Personal Data Protection Notice (KVKK)

Your personal data is processed by Birfen Elektrik Elektronik, as data controller, within the scope described below.

• Company: Birfen Elektrik Elektronik
• Address: Taşköprü Sanayi Sitesi 3. Yol No: 8, Taşköprü / Yalova, Türkiye
• E-mail: [email protected]
• Phone: +90 226 353 22 71
• Website: https://birfenrobotics.com.tr

When you fill in the contact and demo request form on our website, we process the following personal data:

• Identity data: your first and last name;
• Contact data: your e-mail address and, if you provide it, your phone number;
• Professional data: the name of your company, if you provide it;
• Request data: the content of your message, the date and time the form was sent and the site language you used;
• Transaction security data: technical records such as IP address, browser information and access time, kept automatically by our server and infrastructure providers when you visit the site.

Your personal data is processed for the following purposes, in a manner that is relevant, limited and proportionate to them:

• receiving, assessing and answering your contact and demo requests;
• providing information, scheduling demos and preparing quotations for the products and services you ask about;
• contacting you as part of sales and business development activities related to your request;
• keeping records of requests and correspondence and managing customer relations;
• keeping the website and our information systems secure and preventing misuse;
• complying with our legal obligations and responding to requests from competent authorities.

Your personal data is collected electronically, directly from you, through the contact and demo request form on our website; transaction security data is collected automatically by our server and infrastructure systems while you visit the site.

This data is processed on the following legal grounds under Article 5(2) of the KVKK:

• processing is necessary for the conclusion or performance of a contract, provided that it is directly related to it (Art. 5(2)(c)): assessing and answering demo and quotation requests;
• processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5(2)(f)): answering general enquiries, keeping request records and securing the website;
• processing is necessary for the data controller to comply with a legal obligation (Art. 5(2)(ç)): statutory retention and disclosure obligations;
• processing is necessary for the establishment, exercise or protection of a right (Art. 5(2)(e)): protecting our rights in a possible dispute.

Your personal data is not sold and is not shared with third parties for advertising. It may be transferred to the following recipient groups to the extent necessary for the purposes above:

• E-mail service provider: the Resend (Resend, Inc.) platform, used to notify our authorised staff when a form is submitted and to reply to your request by e-mail;
• Hosting and content delivery network (CDN) providers: hosting the website, the database that stores form submissions and technical logs, and delivering the site securely;
• Competent public authorities and judicial bodies: only where required by law and to the extent requested.

Some servers of our e-mail, hosting and content delivery providers may be located outside Türkiye (for example in the United States and the European Union). Transfers of personal data abroad are carried out in line with Article 9 of the KVKK and the Regulation on the Procedures and Principles for the Transfer of Personal Data Abroad, by putting appropriate safeguards in place (for example the standard contract published by the Personal Data Protection Board).

Personal data you send through the form is kept for 2 (two) years after your request has been closed. If your request leads to a contractual relationship, the data is kept for the retention periods required by the applicable legislation (for example the Turkish Commercial Code No. 6102 and tax legislation). Transaction security logs are kept for no longer than 1 (one) year.

Personal data whose retention period has expired, or whose purpose of processing no longer applies, is erased, destroyed or anonymised in accordance with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.

Under Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:

• to learn whether your personal data is processed;
• to request information about the processing if your personal data has been processed;
• to learn the purpose of the processing and whether your data is used in line with that purpose;
• to know the third parties in Türkiye or abroad to whom your personal data is transferred;
• to request rectification if your personal data has been processed incompletely or inaccurately;
• to request erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK;
• to request that rectification, erasure or destruction be notified to the third parties to whom your personal data has been transferred;
• to object to a result against you that arises from the analysis of your data exclusively by automated systems;
• to claim compensation for damages arising from the unlawful processing of your personal data.

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request, stating your first and last name, Turkish ID number (or nationality and passport number for foreign nationals), address for notifications, e-mail address and phone number if any, and the subject of your request, through one of the following channels:

• in writing with a wet signature, in person or through a notary public: Taşköprü Sanayi Sitesi 3. Yol No: 8, Taşköprü / Yalova, Türkiye
• by e-mail signed with a secure electronic signature or mobile signature, or sent from the e-mail address you have previously provided to us and that is registered in our systems: [email protected]

Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. If the action requires an additional cost, the fee set by the Personal Data Protection Board may be charged. If your application is rejected, you find the answer insufficient or it is not answered in time, you may file a complaint with the Personal Data Protection Board under Article 14 of the KVKK.