Kaya Grup Laser Cutting Machines (Kaya Grup Lazer Kesim Makineleri) Clarification Text on Personal Data Processing Activities
We are strictly committed and sensitive to ensuring the protection and privacy of your Personal Data. This Clarification Text contains information regarding what Personal Data we collect, the purposes for which we use it, and how we process it.
We declare that we will ensure the confidentiality of your Personal Data and carry out our policies and practices regarding the collection, use, storage, disclosure, transfer, security, and access of your Personal Data within the framework of the boundaries drawn by the Law No. 6698 on the Protection of Personal Data (KVKK) and relevant legislation.
Definition of Personal Data
Personal data is any information relating to an identified or identifiable natural person.
Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership in associations, foundations or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data, are considered special categories of personal data.
Definition of Data Controller and Method of Data Collection
Kaya Grup Lazer Kesim Makineleri, in its capacity as the Data Controller, processes personal data transferred to it partially or fully by automated methods when data subjects fill in specified fields while shopping, through cookies on the site, or when data subjects fill in specified fields to become a member of the site.
Collected Personal Data
For individuals shopping via the site: Name, surname, TR Identity Number, address, contact information. For individuals registering as members: Name, surname, address, date of birth, gender, contact information, shopping history, customer transaction information (purchased product, delivery method, transaction date, preferred payment type), comments made by members on product pages, evaluations regarding products, and answers provided to survey and evaluation questions.
Purposes and Legal Grounds for Processing Personal Data
Kaya Grup Lazer Kesim Makineleri processes personal data for the following purposes and based on the legal grounds specified in Articles 5 and 6 of Law No. 6698.
In this framework, Kaya Grup Lazer Kesim Makineleri processes member personal data and shares it with relevant recipient groups to conduct commercial activities, fulfill orders of persons shopping on the website, perform the sales contract, ensure rights and obligations arising from the sales contract, provide services offered to members, provide suggestions on the site according to special habits when members log in, and design member-specific pages.
Furthermore, personal data is processed to increase the utility of the website, ensure the security of services provided through the site, and traffic information is stored to fulfill obligations under Law No. 5651.
These data processing activities are based on the legal grounds that processing personal data belonging to the parties of a contract is necessary (provided it is directly related to the establishment or performance of a contract), data processing is mandatory for the establishment, exercise, or protection of a right, and the storage of traffic information is expressly provided for in the laws.
If the data subject provides separate explicit consent for electronic commercial communication, Kaya Grup Lazer Kesim Makineleri transmits campaign information for marketing purposes to the preferred contact address through a third-party solution partner.
Personal data of website visitors is used to determine marketing strategies and develop suggestions planned according to member habits. Further explanations regarding this can be found in the Cookie Policy. Visitors can delete cookies at any time using the methods specified in the Cookie Policy.
Personal Data Recipient Groups
Kaya Grup Lazer Kesim Makineleri may transfer personal data to:
Relevant departments providing services to maintain company activities and business processes.
Domestic and/or international service providers processing personal data on behalf of the Company (logistics firms, call centers, database and infrastructure providers, SMS and e-mail service providers) within the framework of Articles 8 and 9 of Law No. 6698.
Administrative and judicial authorities (courts, etc.) upon their lawful and formal requests.
Third-party solution partners for the purpose of establishing communication with data subjects who have consented to commercial communication.
Third-party solution partners to send satisfaction surveys via e-mail to determine service improvements and customer satisfaction.
Marketing via Electronic Communication
Explicit consent of the data subject is obtained to analyze shopping habits and personal data to determine personalized discounts or point campaigns, identify products suitable for the customer's taste, match this information with name, surname, and contact details, and transmit this content to the person's contact address via a third-party solution partner.
Rights of Data Subjects
Data subjects have the right to:
Learn whether personal data is processed,
Request information if personal data has been processed,
Learn the purpose of the processing and whether it is used for its intended purpose,
Know the third parties to whom personal data is transferred domestically or abroad,
Request correction if personal data is processed incompletely or inaccurately,
Request the deletion or destruction of personal data under the conditions provided for in Article 7 of Law No. 6698,
Request notification of the operations carried out pursuant to points (5) and (6) to third parties to whom personal data has been transferred,
Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
Claim compensation for damages in case of loss due to unlawful processing of personal data.
Application Methods to the Data Controller
To exercise these rights, requests must include: name, surname, signature (for written applications), subject of the request, address for notification, TR Identity Number, e-mail address, and phone number. Requests can be sent:
In Writing: To the address 5733 Sok. No:37 MTK Sitesi Çamdibi / Bornova / İZMİR.
Via Registered E-mail (KEP): From the data subject’s KEP address to the Company’s KEP address.
Via E-mail: Using the e-mail address previously notified to and registered in the system of Kaya Grup Lazer Kesim Makineleri.
Applications will be answered within 30 days from the date they reach the Company.
Legal Grounds for Data Processing
Your personal data is processed based on the following legal grounds specified in Article 5 of the KVKK:
It is expressly provided for in the laws.
It is mandatory for the data controller to fulfill its legal obligation.
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
This Clarification Text is effective as of its publication date. Kaya Grup Lazer Kesim Makineleri may make changes to this text whenever necessary. Changes become effective immediately upon publication on the website.