Please ensure that your request, suggestion, and/or complaint submitted to our Company does not contain any of the special categories of personal data listed below: •          race, •          ethnic origin, •          political opinions, •          philosophical beliefs, •          religion, sect, or other beliefs, •          appearance and dress, •          membership in associations, foundations, or trade unions, •          health or sexual life data, •          data concerning criminal convictions and security measures, •          biometric and genetic data.

 

 

RENKLER MAKİNA VE YEDEK PARÇA SANAYİ VE TİCARET A.Ş.

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA WITHIN THE SCOPE OF

REQUEST / COMPLAINT / SUGGESTION PROCESSES

 

1. Data Controller

 

Your personal data is processed by Renkler Makina ve Yedek Parça Sanayi ve Ticaret A.Ş. (“Company”), registered with the Izmir Trade Registry under registration number 103199 and headquartered at KOSB Mah. 27 Sokak No: 2 35730 Kemalpaşa / İzmir, TÜRKİYE, in the capacity of data controller, within the framework of the provisions of the Personal Data Protection Law No. 6698 (“KVKK”) and this Privacy Notice on the Processing of Personal Data Within the Scope of Request / Complaint / Suggestion Processes (“Privacy Notice”).

 

Our Company respects your rights regarding the protection of your privacy and personal data, and strives to establish and maintain a relationship based on trust with you. Within this scope, our Company processes your personal data in accordance with all legislative provisions regarding the protection of personal data, particularly the KVKK, ensures that your data is stored securely, and takes all necessary security measures against potential unlawful access. This Privacy Notice explains the scope within which your personal data, collected as part of the request, suggestion, and/or complaint applications you have submitted to our Company, is processed. Detailed information regarding the processing of your personal data by our Company can be accessed through the Renkler Makina ve Yedek Parça Sanayi ve Ticaret A.Ş. Personal Data Protection and Processing Policy, available at https://www.renklermakina.com/tr/privacy/kisisel-verilerin-korunmasi-ve-islenmesi-politikasi.

 

1. Methods of Collecting Your Personal Data

 

Your personal data is collected by our Company through physical and/or electronic environments via the call center, contact forms on our company's website(s), email, telephone, and other methods (channels) that may be added to these in the future.

 

1. Categories of Processed Personal Data, Purposes, and Legal Grounds for Processing Your Personal Data

 

The categories of your personal data processed within the scope of processes for collecting, evaluating, and resolving requests, suggestions, and/or complaints, ensuring the satisfaction of the request, complaint, and suggestion owners, and improving their experiences, as well as the purposes and legal grounds for processing the said personal data, are explained in detail below.

 

 

Personal Data Category	Purposes of Processing Personal Data and Legal Grounds for Processing
Contact Data	Your data in this category is processed based on the personal data processing conditions (legal grounds) pursuant to Article 5, Paragraph 2, subparagraph (e) of the KVKK, where data processing is necessary for the establishment, exercise, or protection of a right, and subparagraph (f), where data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and for the following purposes:   Execution of Customer Relationship Management Processes Tracking of Requests/Complaints Execution of Supply Chain Management Processes
Identity Data	Your data in this category is processed based on the personal data processing conditions (legal grounds) pursuant to Article 5, Paragraph 2, subparagraph (e) of the KVKK, where data processing is necessary for the establishment, exercise, or protection of a right, and subparagraph (f), where data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and for the following purposes:   Execution of Customer Relationship Management Processes Tracking of Requests/Complaints Execution of Supply Chain Management Processes
Request and Complaint Data	Your data in this category is processed based on the personal data processing conditions (legal grounds) pursuant to Article 5, Paragraph 2, subparagraph (e) of the KVKK, where data processing is necessary for the establishment, exercise, or protection of a right, and subparagraph (f), where data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and for the following purposes:   Execution of Customer Relationship Management Processes Tracking of Requests/Complaints Execution of Supply Chain Management Processes

 

1. Transfer of Your Personal Data to Third Parties Resident Inland and/or Abroad

 

Within our Company, your personal data can only be accessed by our employees who have limited access authorization solely for the purposes detailed above, to the extent necessary to perform their duties, and is not transferred to third parties resident inland unless the conditions for transfer regulated under Articles 8 and/or 9 of the KVKK are met. However, your personal data processed under each personal data category specified above may be transferred to the following recipient groups in accordance with Articles 8 and/or 9 of the KVKK, and provided that the personal data processing conditions (legal grounds) stated above for the relevant data category also exist in terms of transfer purposes:

 

• To our suppliers resident inland and abroad, including our group companies acting as suppliers, primarily for the purpose of procuring products and/or services, and for the purposes determined in the relevant category for each data category above (e.g., legal advisors, companies from which customer service support is received, agencies from which service support is received regarding request/complaint management),
• To our business partners, primarily for the purposes of ensuring business continuity within the scope of our Company's activities and establishing potential collaborations, and for the purposes determined in the relevant category for each data category above,
• To authorized public institutions and organizations for the purposes of fulfilling our Company's legal obligations and following up on legal affairs.

 

 

1. Retention Period of Your Personal Data

 

Your personal data obtained during our Company's activities is stored and destroyed in accordance with the general principles and regulations specified in our Company's storage and destruction policies and procedures, which are prepared in compliance with the provisions of the Constitution, the KVKK, the Regulation on the Deletion, Destruction, or Anonymization of Personal Data, and other relevant legislation.

 

In this context, your personal data will be destroyed if all of the personal data processing conditions stated above cease to exist. Accordingly, your personal data will continue to be processed during the legal prescription periods following the finalization of your request/complaint. Regarding your requests for the destruction of your personal data, we kindly ask you to review Section 6 of this Privacy Notice.

 

1. Your Rights Under the KVKK

 

As a personal data owner, we inform you that you have the following rights pursuant to Article 11 of the KVKK:

 

• To learn whether your personal data is processed or not,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether they are used appropriately for their purpose,
• To know the third parties to whom your personal data is transferred inland or abroad,
• To request rectification of your personal data if it is processed incompletely or inaccurately, and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred,
• To request the deletion or destruction of your personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the KVKK and other relevant law provisions, and to request notification of the transactions made within this scope and in case your personal data is processed incompletely or inaccurately, to the third parties to whom your personal data has been transferred,
• To object to the occurrence of a result against yourself by analyzing your processed data exclusively through automated systems,
• To request compensation for damages in case you suffer damage due to the unlawful processing of your personal data.

 

You can submit your applications regarding your rights listed above to our Company in accordance with the provisions of the Communiqué on the Procedures and Principles of Application to the Data Controller (in writing or electronically via registered electronic mail (KEP) address, secure electronic signature, mobile signature, or via your email address previously notified to our Company and registered in our systems, together with information/documents* confirming your identity (T.C. identity number or passport number for citizens of other countries, residential address/business address for notification, mobile phone/telephone/fax number, email address, etc.) to enable our Company to determine that you are the rightful owner) by filling out the Data Subject Application Form, which you can access at https://www.renklermakina.com/tr/privacy/ilgili-kisi-basvuru-formu. Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest; however, if the transaction requires an additional cost, a fee may be requested from you according to the tariff to be determined by the Personal Data Protection Board.

 

* We would like to remind you that no special categories of personal data (e.g., religion or blood type information) should be included within the scope of the said documents.