This English text is provided for information; the Turkish original is the legally binding version.

Privacy Notice on the Protection and Processing of Personal Data

Data Controller: FLC MAKİNA SANAYİ VE DIŞ TİCARET ANONİM ŞİRKETİ

At FLC MAKİNA we attach great importance to processing and protecting the personal data of our customers, of you, the visitors to our website, and of our business partners in accordance with the applicable legislation — above all the Constitution of the Republic of Türkiye and Personal Data Protection Law No. 6698 (“KVKK”). This Privacy Notice has been prepared to inform you transparently about how your personal data is collected, the purposes for which it is processed, the legal grounds for processing and the rights available to you.

1. Identity of the Data Controller

Under Law No. 6698, the data controller you deal with is the legal entity FLC MAKİNA. Our company will process your personal data lawfully and in good faith, within the purposes and limits set out below.

2. Purposes of Processing Personal Data

The personal data collected from you (identity, contact, customer transaction and transaction security data, and similar) is processed by our company within the processing conditions set out in Articles 5 and 6 of the KVKK, for the purposes of carrying out the work our business units need to do in order to make our products and services available to you, and of running the related business processes.

Service and Sales Processes

Running the sale of goods and services, managing contractual processes, following up finance and accounting matters, and providing after-sales support.

Customer Relations and Communication

Planning customer relationship management processes, receiving and resolving requests, questions and complaints, and conducting corporate communication activities.

Marketing and Promotional Activities (Where Explicit Consent Is Given)

Recommending our products and services to you, tailored to your usage habits and requirements, and running campaign, promotion and newsletter processes.

Legal Obligations and Information Security

Providing information to authorised public institutions and bodies where the law requires it, conducting our activities in compliance with legislation, and maintaining the transaction security of the website.

3. To Whom and for What Purpose Processed Personal Data May Be Transferred

In order to achieve the purposes stated above, the personal data collected from you may be transferred within the data transfer conditions set out in Articles 8 and 9 of the KVKK.

Domestic Data Transfers

Data may be transferred to the business partners we work with in order to carry out our activities, to our suppliers (courier, logistics, call centre and similar), to banks and financial advisers for financial processes, to lawyers for legal processes, and to public institutions authorised by law.

International Data Transfers

Where the servers of the software used for our communication and infrastructure services (such as email servers, cloud storage and CRM systems) are located abroad, your data may be transferred outside Türkiye within the legal conditions the KVKK provides for, or on the basis of your explicit consent.

4. Method of Collecting Personal Data and the Legal Grounds

Your personal data is collected by wholly or partly automated means, and by non-automated means, through our website (contact forms, membership forms, cookies), email, telephone, physical documents, face-to-face meetings and our social media accounts.

Under Article 5 of the KVKK, your data is processed on the following legal grounds:

Expressly Provided for by Law, and Legal Obligation

Fulfilment of our legal obligations under legislation such as the Tax Procedure Law and the Turkish Commercial Code.

Conclusion or Performance of a Contract

Where it is necessary to process the personal data of the parties to a contract, provided that the processing is directly related to the conclusion or performance of that contract.

Legitimate Interest and the Establishment of a Right

Where processing is necessary for the legitimate interests of our company, provided that it does not harm the fundamental rights and freedoms of the data subject, and where processing is necessary for the establishment, exercise or protection of a right.

5. Rights of the Data Subject (KVKK Article 11)

Under Article 11 of the KVKK, you have the following rights as a data subject:

  • to learn whether your personal data is being processed,
  • to request information about it if it has been processed,
  • to learn the purpose of processing and whether the data is used in line with that purpose,
  • to know the third parties, in Türkiye or abroad, to whom your personal data has been transferred,
  • to request that your personal data be corrected if it has been processed incompletely or inaccurately,
  • to request that your personal data be erased or destroyed where the reasons for processing it cease to exist, even though it was processed in accordance with the KVKK and other applicable legislation,
  • to request that any correction, erasure or destruction be notified to the third parties to whom the data was transferred,
  • to object to a result being reached against you through the analysis of your processed data exclusively by automated systems,
  • to claim compensation for any loss suffered as a result of the unlawful processing of your personal data.

6. Exercising Your Rights, and Contact Details

You may submit your requests under Article 11 of the KVKK to us in writing, in accordance with the Communiqué on the Principles and Procedures for Applications to the Data Controller, or by using a registered electronic mail (KEP) address, a secure electronic signature, a mobile signature, or the email address you have previously notified to us and which is registered in our systems.

Address for Written Applications:

Orhanlı Mahallesi, Gülsüm Sokak No:6 G/1, No:15 Tuzla, Istanbul, Türkiye

Email Address:

info@gausscrane.com

Depending on the nature of your request, our company will conclude it free of charge as soon as possible and within thirty days at the latest. Where the process incurs an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.