Data Protection Notice (KVKK)

Data controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is SMT Global Mühendislik İthalat İhracat Sanayi Ticaret A.Ş.

Address: Maslak Mah. Eski Büyükdere Cad. Giz 2000 Plaza No: 7 İç Kapı No: 34, Sarıyer / İstanbul

Email: info@smtlabs.com.tr · Phone: +90 212 909 18 56

Tax office / number: Maslak Tax Office / 7721757161. [MERSİS and VERBİS registration details to be added.]

Personal data processed

• Identity and contact: name, company/organisation, email, phone
• Request content: your message and any technical files you upload
• Transaction security: IP address, browser information, country code, cookie records

Purposes of processing

• Handling contact and quote requests
• Carrying out sales / production processes for goods and services
• Managing contract and invoicing processes
• Running information security processes and preventing abuse
• Providing information to authorised persons and institutions and conducting activities in line with legislation

Legal grounds

Your personal data is processed on the grounds that it is directly related to the conclusion or performance of a contract (Art. 5/2-c), that it is necessary for the data controller to fulfil a legal obligation (Art. 5/2-ç), and the legitimate interest of the data controller provided it does not harm your fundamental rights and freedoms (Art. 5/2-f). Where these grounds do not apply, processing relies on your explicit consent (Art. 5/1).

Transfer of personal data

Your data may be transferred to suppliers located in Türkiye and abroad for hosting, email delivery, order management, map and bot verification services, within the framework of KVKK Articles 8 and 9. Cross-border transfers are carried out in line with the conditions required by the KVKK (an adequacy decision or appropriate safeguards).

• Vercel Inc.: website hosting
• Resend: transactional email delivery
• Odoo: order and customer records
• Google (reCAPTCHA, Maps): security verification and map
• Authorised public institutions: on request and as required by law

Retention and destruction

Your personal data is kept for as long as the processing purpose requires and for the limitation periods set out in applicable law; at the end of these periods it is deleted, destroyed or anonymised. [Detailed periods will be set out in the personal data retention and destruction policy.]

Rights of the data subject (KVKK Art. 11)

• Learn whether your personal data is processed
• Request information if it has been processed
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom it is transferred, in Türkiye or abroad
• Request correction if it is incomplete or incorrect
• Request deletion or destruction under the conditions set out in the KVKK
• Request that correction, deletion and destruction be notified to third parties to whom the data was transferred
• Object to a result against you arising from analysis solely by automated systems
• Request compensation if you suffer damage due to unlawful processing

How to apply

You may submit requests regarding your rights, together with information verifying your identity, by email to info@smtlabs.com.tr or in writing to the address above. Applications are concluded within 30 days at the latest, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.