable legislation, within the scope and limits specified by law and under the conditions explained below, in order to continue providing its services.

Purpose of Processing Personal Data

Karaport may record, store, update, disclose to third parties, transfer, classify, and process your personal data within the limits and conditions permitted by applicable legislation.

Your personal data is processed for the following purposes:

• Verifying the identity information of the person performing or requesting a transaction,
• Recording address and other necessary information for communication purposes,
• Preparing all records and documents that constitute the basis for transactions in electronic (internet/mobile, etc.) or physical environments,
• Executing sales agreements, distance sales agreements, issuing invoices in accordance with applicable legislation, and ensuring that our customers can fully and properly exercise their legal rights arising from applicable legislation (right of withdrawal, optional rights, etc.),
• Providing personalized advertisements, campaigns, and other benefits to our customers upon obtaining their explicit consent; performing customer segmentation based on collected data; conducting surveys and tele-sales activities; carrying out data mining activities; improving customer data quality; designing and managing customer loyalty operations, cross-selling activities, and customer retention strategies,
• Evaluating customer complaints and suggestions regarding our products and services,
• Ensuring the security and supervision of Karaport’s movable and immovable assets,
• Determining and implementing Karaport’s commercial and business strategies,

• Fulfilling our obligations arising from the KVKK and exercising our legal rights arising from applicable legislation.

  Method of Collection and Retention Period of Personal Data

  Your personal data is collected electronically through our company’s corporate websites and the systems we use.

  Our company retains the personal data it obtains in accordance with the periods stipulated under applicable legislation, if such periods are specified. If no specific retention period is provided by legislation, personal data is stored only for the period necessary for the purpose for which it is processed and in any case not exceeding a maximum period of 10 years.

  However, if you have become a member of our Website, your personal data included in your membership account will continue to be stored in our systems until you delete your membership account.

  If there is no valid reason for further retention of personal data, such data will be deleted, destroyed, or anonymized.

• Data Category	Retention Period	Legal Basis
  Membership and order records	10 years	Turkish Code of Obligations No. 6098
  All records related to accounting and financial transactions	10 years	Turkish Commercial Code No. 6102, Tax Procedure Law No. 213
  Cookies	Maximum 540 days	—
  Commercial electronic communication consent records	1 year from the date consent is withdrawn	Law No. 6563 and relevant secondary legislation
  Traffic information related to online visitors	2 years	Law No. 5651
  Personal data related to customers	10 years after the termination of the legal relationship; 3 years in accordance with Law No. 6563 and relevant secondary legislation	Laws No. 6563, 6102, 6098, 213, and 6502
  Personal data related to suppliers	10 years after termination of the legal relationship	Laws No. 6102, 6098, and 213
  Personal data collected for usability testing research purposes	2 weeks	—

  Persons and Organizations to Whom Personal Data May Be Transferred

  For the purposes stated above, your personal data may be transferred to:

• Relevant banks and online payment service providers depending on your preferred payment method,
• Relevant distribution, cargo, and courier companies according to your preferred delivery method,
• Infrastructure service providers in order to resolve your complaints and provide you with better services,
• Relevant institutions, organizations, and infrastructure providers within the scope of e-invoicing and e-archive invoicing processes,
• Domestic and international server hosting, archiving, storage, and software service providers that we cooperate with for backing up, storing, archiving, and maintaining transaction records,
• Legal, financial, and tax advisors and auditors for resolving issues or fulfilling our legal obligations,

• Other persons, institutions, and organizations permitted under applicable legislation where necessary 

  for the execution of Karaport’s business processes.

  When transferring your personal data to third parties specified in this section, only the minimum amount of data required and relevant to the purpose of transfer will be shared.

   

Methods and Legal Grounds for Collecting Personal Data

Karaport collects personal data through its websites, mobile applications of its websites, social media accounts, cookies, call centers, notifications received from administrative and judicial authorities, and other communication channels, electronically, verbally, or in writing.

These data processing activities are carried out in accordance with the personal data processing conditions specified under the KVKK and based on the legal grounds stated in this Privacy / Personal Data Protection Policy.

Categorization of Data Subject Groups

Karaport categorizes the groups of data subjects whose personal data is processed within personal data processing processes and related activities as follows.

In addition, in accordance with the personal data processing conditions specified in Articles 5 and 6 of the KVKK and the legal grounds stated in this Privacy / Personal Data Protection Policy, personal data belonging to other groups of individuals (such as consultants, trainers, and bloggers) may also be processed.

• Customer / Member (Individual Member), Potential Customer / Member (Corporate Member)
• Online Visitor

• Person or Organization to Whom the Purchased Product / Service Will Be Registered

  Data Categories and Sample Data Types

  Customer / Member (Standard Member), Potential Customer / Member (Corporate Member)

  Identity Information

• Name, surname

  Corporate Information

• Company name and title

  Location Information

• City and district of residence

  Contact Information

• Mobile phone number, e-mail address, address, postal code, landline phone number

  Financial Information

• Tax office information, invoice details

  Customer / Member Information

• Membership information, membership ID number

  Customer / Member Transaction Information

• Purchased products/services (such as promotional services purchased for listings and store packages within the Karaport.com system), transaction amount, transaction date, call center communication records, commercial communication consent, campaigns benefited from, coupons used, and order-related information.

  Risk Management Information

• Personal data processed through methods used in accordance with generally accepted legal and commercial practices and the principles of good faith in order to manage our commercial, technical, and administrative risks.

  Transaction Security Information

• Information used to ensure the security of transactions performed in physical and electronic environments, including username, password, login credentials, and log records.
• Examples include:
• IP address information,
• Website login/logout records,

• Password and authentication information.

  Visual Information

• Company logo,

• Photographs of sales representatives.

  Marketing Information

• Cookie records,
• Targeting information,

• Evaluations showing preferences, interests, habits, and likes.

  Legal Transaction and Compliance Information

• Start and end dates of the provided service,
• Type of service used,
• Amount of transferred data,
• Commercial electronic communication consent provided electronically by the Data Subject,

• Membership agreement, privacy policy, and other legal texts and contracts approved by the relevant person that enable the use of services provided by Karaport.

  Marketing Information

• Marketing-oriented SMS messages, e-mails, or call center communications sent based on the commercial electronic communication consent provided by the relevant person.

  Request / Complaint Management / Reputation Management Information

• Records related to complaints and/or requests submitted by the relevant person through the website, mobile application, social media accounts, or call center regarding purchased products or services, and the actions carried out during the evaluation or management processes of these requests.

  Reputation Management Information

• Information collected to protect the commercial reputation of our company, evaluation reports created based on this information, and details regarding actions taken.

  Incident Management Information

• Personal data processed in order to take necessary legal, technical, and administrative measures against incidents that may arise to protect the commercial rights and interests of our company and the rights and interests of our customers.

  Online Visitors

  Legal Transaction Information / Risk Management Information

• Personal data processed through methods used in accordance with generally accepted legal and commercial practices and the principles of good faith in order to manage our commercial, technical, and administrative risks.

  Legal Transaction and Compliance Information

• Start and end dates of the provided service,
• Type of service used,

• Amount of transferred data.

  Person or Organization to Whom the Purchased Product / Service Will Be Registered

  Identity Information

• Name, surname

  Corporate Information

• Company name and title

  Location Information

• City, district

  Contact Information

• Mobile phone number,
• E-mail address,
• Address,
• Invoice address,
• Postal code,

• Landline phone number

  Financial Information

• Tax office,
• Invoice details,

• Tax identification number

  Visual Information

• Company logo,
• Photographs of sales representatives,

• Product photographs

  Rights of Data Subjects and Exceptions Within the Scope of Article 11 of the Law

  By applying to our company in writing or through other methods determined by the Personal Data Protection Board, you have the right to:

• Learn whether your personal data is being processed,
• Request information regarding the processing of your personal data if it has been processed,
• Learn the purpose of processing your personal data and whether it is being used in accordance with its purpose,
• Know the third parties to whom your personal data is transferred, whether within the country or abroad,
• Request correction of your personal data if it has been processed incompletely or incorrectly,
• Request the deletion or destruction of your personal data within the conditions stipulated under Article 7 of the Law,
• Request notification of the actions taken pursuant to subparagraphs (d) and (e) above to third parties to whom your personal data has been transferred,
• Object to the occurrence of a result against you arising from the analysis of your personal data exclusively through automated systems,

• Request compensation for damages if you suffer damage due to unlawful processing of your personal data.

  You may submit your requests regarding your personal data by completing the Data Subject Application Form available on our website, together with the necessary information to verify your identity and explanations regarding the right you wish to exercise.

  Your applications will be concluded free of charge as soon as possible and within a maximum period of thirty (30) days, depending on the nature of the request. If the process requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

  Our company reserves the right to accept the request or reject it by explaining the reason, and to notify the relevant person of its response in writing or electronically.

   

  Changes and Updates Regarding Personal Data Legislation

  We would like to remind you that we process your personal data consciously and to the extent required by applicable legislation. In case of legal changes, the information provided on this page will be updated in accordance with the new legislation, and you will always be able to easily follow these updates through this page.

  Accuracy and Up-to-Date Status of Data

  Pursuant to Article 4 of the KVKK, Karaport has the obligation to keep your personal data accurate and up to date.

  In this context, in order for us to fulfill our obligations arising from applicable legislation, you are required to provide us with accurate and up-to-date information.

  If your data changes in any way, we kindly request that you contact us through the communication channels specified above and update your information.

  Cookie Usage Policy

  Like many websites, we use cookies on our website in order to provide you with a better user experience.

  This document has been prepared to provide information about Karaport’s use of cookies and to explain how users can manage their preferences regarding cookies.

  As Karaport CNC Takım Tezgahları ve Bilişim Teknolojileri Makina Sanayi ve Dış Ticaret Limited Şirketi, we value your security and aim to briefly inform our valued visitors through this Cookie Policy about:

• Which cookies we use on our website,
• The purposes for which these cookies are used,

• How you can change your cookie settings.

  To provide you with better services, please read this Cookie Policy to learn briefly what types of personal data are collected through cookies, for what purposes they are collected, and how they are processed.

  For more detailed information, you may review our Privacy Policy or contact us directly.

  What Are Cookies?

  Cookies are small text files (generally consisting of letters and numbers) that are stored on your devices by the websites you visit or the messages you view in order to enable users to use websites more efficiently.

  Since users’ information is processed through cookies, users must be informed and their consent must be obtained in accordance with the Turkish Law on the Protection of Personal Data No. 6698 (KVKK).

  We use various cookies in order to ensure that our valued visitors, members, and customers can benefit from our website in the most efficient way and to improve the user experience provided through our website.

  Types of Cookies We Use

  1. Strictly Necessary Cookies

  Strictly necessary cookies are cookies that enable the basic functions of the website and ensure that the website becomes usable.

  The website cannot function properly without these cookies.

  2. Performance Cookies

  Performance cookies are cookies that anonymously collect information about how visitors use the website and their preferences.

  These cookies allow us to analyze website performance and improve the quality and functionality of our website.

  3. Functional Cookies

  Functional cookies allow users to be recognized and remembered based on their previous interactions with the website during future visits.

  These cookies enable websites to provide personalized services to users, such as remembering language preferences, regional settings, and similar preferences.

  4. Advertising Cookies

  Advertising cookies are third-party cookies used to monitor visitor behavior on websites.

  The purpose of these cookies is to help display advertisements that may be relevant and of interest to visitors based on their preferences and interests.

  Responsibility regarding these cookies belongs to the third parties that own and manage such cookies.

  What Personal Data Is Processed Through Cookies?

  Your identity information (such as name and surname) and contact information (such as address, e-mail address, telephone number, IP address, location information, etc.) may be collected, recorded, stored, and updated by us through cookies.

  Such data may be obtained through automatic or non-automatic methods, and in some cases from third parties such as:

• Analytics providers,
• Advertising networks,
• Search information providers,

• Technology providers.

  Your personal data is processed within the scope and duration of our service and contractual relationship with you, based on the legal ground of legitimate interest as specified under applicable data protection legislation.

  For What Purposes Are Cookies Used?

  Cookies are used on our website for the following purposes:

• Ensuring website security by detecting suspicious activities,
• Improving functionality and performance according to user preferences,
• Developing and personalizing products and services,
• Making access to our services easier,
• Fulfilling contractual and legal obligations,
• Providing users with more comprehensive services through our service providers,

• Delivering relevant advertisements and sharing information with third parties where necessary.

  How Are Cookies Managed?

  After considering all the information provided above, the decision regarding which cookies will be used is entirely left to the free choice of our users.

  You can manage your cookie preferences by deleting or blocking cookies through your browser settings when you first visit our website, or you may change these settings at any time in the future.

  For more detailed information, you may review our Privacy Policy and Cookie Policy, or contact us through the following communication channels:

  E-mail: info@karaport.com
  Phone: +90 212 210 95 98
  Fax: +90 212 210 95 99

  This Personal Data Information and Consent Text, KVKK Compliance Text, and Cookie Policy

  This Personal Data Information and Consent Text, KVKK Compliance Text, and Cookie Policy has been prepared by:

  Karaport CNC Takım Tezgahları ve Bilişim Teknolojileri Makina Sanayi Dış Ticaret Limited Şirketi