Privacy Policy - My Blog

Privacy Notice on the Processing of Personal Data

Last Updated: [DD Month YYYY]

1. Introduction

This Privacy Notice explains how [FULL LEGAL COMPANY NAME], operating under the AROONCO brand, collects, uses, stores, protects and transfers personal data obtained through the [WEBSITE ADDRESS] website and related communication channels.

We process personal data in accordance with Turkish Personal Data Protection Law No. 6698 and other applicable data protection legislation.

2. Data Controller

The data controller responsible for the processing of your personal data is:

Company Name: [FULL LEGAL COMPANY NAME]
Trade Name: AROONCO
Registered Address: [FULL COMPANY ADDRESS]
Email Address: [PRIVACY OR CONTACT EMAIL]
Registered Electronic Mail Address — KEP: [KEP ADDRESS, IF AVAILABLE]
Telephone: [TELEPHONE NUMBER]

3. Personal Data We May Collect

Depending on how you interact with our website and services, we may process the following categories of personal data:

Name and surname
Company name and job title
Email address and telephone number
Country, city and address information
Information included in contact, quotation and product enquiry forms
Messages, requests, complaints and correspondence
Product interests and requested technical specifications
Internet Protocol address
Browser, device and operating-system information
Website access, activity and security logs
Cookie identifiers and preference information
Curriculum vitae and professional information, where a job application is submitted
Documents or attachments voluntarily provided by you

Please do not submit sensitive or special-category personal data through general contact forms unless specifically requested and legally permitted.

4. Methods of Collecting Personal Data

Your personal data may be collected:

Through website contact and quotation forms
Through email, telephone or other communication channels
Through job-application forms
Through cookies and similar technologies
Through server, security and access logs
During commercial negotiations and contractual processes
Through authorised representatives, business partners or publicly available sources, where legally permitted

Personal data may be collected through wholly or partially automated methods or through non-automated methods forming part of a data-recording system.

5. Purposes of Processing Personal Data

We may process your personal data for the following purposes:

Responding to enquiries, messages and quotation requests
Providing information about our products and services
Preparing commercial offers and conducting pre-contractual processes
Establishing and managing customer, supplier and business relationships
Processing orders and performing contractual obligations
Providing technical and after-sales support
Managing complaints, requests and customer satisfaction processes
Ensuring website, network and information-system security
Preventing fraud, misuse and unauthorised access
Complying with legal, regulatory, accounting and tax obligations
Establishing, exercising or protecting legal rights
Improving website performance and user experience
Conducting analytics activities where legally permitted
Sending commercial or marketing communications where consent is required and obtained
Evaluating job applications and conducting recruitment processes
Responding to requests from courts, regulators and authorised public authorities

Processing purposes must be specific, clear and legitimate, and the Privacy Notice must avoid vague or misleading descriptions.

6. Legal Bases for Processing

Your personal data may be processed on one or more of the following legal bases:

Your explicit consent, where required
The processing being expressly provided for by law
The processing being necessary for entering into or performing a contract
Compliance with a legal obligation applicable to the data controller
The processing being necessary for the establishment, exercise or protection of a right
The processing being necessary for our legitimate interests, provided that your fundamental rights and freedoms are not harmed
The personal data having been made public by you in accordance with your intention

These legal bases reflect the processing conditions set out in Article 5 of Turkish Personal Data Protection Law No. 6698.

7. Transfer of Personal Data

Where necessary and legally permitted, your personal data may be shared with:

Hosting, cloud-storage and information-technology service providers
Email, communication and cybersecurity service providers
Website maintenance and software suppliers
Analytics and cookie-service providers, subject to applicable consent requirements
Logistics, shipping and customs service providers
Banks, payment institutions and financial service providers
Accountants, auditors, lawyers and professional advisers
Suppliers, distributors and authorised business partners
Group companies and affiliates
Courts, regulators, law-enforcement authorities and other authorised public institutions

Personal data will only be transferred to the extent necessary for the relevant processing purpose and in accordance with applicable legislation.

8. International Transfers

Some service providers, technology systems or business partners may operate outside Türkiye.

Where personal data are transferred abroad, such transfers will be carried out in accordance with the applicable international-transfer provisions of Turkish data protection legislation and, where necessary, through recognised safeguards, standard contracts, adequacy mechanisms or other legally permitted transfer methods.

9. Retention of Personal Data

Personal data will be retained only:

For the period necessary to fulfil the relevant processing purpose
For the periods required by applicable commercial, tax, employment and other legislation
For the duration of any applicable limitation period
For the period necessary to establish, exercise or defend legal claims

When the reasons requiring processing no longer exist, personal data will be erased, destroyed or anonymised in accordance with applicable legislation and internal retention procedures.

10. Cookies

Our website may use cookies and similar technologies to:

Provide essential website functions
Maintain security
Remember user preferences
Measure website performance
Analyse website traffic
Support marketing activities where consent has been obtained

Non-essential analytics and advertising cookies will be used only where permitted under applicable legislation and, where required, after obtaining your consent.

Further information is available in our separate Cookie Notice.

11. Data Security

We implement reasonable technical and organisational measures designed to:

Prevent unlawful processing of personal data
Prevent unauthorised access
Protect personal data against loss, alteration and disclosure
Maintain the security of our systems and records
Restrict access to authorised personnel
Manage service-provider and processor access
Monitor and respond to potential security incidents

Turkish Personal Data Protection Law requires data controllers to take necessary technical and organisational measures to prevent unlawful processing and access and to ensure the protection of personal data.

12. Your Rights

Under Article 11 of Turkish Personal Data Protection Law No. 6698, you have the right to:

Learn whether your personal data are being processed
Request information where your personal data have been processed
Learn the purposes of processing and whether your data are used in accordance with those purposes
Learn the third parties to whom your personal data have been transferred in Türkiye or abroad
Request the correction of incomplete or inaccurate personal data
Request the erasure or destruction of personal data where the legal conditions are satisfied
Request notification of correction, erasure or destruction operations to third parties to whom your data have been transferred
Object to a result arising against you through the analysis of your data exclusively by automated systems
Claim compensation where you suffer damage due to unlawful processing

These rights are set out in Article 11 of Law No. 6698.

13. How to Exercise Your Rights

You may submit a data-subject request using one of the following methods:

By written application delivered to our registered address
Through our registered electronic mail address — KEP
Through secure electronic signature or mobile signature
Through an email address previously registered in our systems
Through another application method permitted by applicable legislation

Your application should include:

Your name and surname
Your signature, where submitted in writing
Your Turkish identity number or, for foreign nationals, nationality and passport or identification number
Your address for notification
Your email address and telephone number, where available
A clear explanation of your request
Supporting documents, where relevant

Applications under Law No. 6698 should be submitted in Turkish. Requests will be evaluated and answered as soon as possible and no later than 30 days, depending on the nature of the request.

14. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, content or security of third-party websites. We recommend reviewing the privacy notice of each third-party website before providing personal data.

15. Changes to This Privacy Notice

We may update this Privacy Notice to reflect changes in our business activities, website functions or applicable legislation.

The updated version will be published on this page with a revised “Last Updated” date.

16. Contact Us

For questions concerning this Privacy Notice or the processing of your personal data, please contact: