Data controller
Ekcan Mimarlık Mühendislik İnşaat Otomotiv San. ve Tic. Ltd. Şti. (“Ekcan Mimarlık”) is committed to meeting its legal obligations with the greatest care in order to protect the confidentiality of the personal data shared with us so that we can serve our customers better, and to safeguard fundamental rights and freedoms, privacy foremost among them.
Prepared in our capacity as Data Controller under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), this notice explains the purposes for which personal data is processed, the parties to whom and the purposes for which it may be transferred, the method and legal grounds of collection, and the rights set out in Article 11 of the KVKK.
All current information shared with our company is treated as personal data and is stored in line with the requirements of the applicable legislation, as securely as possible, and for as long as our legal obligations require.
What personal data is processed, and how?
In the course of your use of our products and services, the following data may be processed through our sales offices, our website and other channels:
- 01Identity data such as first name, surname, Turkish ID number, date of birth and place of birth.
- 02Contact data such as address, telephone number and e-mail address.
- 03Other personal data shared in the course of requests, suggestions and complaints.
- 04Behavioural and digital trace data obtained through cookies during use of our websites.
- 05Voice call recordings kept in line with company standards.
- 06CCTV footage recorded if you visit our premises.
Why is personal data processed?
- 01To communicate with you and to perform our contractual obligations.
- 02To provide information about our products and services.
- 03To deliver campaigns and promotional activities, and to carry out statistical and planning analysis.
- 04To manage customer satisfaction, requests, suggestions and complaints.
- 05To resolve issues with our products and services and to improve them.
- 06To issue and retain documents required by law and to share them with the competent authorities.
- 07To take the technical and administrative measures required for system and application security.
- 08To share the information and documents needed with our business partners in order to deliver our services.
To whom may personal data be transferred?
Personal data may be transferred to the infrastructure and software providers we work with and to our business partners, to regulatory and supervisory public authorities, and to third parties from whom we receive professional advice, including lawyers, tax advisers and auditors — always in accordance with the law, the principles of good faith and proportionality, and with data security ensured.
Legal grounds for processing personal data
Personal data is processed in accordance with the principles set out in the KVKK, for the purposes described above, in order to provide our products and services and to properly fulfil the rights and obligations laid down by law.
Your rights as a data subject
Depending on their nature, requests are concluded within thirty days at the latest and, as a rule, free of charge. You may submit your request in writing with a wet signature, together with your identity and contact details, to “Ovacık Mah. D-100 Karayolu Cad. No:20 Başiskele / Kocaeli” in person, through a notary or by registered mail with return receipt, or by e-mail to info@ekcangrup.com.
- 01To learn whether your personal data is being processed and, if so, to request information about it.
- 02To learn the purpose of processing and whether the data is used in line with that purpose.
- 03To know the third parties in Turkey or abroad to whom the data has been transferred.
- 04To request the correction of data that is incomplete or inaccurate.
- 05To request the erasure or destruction of the data where the conditions for it are met.
- 06To object to an outcome against you that arises from analysis carried out solely by automated systems.
- 07To claim compensation for loss suffered as a result of unlawful processing.
Cases where consent is not required
Under Article 5(2) of the KVKK, personal data may be processed without explicit consent where processing is expressly provided for by law; is directly related to the conclusion or performance of a contract; is necessary to fulfil a legal obligation; concerns data made public by the data subject; is necessary for the establishment, exercise or protection of a right; or is necessary for legitimate interests, provided that it does not harm fundamental rights and freedoms.