Website and Business Communications Privacy Notice

• Data controller SOYLU SİSTEM İÇ VE DIŞ TİCARET LİMİTED ŞİRKETİ
• Registered office CEVİZLİ MAH. ULUBEY SK. NURSALLAR A BLOK NO: 4 A İÇ KAPI NO: 113 KARTAL / İSTANBUL TÜRKİYE
• General contact info@soylusistem.com

• Personal data processed IP address, the date and time of the request, the page or resource requested, browser, device and system information, and technical and security log information.
• Method of collection Technical data may be obtained by automated means through hosting and technical infrastructure systems when the website is visited.
• Purposes of processing Technically delivering the website, maintaining its availability, ensuring its security, resolving technical problems and preventing misuse.
• Legal basis Processing necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Law No. 6698, Article 5(2)(f)).

• Personal data processed Name and surname, business email address, company, job title, telephone number where included by the sender, the content of the email, and any attachments voluntarily sent in the course of business correspondence.
• Method of collection Personal data may be provided directly by the data subject or a person communicating on their behalf through email and attachments, and may be processed electronically through the corporate email system.
• Purposes of processing Responding to business enquiries, conducting supplier and manufacturer discussions, requesting and evaluating quotations, establishing or managing commercial relationships and maintaining business correspondence.
• Legal basis Depending on the nature of the communication, processing directly related to the establishment or performance of a contract (Law No. 6698, Article 5(2)(c)) and/or processing necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Article 5(2)(f)).

• Hosting and technical infrastructure service providers Technical data obtained in connection with website visits may be disclosed for hosting, technically delivering and securing the website.
• Corporate email and communications service providers Personal data relating to business correspondence by email may be disclosed for conducting corporate communications and providing the relevant service.
• Legally authorised public authorities Relevant personal data may be disclosed where and to the extent necessary to comply with a legal obligation.

Where service providers or infrastructure used for hosting, technical infrastructure or corporate email and communications are located outside Türkiye, or where personal data is processed outside Türkiye, an international transfer of personal data may occur. International transfers of personal data are subject to Article 9 of Law No. 6698 and applicable secondary legislation.

Under Article 11 of Law No. 6698, the data subject may apply to the data controller and request the following:

• To learn whether their personal data is processed.
• To request information if their personal data has been processed.
• To learn the purpose of processing and whether the data is used in accordance with that purpose.
• To know the third parties in Türkiye or abroad to whom their personal data has been transferred.
• To request correction where their personal data has been processed incompletely or inaccurately.
• To request deletion or destruction of their personal data under the conditions set out in Article 7 of the Law.
• To request that correction, deletion and destruction be notified to the third parties to whom the data has been transferred.
• To object to a result arising against them through analysis of the processed data exclusively by automated systems.
• To claim compensation for damage suffered as a result of unlawful processing of their personal data.

Requests concerning the rights under Article 11 may be submitted to the data controller in accordance with Article 13 of Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller. Written applications may be sent to the registered office stated above. Electronic applications must use one of the methods permitted by the applicable legislation.