Data Protection (KVKK)

This Website, Contact, Quotation and Newsletter Information Notice ("Notice") is provided under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") for personal data collected through banquetequipment.com.tr, website forms, newsletter subscription, email, telephone and related business communications.

Data controller / Veri sorumlusu: Otelsan Otel Ekipmanları ve Mimarlık Hizmetleri Anonim Şirketi (Otelsan)
Address: Üçevler Mahallesi, Coşkun Caddesi, İnci Plaza, Kat: 1, Ofis: 10, Nilüfer/Bursa, Türkiye
Telephone: +90 224 250 27 00
General email: export@otelsan.com.tr
KVKK applications: info@otelsan.com.tr
Tax: Çekirge Tax Office · Tax No. 6491061135

Special-category personal data is not requested through general Website forms. Please do not submit health, biometric, criminal-conviction, religious, political, union or similarly sensitive information unless Otelsan has specifically requested it for a lawful and necessary purpose.

Personal data is collected wholly or partly by automated means through Website forms, cookies and similar technologies, server and security logs, email systems, newsletter tools and Google services; and by non-automated means where information received by telephone, correspondence or business documents becomes part of a data-recording system.

Data may be obtained directly from the data subject, from the company or representative on whose behalf the person communicates, or from public/business sources where lawful and relevant to the request.

The processing condition is identified separately from the processing purpose. Depending on the activity, Otelsan relies on one or more conditions under Articles 5 and, only if relevant, 6 of the KVKK:

Where special-category data is exceptionally processed, Otelsan applies Article 6 and the additional measures required by law. Such data is not part of the ordinary Website workflow.

Personal data may be transferred, limited to what is necessary for the stated purpose, to the following recipient groups:

The Website is hosted in the United States. Google Analytics, Google Maps and certain email or technology infrastructure may also involve recipients or servers outside Türkiye. An export or international project enquiry may additionally require a transfer to a relevant overseas business partner.

International transfers are carried out under Article 9 of the KVKK as amended with effect from 1 June 2024. The mechanism is selected according to the recipient and circumstances and may include:

• an adequacy decision, where one applies;
• appropriate safeguards, including an approved standard contract or another legally recognised safeguard;
• a limited statutory exception for an occasional transfer where its conditions are met; or
• explicit consent only where it is the appropriate lawful mechanism and is obtained separately.

Otelsan documents the applicable basis and takes proportionate technical and contractual measures. A data subject may request information about the relevant safeguard, subject to confidentiality and security limitations.

Personal data is kept only for the period required by the relevant purpose and mandatory law. Otelsan considers the duration of the request or relationship, tax and commercial record duties, warranty and claims periods, limitation periods, consent/opt-out evidence, information-security needs and instructions from competent authorities.

At the end of the applicable period, data is deleted, destroyed or anonymised in accordance with the KVKK, applicable secondary legislation and Otelsan's internal retention/destruction procedures. Backup copies are removed or overwritten through the normal secure backup lifecycle unless a legal hold applies.

Otelsan applies measures appropriate to the nature and risk of processing. These may include access limitation, authorisation controls, logging, secure transmission, system updates, malware and abuse protection, backups, vendor assessment, confidentiality obligations, incident handling and periodic review.

Access to personal data is limited to people and providers with a role-based need. Where a service provider processes data for Otelsan, contractual and organisational controls are used as appropriate.

By applying to Otelsan, the data subject may:

1. learn whether personal data is processed;
2. request information if personal data has been processed;
3. learn the purpose of processing and whether the data is used in accordance with that purpose;
4. know the third parties in Türkiye or abroad to whom personal data is transferred;
5. request correction of incomplete or inaccurate data;
6. request deletion or destruction under the conditions of Article 7;
7. request that correction, deletion or destruction be notified to recipients to whom data was transferred;
8. object to a result arising against the person through analysis exclusively by automated systems; and
9. claim compensation for damage caused by unlawful processing.

An Article 11 request may be submitted using a method permitted by the KVKK and the Regulation on Procedures and Principles for Application to the Data Controller:

• Written application: deliver in person or send by post/courier to Otelsan Otel Ekipmanları ve Mimarlık Hizmetleri Anonim Şirketi, Üçevler Mahallesi, Coşkun Caddesi, İnci Plaza, Kat: 1, Ofis: 10, Nilüfer/Bursa, Türkiye. Mark the envelope "KVKK İlgili Kişi Başvurusu".
• Registered email method: send from an email address previously notified to Otelsan and registered in its systems to info@otelsan.com.tr, with the subject "KVKK İlgili Kişi Başvurusu".
• Other recognised methods: KEP, secure electronic signature, mobile signature or an application software/method recognised by the applicable regulation, where available.

The application should include: name and surname; signature if written; Turkish identity number for Turkish citizens or nationality and passport/foreign identity number for foreign applicants where applicable; notification address; email and telephone if available; a clear description of the request; and supporting information or documents.

Otelsan responds as soon as possible and no later than thirty days, depending on the nature of the request. Responses are generally free of charge; a fee may be requested only where the process creates an additional cost and the official tariff permits it.

If an application is rejected, the response is considered insufficient, or no response is given within the statutory period, the data subject may complain to the Personal Data Protection Board within thirty days of learning the response and, in all cases, within sixty days from the application date, subject to the conditions in the KVKK.

Except for cases where the law permits a direct complaint, the application route to the data controller should be used first.

This Notice informs data subjects and does not ask them to approve the processing. Where explicit consent is required, Otelsan presents the consent request separately, identifies the specific purpose and allows a freely given choice. Refusal of consent does not prevent unrelated services that do not require that consent.

Newsletter permission and non-essential cookie preferences should likewise be obtained through separate controls and remain withdrawable.

This Notice may be revised when the Website, forms, providers, transfer arrangements, processing purposes or law change. The current version and last-updated date appear at the top of the page. A materially different processing activity should be accompanied by an appropriate activity-specific notice at the point of collection.