KVKK

WEBSITE PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

a) Data Controller

As GÜR METAL HASSAS DÖKÜM SANAYİ VE TİCARET ANONİM ŞİRKETİ (“Gür Metal” or the “Company”), we process the personal data of data subjects who visit our website https://gurmetal.com.tr/, in our capacity as data controller, by taking adequate technical and administrative security measures in accordance with the Turkish Personal Data Protection Law No. 6698 (“PDPL”) and the relevant secondary legislation.

b) Method of Collection of Personal Data, Purpose of Processing and Legal Basis

Your personal data will be collected through electronic media by automatically when you visit our website, based on the legal grounds set forth in Article 5/2 of the PDPL, for the purposes specified under paragraph (b) of this Privacy Notice.

The table below sets out the purposes and legal bases for the processing of your personal data:

Category of Personal Data	Purpose of Processing	Legal Basis
IT Security Data (traffic data and IP address)	Conducting activities in compliance with legislation Providing information to authorized persons, institutions, and organizations Carrying out storage and archiving activities	Article 5/2 (a) of the PDPL: Explicitly stipulated by law (pursuant to Law No. 5651)
IT Security Data (mandatory cookies and log records)	Providing our services through the website Ensuring the functional operation of the website	Article 5/2 (f) of the PDPL: Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
Contact Data (telephone number, e-mail address)	Carrying out communication activities Receiving and evaluating suggestions for the improvement of business processes Monitoring requests and complaints
Customer Transaction Data (contact subject, opinions, suggestions, complaints, and requests)	Receiving and evaluating suggestions for the improvement of business processes Monitoring requests and complaints Managing customer relations processes Conducting activities aimed at customer satisfaction
Identity Data (name and surname)	Receiving and evaluating suggestions for the improvement of business processes Monitoring requests and complaints Managing customer relations processes Conducting activities aimed at customer satisfaction

c) To Whom and for What Purpose the Processed Personal Data May Be Transferred

Your personal data may be transferred, without seeking your explicit consent, in accordance with Article 8/2(a) of the PDPL, for the purposes set out below:

To relevant public institutions and organizations, as well as private institutions and organizations, in order to fulfill our legal obligations arising from the applicable legislation, where required or upon request;
To our lawyers, to the extent necessary, within the scope of their duty of confidentiality, for the purpose of monitoring and conducting legal and financial processes;
To our supplier from whom we receive support for the purpose of carrying out website-related processes.

d) Your Rights under Article 11 of the PDPL

As a data subject, we hereby inform you that you have the following rights pursuant to Article 11 of the PDPL:

To learn whether your personal data is processed;
To request information if your personal data has been processed;
To learn the purpose of the processing of your personal data and whether such data is used in accordance with its purpose;
To know the third parties to whom your personal data is transferred, whether domestically or abroad;
To request the correction of your personal data if it is processed incompletely or inaccurately;
To request the deletion or destruction of your personal data within the framework of the conditions set out in the relevant legislation;
To request that the correction, deletion, or destruction of your personal data be notified to third parties to whom your personal data has been transferred;
To object to the occurrence of a result against you arising from the analysis of your personal data exclusively through automated systems;
To request compensation for damages in the event that you suffer damage due to the unlawful processing of your personal data.

You may submit your requests regarding your rights under Article 11 of the PDPL in accordance with Article 11 and Article 13/1 of the PDPL and the Communiqué on the Procedures and Principles of Application to the Data Controller, through one of the methods set out below:

By applying in person to our Company at “Orhanlı Mahallesi Dostane Sokak No:21 34956 Tuzla/İstanbul”;
By sending your request via our registered electronic mail (KEP) address at gurmetaldokum@hs01.kep.tr;
By submitting your request in writing, in order to verify your identity and to prevent disclosure of information to unauthorized persons, through a notary public or by registered mail with return receipt;
By sending an e-mail to insankaynaklari@gurmetal.com.tr, using a secure electronic signature, mobile signature, or (if available) the e-mail address previously notified by you to our Company and registered in our systems;
Or through other methods that may be determined by the Personal Data Protection Board in the future.

In addition to the rights set out under Article 11 of the PDPL, if you have given your explicit consent for the processing of your personal data, you have the right to withdraw such consent at any time.

e) Amendments and Updates

This Privacy Notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 and the relevant legislation.The Company reserves the right to make necessary amendments to this Privacy Notice in line with any changes in the applicable legislation and/or in the Company’s purposes and policies regarding the processing of personal data.