Privacy Policy (KVKK)

GENERAL INFORMATION AND DISCLOSURE TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

As Schtec Makine Sanayi ve Ticaret Anonim Şirketi (“Schtec”), we place great importance on the security and protection of your personal data. Pursuant to Law No. 6698 on the Protection of Personal Data (“Law”) and the Communique on the Principles and Procedures to be Followed in the Fulfilment of the Obligation to Inform (“Communique”), we would like to inform you, in our capacity as the “Data Controller” as defined under the Law, about how your personal data is collected and processed.

This information notice has been prepared and presented for your review in accordance with Article 10 of the Law, in order to fulfil our obligation to inform regarding the processing of your personal data under the legal conditions and for the purposes outlined below.

Who is the Data Controller?

As defined in Article 3 of Law No. 6698, the data controller is “the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system.”

In this context, as Schtec, acting in the capacity of Data Controller regarding the processing of personal data, we fulfil our obligation to inform and disclose through this clarification text.

What Are the Legal Grounds and Reasons for Processing Personal Data?

When personal data as defined under Law No. 6698 on the Protection of Personal Data is collected, it is processed in accordance with Articles 5 and 6 of the Law. In this context, your personal data may be processed based on the legal grounds listed below. In cases where these legal grounds do not apply, your explicit consent will be obtained for the processing of your personal data.

Pursuant to the Law, your personal data may be processed on the basis of the following legal grounds:

When requested by authorized public institutions and organizations (such as courts or regulatory authorities), to provide the necessary information,
To fulfil legal obligations arising from the applicable legislation and to exercise any related rights,
To carry out procedures necessary for the preparation, execution, or termination of contracts,
Where processing is necessary for the protection of the rights of the data controller, the data subject, or third parties,
Provided that it does not violate fundamental rights and freedoms, where processing is required for the legitimate interests of the data controller (e.g., user satisfaction analysis, fulfilling mandatory notifications under the law),
Where it is necessary to protect the life or physical integrity of the data subject or another person who is unable to express consent or whose consent is not legally valid,
Where the data subject has made their personal data public,
Where processing is necessary for the establishment, exercise, or protection of a legal right.

Personal data processing activities that do not fall under the legal grounds listed above will be carried out only with your explicit consent.

Your personal data may be collected by us through manual methods, verbal or written declarations, electronic forms, by entering information such as your name, surname, and email address on our website, through areas accessed via username and password, as well as during events and activities we organize—using automated or non-automated means.

Such data may be collected, stored, updated, and processed by us, provided that the above-mentioned legal conditions are met and/or your explicit consent has been obtained.

What Is the Purpose of Collecting and Processing Personal Data?

Your personal data obtained through our website or other channels will be processed by us for the following purposes:

Planning, development, and execution of the products and services we offer, to be carried out by our relevant business units,
Operating personalization processes to enhance user experience and improve our digital platforms, including the use of cookie technologies where necessary,
Verifying the identity of individuals performing transactions via our website or mobile application, and recording necessary contact information,
Conducting marketing, advertising, and customer relationship management activities, including sending promotions, announcements, and campaign notifications,
Planning and announcing events, organizations, and similar communication activities,
Evaluating and responding to incoming requests, suggestions, and complaints in a fast and effective manner,
Ensuring the continuity of internal operations, managing business partnerships, and executing audit processes,
Securing the legal and commercial safety of our company, and using transaction records as evidence in the event of potential disputes,
Performing statistical analyses, preparing internal reports, and making necessary notifications to public institutions and authorities for compliance with legislation,
Ensuring the security of our physical premises and digital systems,
Planning and implementing occupational health and safety processes.

What Are the Rights of the Data Owner?

Pursuant to Article 11 of Law No. 6698 on the Protection of Personal Data, individuals whose personal data is processed have the following rights:

To inquire whether their personal data is being processed and, if so, to request related information,
To learn the purpose of processing and whether the data is used in accordance with that purpose,
To know the third parties to whom the data is transferred, either domestically or abroad,
To request the correction of personal data that is incomplete or inaccurately processed, and to request that such corrections be communicated to third parties to whom the data has been transferred,
To request the deletion or destruction of personal data if the legal grounds for processing no longer exist, and to request that this be communicated to third parties to whom the data was transferred,
To object to outcomes that may arise to their detriment as a result of analysis exclusively through automated systems,
To request compensation for damages incurred due to the unlawful processing of personal data.

Requests regarding the rights listed above may be submitted by the data subject in writing or through other methods determined by the Personal Data Protection Board (“Board”). Upon receipt, your request will be reviewed and finalized by us within the legal time frame.

If you wish to exercise your rights, you must submit a written request clearly indicating your identity/registration information and the specific right you are invoking, in accordance with Article 11 of Law No. 6698 on the Protection of Personal Data. This request should be sent via registered mail with return receipt to Schtec’s registered address: İkitelli OSB Mahallesi Heskoop J Blok Sk. Heskoop Sit. J Blok Apt. No: 44 Başakşehir / İstanbul

Once your request has been received, it will be processed and concluded within the time period prescribed by law. If the processing of your request incurs an additional cost, a fee may be charged in accordance with the tariff set by the Board. Our response will be delivered to you using the contact details you have provided.

Sharing of Personal Data with Third Parties and Linked Websites

Your personal data may be shared—limited to the purposes set out in this notice and to the extent necessary for data processing—with third-party service providers and business partners located within or outside the country, with whom we cooperate. Such sharing is carried out for the purposes of executing relevant business processes and improving service quality.

Additionally, your personal data may be disclosed to competent public authorities upon request, where required by applicable laws and regulations.

Our website may occasionally contain links to third-party websites in order to enhance user experience. We have no control over the content or privacy practices of these external sites, and we assume no responsibility for their data processing policies. For this reason, we recommend that you review the privacy policies of any third-party websites you may access through our site.