Under Turkish Law no. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by KOÇAK GARDEN BAHÇE MOBİLYALARI PLASTİK KAUÇUK METAL EŞYA ORM. ÜRN. İTHALAT İHRACAT SAN. TİC. LTD. ŞTİ. as data controller, within the scope described below. Koçak Sandalye is the brand our company uses for chairs and related seating products.
1. Identity of the data controller
- Company
- KOÇAK GARDEN BAHÇE MOBİLYALARI PLASTİK KAUÇUK METAL EŞYA ORM. ÜRN. İTHALAT İHRACAT SAN. TİC. LTD. ŞTİ.
- Brand
- Koçak Sandalye
- Address
- Önder Mahallesi Karpuzlu 2 Caddesi No: 89/3 Siteler / Altındağ / Ankara
- Phone
- +90 544 973 5773
- [email protected]
- Website
- kocaksandalye.com
2. Personal data we process
Depending on which contact channels you use, the following personal data may be processed:
- Identity data: your first name and surname.
- Contact data: your telephone number and, optionally, your e-mail address.
- Request and transaction data: the product or model you are interested in, its stock code, the quantity requested, the content of your message and other details of your quotation or contact request.
- Transaction security data: IP address, date and time of access, the page requested, browser and connection details recorded as standard technical logs.
No user account is created through the site and no online card payment is taken. Payment card details are therefore never requested on the site.
3. Purposes of processing
- Receiving and answering contact, information and quotation requests.
- Assessing the product, model, quantity, upholstery, colour and finish options you are interested in.
- Carrying out pre-order communication and the quotation process.
- Following up requests, suggestions and complaints.
- Maintaining the security of the website, the form infrastructure and our information systems.
- Preventing erroneous, malicious or automated submissions.
- Meeting legal obligations and, where necessary, establishing, exercising or protecting a right.
Personal data obtained through the site is not used for commercial electronic messages or behavioural advertising unless a separate legal ground applies or, where required, explicit consent has been obtained.
4. Legal grounds for processing
Depending on the specific processing activity, your personal data may be processed on the following grounds set out in Article 5 of the KVKK:
- Processing is directly related to the conclusion or performance of a contract.
- Processing is mandatory for the data controller to fulfil a legal obligation.
- Processing is mandatory for the establishment, exercise or protection of a right.
- Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
- Where the law requires explicit consent for the processing activity in question, the explicit consent of the data subject.
5. Method of collection
Your personal data may be collected through:
- the contact or quotation forms on the website,
- contacting us by telephone,
- choosing to use the WhatsApp link,
- the technical access logs generated while you browse the website
in electronic or physical form, by wholly or partly automated means, or by non-automated means forming part of a data filing system.
6. Transfer of personal data
Where a transfer is necessary and within the conditions laid down in the applicable legislation, your personal data may be shared with the following groups of recipients:
- Hosting, IT, e-mail and technical service providers engaged to operate the website and the communication infrastructure.
- The relevant communication service provider, if you choose to contact us via WhatsApp.
- Public authorities, administrative bodies and judicial authorities that are legally empowered to request such data.
- Authorised advisers or service providers, where this is necessary for the establishment, exercise or protection of a right.
Your personal data is never sold or rented to third parties.
7. Transfers abroad
Some third party services used on the website may, depending on the provider's infrastructure, result in personal data such as IP addresses and connection details being processed outside Türkiye or transferred abroad. Where a transfer abroad takes place, the conditions set out in Article 9 of Law no. 6698 and the applicable transfer mechanisms are taken into account.
The third party content concerned, and the point at which it loads on each page, is explained in detail in our Cookie Policy.
8. Retention periods
Personal data is retained for as long as is necessary for the purposes for which it is processed, taking into account the retention and limitation periods laid down in the applicable legislation. Once the purpose no longer applies and no other legal ground requires retention, the data is deleted, destroyed or anonymised in accordance with the law.
- Quotation and contact records: for as long as necessary in view of the business relationship and any potential legal dispute.
- Server access logs: for the period determined by security and regulatory requirements.
- The short lived IP record kept to prevent abuse of the forms: for a ten minute window and only in server memory. Records outside that window are not used and are cleared.
9. Data security
Technical and administrative measures appropriate to the nature of the risk are applied in order to prevent the unlawful processing of personal data and unlawful access to it, and to keep personal data secure.
As no method of transmission over the internet or of electronic storage can guarantee absolute security, these measures should not be read as an absolute guarantee of security.
10. Your rights as a data subject
Under Article 11 of the KVKK, by applying to the data controller you have the right to:
- learn whether your personal data is being processed;
- request information if your personal data has been processed;
- learn the purpose of processing and whether the data is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom your personal data has been transferred;
- request the correction of your personal data if it is incomplete or inaccurate;
- request the erasure or destruction of your personal data within the conditions set out in the law;
- request that any correction, erasure or destruction be notified to the third parties to whom the data was transferred;
- object to a result to your detriment arising from the analysis of your data exclusively by automated systems;
- claim compensation if you suffer damage because your personal data has been processed unlawfully.
11. How to apply
You may submit your requests under the KVKK to the data controller by one of the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.
You may send your application in writing to Önder Mahallesi Karpuzlu 2 Caddesi No: 89/3 Siteler / Altındağ / Ankara; using a secure electronic signature or mobile signature; or from an e-mail address you have previously notified to us and that is registered in our systems, to [email protected].
Your application should include the following:
- Your first name and surname.
- Your signature, for written applications.
- Your Turkish identity number, if you are a citizen of the Republic of Türkiye.
- Your nationality, passport number or identity number, if you are a foreign national.
- Your address of residence or place of business for notification purposes.
- Your e-mail address, telephone and fax number for notification, if any.
- The subject of your request.
Applications are concluded as soon as possible and within thirty days at the latest, depending on the nature of the request. If the process requires an additional cost, the fees in the tariff set by the Personal Data Protection Board may apply.