Personal Data Protection and Privacy Policy

General Information on the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as the PDPA) was adopted on 24 March 2016 and published in the Official Gazette No. 29677 dated 7 April 2016. Part of the PDPA entered into force on the date of publication, while the rest entered into force on 7 October 2016.

Information in the capacity of data controller

As ELKA KAPİTONE, whose detailed corporate information is published below, in accordance with KVKK No. 6698 and in the capacity of Data Controller, your personal data will be recorded, stored, updated, disclosed to/transferred to third parties in cases permitted by legislation, classified, and processed in the ways listed in the KVKK.

How your personal data may be processed

In accordance with the Personal Data Protection Law No. 6698, your personal data shared with ELKA KAPİTONE may be processed by us through any operation performed on the data, such as being obtained, recorded, stored, modified, reorganised, in whole or in part, automatically, or by non-automated means as part of any data recording system. Any processing carried out on data within the scope of the KVKK is considered ‘processing of personal data’.

The purposes and legal grounds for processing your personal data

The personal data you share,

  • To be able to provide our customers with services that meet the requirements of the contract and technology, and to improve the products and services we offer;
  • Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, published in the Official Gazette dated 26.08.2015 and numbered 29457, prepared based on these regulations, The Regulation on Distance Contracts published in the Official Gazette dated 27 November 2014 and numbered 29188, and other relevant legislation, to record the identity, address and other necessary information to identify the transaction owner;
  • To organise all records and documents that will serve as the basis for payment systems, electronic contracts or paper-based transactions, which are mandatory in the field of banking and electronic payments; to comply with the information storage, reporting and notification obligations required by legislation and other authorities;
  • To provide information to prosecutors, courts and relevant public officials upon request and as required by legislation in matters relating to public security and legal disputes;

It will be processed in accordance with the Personal Data Protection Law No. 6698 and related secondary regulations.

Information regarding third parties or organisations to whom your personal data may be transferred

For the purposes stated above, the individuals/organisations to whom your personal data shared with ELKA KAPİTONE may be transferred are: our main shareholders, our direct or indirect domestic/foreign affiliates; primarily Member companies using the ELKA KAPİTONE e-commerce infrastructure and, without limitation, persons and organisations related to the service provided, as well as programme partner organisations, domestic/foreign organisations and other third parties from whom we receive services and/or with whom we collaborate in order to carry out our activities and/or in our capacity as Data Processors.

How your personal data is collected

Your personal data is collected

  • ELKA KAPİTONE website and mobile application forms and/or ELKA KAPİTONE E -Commerce infrastructure, such as name, surname, Turkish ID number, address, telephone number, work or personal email address; preferences on pages accessed using a username and password, IP records of transactions performed, data collected by the browser such as cookies, browsing duration and details, and location data;
  • Our sales and marketing department employees, agents, dealers, paper forms, business cards, digital marketing and call centre channels, verbally, in writing or electronically;
    From individuals who share their personal data in a physical or virtual environment, face-to-face or remotely, verbally or in writing or electronically, for purposes such as establishing a commercial relationship with ELKA KAPİTONE, applying for a job, or submitting a bid, by means of business cards, CVs, bids, and other means;
  • Also, data obtained indirectly from different channels, such as websites, blogs, competitions, surveys, games, campaigns and similar purposes, data obtained from (micro) websites and social media, e-newsletter reading or clicking movements, data provided by public databases, and data from social sharing sites such as social media platforms (Facebook, Twitter, Google, Instagram, Snapchat, etc.) with publicly available profiles and data; may be processed and collected.

Your personal data obtained prior to the entry into force of the KVKK

Your personal data obtained prior to 7 April 2016, the effective date of the KVKK, through membership, electronic communication consent, product/service purchase, and other lawful means, is also processed and stored in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad

Your personal data, which has been processed in Turkey or collected using any of the methods listed above to be processed and stored outside Turkey, may be transferred to service providers located abroad (in countries accredited by the Personal Data Protection Board and where adequate protection of personal data is ensured), provided that it remains within the scope of the Personal Data Protection Law and is in accordance with the purposes of the contract.

Storage and protection of personal data

Your personal data will be stored confidentially in the databases and systems of ELKA KAPİTONE in accordance with Article 12 of the KVKK; it will not be shared with third parties in any way except for legal requirements and the regulations specified in this document.

ELKA KAPİTONE is obliged to take software measures such as hashing, encryption, transaction logging, and access management, as well as physical security measures to prevent the unlawful processing of personal data and to prevent unauthorised access to the systems and databases where your personal data is stored, in accordance with Article 12 of the KVKK. to take software measures such as hashing, encryption, transaction logging, and access management, as well as physical security measures to ensure their protection. If it is learned that personal data has been obtained by others through unlawful means, the situation will be reported immediately, in writing, and in accordance with legal regulations to the Personal Data Protection Board.

Keeping personal data up to date and accurate

Pursuant to Article 4 of the KVKK, ELKA KAPİTONE has an obligation to keep your personal data accurate and up to date. In this context, in order for ELKA KAPİTONE to fulfil its obligations arising from the applicable legislation, our Customers must share their accurate and up-to-date data or update it via the website/mobile application.

Rights of the data subject under the KVKK No. 6698

Article 11 of the Personal Data Protection Law No. 6698 entered into force on 7 October 2016. Pursuant to the relevant article, the rights of the Data Subject after this date are as follows:

  1. The Data Subject may apply to ELKA KAPİTONE (the data controller) to:
  2. Find out whether their personal data is being processed;
  3. Request information about their personal data if it has been processed;
  4. Find out the purpose of processing their personal data and whether it is being used for that purpose;
  5. To know the third parties to whom their personal data has been transferred within or outside the country,
  6. To request the correction of their personal data if it has been processed incompletely or incorrectly,
  7. To request the deletion or destruction of their personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
  8. To request that third parties to whom personal data has been transferred be notified of any rectification, erasure or destruction of personal data,
  9. To object to the analysis of processed data exclusively by automated systems resulting in a decision against the individual,
  10. To request compensation for any damage suffered as a result of the unlawful processing of personal data.

Registered with the Istanbul Chamber of Commerce under registration number 290143-0 and MERSIS number 0293-0050-4970-0010, ELKA KAPİTONE TEKSTİL İNŞAAT SANAYİ VE TİCARET LİMİTED ŞİRKET, located at Mehmet Nesih Özmen Mahallesi, Fatih Caddesi Sedir Sokak No:20, 34173 Güngören/İstanbul, is the Data Controller within the scope of the KVKK.

The Data Controller Representative appointed by ELKA KAPİTONE will be announced in the Data Controllers Registry and on the website address where this document is located once the legal infrastructure is in place.

Data Subjects may direct their questions, opinions or requests to any of the following communication channels:

Email: [email protected]

Telephone: +90 (212) 637 30 93

ELKA KAPİTONE may respond to requests in writing or digitally, provided that the response is justified and given within 30 days. The necessary procedures regarding requests shall be free of charge. However, if the procedures incur a cost, ELKA KAPİTONE reserves the right to charge a fee. These fees shall be determined by the Personal Data Protection Board in accordance with the tariff set out in Article 13 of the Personal Data Protection Law.