Personal Data Protection and Privacy Policy
Identity of the Data Controller
Pursuant to the Personal Data Protection Law No. 6698 (KVKK), your personal data are processed by Vansan Makina San. ve Tic. A.Ş. (the Company), acting as the data controller, within the scope described below.
Categories of Personal Data Processed
- Identity Information (first name, last name)
- Contact Information (telephone number, email address, postal address)
- Customer Transaction Information (requests, quotations, and message content)
- Marketing Information (cookie records and campaign preferences, subject to explicit consent)
- Transaction Security Information (IP address and log records)
Purposes of Processing Personal Data
- Responding to requests, quotation inquiries, and contact forms
- Conducting pre-contractual discussions and quotation processes
- Managing customer relationships and providing support services
- Sending commercial electronic communications and carrying out marketing activities where explicit consent has been obtained
- Ensuring website security and conducting statistical analyses
- Fulfilling legal obligations
Legal Basis for Processing
Your personal data are processed within the framework of Articles 5 and 6 of the KVKK on the legal grounds that processing is directly related to the establishment or performance of a contract, is necessary for compliance with a legal obligation, is necessary for the legitimate interests of the data controller provided that it does not prejudice the fundamental rights and freedoms of the data subject, and, where required, is based on explicit consent.
Transfer of Personal Data
Your personal data may be transferred to authorized public institutions and organizations for the fulfillment of legal obligations, to service providers (such as hosting, email delivery, and analytics service providers), and, where necessary, to legal advisers, subject to the conditions stipulated under Articles 8 and 9 of the KVKK.
Retention Period
Your personal data are retained for the period required by the purposes of processing and for the applicable statutory limitation periods prescribed by relevant legislation. Upon expiration of these periods, the data are deleted, destroyed, or anonymized.
Rights of the Personal Data Subject
Pursuant to Article 11 of the KVKK, you have the right to apply to our Company to learn whether your personal data are being processed; request information if your personal data have been processed; learn the purposes of processing and whether your personal data are used in accordance with those purposes; know the third parties to whom your personal data have been transferred, domestically or abroad; request the correction of incomplete or inaccurate personal data; request the deletion or destruction of your personal data under the conditions prescribed by law; request that such corrective, deletion, or destruction operations be communicated to third parties to whom your personal data have been transferred; object to a result arising against you through the analysis of your processed personal data exclusively by automated systems; and request compensation for damages incurred as a result of the unlawful processing of your personal data.
Application Method
To exercise the rights specified above, you may submit your requests by email to [email protected] or in writing to our Company's address. Your application will be concluded free of charge as soon as possible, depending on its nature, and no later than thirty days.
Cookie Consent Records
For the purpose of demonstrating your cookie preferences, the following data are processed: consent record identifier (ConsentId), unique event identifier (EventId), your category preferences, consent date/time, language preference, policy version (PolicyVersion), integrity hash of the notice displayed to you at the time of consent (ConsentNoticeSha256), browser information (User-Agent), and your truncated IP address.
This processing is based on the legal grounds of legitimate interests and compliance with legal obligations under Articles 5 and 6 of the KVKK (this classification is a draft and is subject to approval by the legal team).
These records are retained for a maximum period of 180 days.