Personal Data Protection Notice (KVKK)

1. Data Controller

Under Law No. 6698 on the Protection of Personal Data (the "KVKK"), your personal data may be processed by Denfor Endüstriyel Isıtma Soğutma San. ve Tic. Ltd. Şti. ("DENFOR ENDÜSTRİYEL" or the "Company") acting as data controller, within the scope described below.

2. Categories of Personal Data Processed

If you use the quote/contact form on our website or otherwise get in touch with us, the following data may be processed depending on the nature of the interaction:

• Identity: First and last name.
• Contact: Email address and phone number.
• Customer / prospective customer and transaction data: Company name, requested product group, project/quote request, and technical information you provide.
• Transaction security / technical records: IP address, access time, browser/device information and similar log records, where automatically generated by the server for the website's security and technical operation.

3. Purposes of Processing Personal Data

• Receiving, evaluating and concluding quote and contact requests,
• Communicating about the requested product or service,
• Determining technical requirements and carrying out product/solution selection and pricing work,
• Managing customer and prospective-customer relationships, and sales and after-sales processes,
• Responding to requests, questions and complaints,
• Ensuring the security and technical continuity of the website,
• Fulfilling legal obligations and establishing, exercising or defending a legal claim.

4. Legal Grounds

Depending on the specific processing activity, your personal data may be processed on the legal grounds set out in Article 5 of the KVKK: being directly related to the establishment or performance of a contract; being necessary for the data controller to fulfill a legal obligation; being necessary for the establishment, exercise or protection of a right; and being necessary for the data controller's legitimate interests, provided this does not harm the data subject's fundamental rights and freedoms.

Where a separate activity requiring explicit consent arises, separate and freely given explicit consent is obtained from the data subject for that activity. The obligation to provide notice and the explicit-consent process are carried out independently of one another.

5. Collection Methods

Your personal data may be obtained, wholly or partly through automated means, in electronic form via the quote/contact form on denforendustriyel.com, email, phone and other electronic communication channels you use. Server access records may be generated automatically as part of the website's security and technical operation.

6. Transfer of Personal Data

Your personal data may be transferred, only to the extent necessary for the relevant purpose and where the transfer conditions set out in the KVKK are met, to IT, hosting, email and technical infrastructure service providers, legal/financial advisors, authorized public institutions and organizations, and legally authorized private parties.

Where a transfer abroad arises because the technical infrastructure or service provider used is located outside Turkey, that transfer is carried out within the framework of the cross-border transfer conditions set out in Article 9 of the KVKK and the secondary legislation in force.

7. Retention and Destruction

Your personal data is retained for the period required by the purposes of processing, taking into account the limitation and retention periods set out in applicable legislation. Once the reason for processing no longer applies and there is no other legal obligation requiring retention, the data is deleted, destroyed or anonymized in accordance with applicable legislation.

8. Security of Personal Data

DENFOR ENDÜSTRİYEL applies administrative and technical measures appropriate to the nature of the data processed and the risks involved, in order to prevent the unlawful processing of and access to personal data and to ensure its safekeeping. Access to personal data is limited to what business processes require.

9. Your Rights Under Article 11 of the KVKK

As a data subject, by applying to the data controller you have the right to:

• Learn whether your personal data is being processed and, if so, request information about it,
• Learn the purpose of processing and whether the data is used in accordance with that purpose,
• Know the third parties to whom the data is transferred, domestically or abroad,
• Request correction if the data has been processed incompletely or incorrectly,
• Request deletion or destruction of the data within the conditions set out in the Law,
• Request that correction, deletion or destruction be notified to third parties to whom the data has been transferred,
• Object to a result that is to your detriment arising solely from analysis by automated systems,
• Claim compensation if you suffer damage due to unlawful processing.

10. Applying to the Data Controller

You may submit your requests under the KVKK, clearly stating your identity and your request, in writing to Denfor Endüstriyel Isıtma Soğutma San. ve Tic. Ltd. Şti., İçerenköy Mah. Değirmenyolu Cad., Kutay İş Merkezi B Blok No: 18 K:4, Ataşehir / Istanbul, Turkey, or through the other methods set out in the Communiqué on the Procedures and Principles for Applications to the Data Controller.

Electronic applications must meet the conditions set out in applicable legislation (for example, using an email address previously registered with and on file at the data controller, or methods such as a secure electronic signature, mobile signature, or Registered Electronic Mail (KEP)). info@denforendustriyel.com is our general contact address.

Applications are concluded as soon as possible depending on the nature of the request, and as a rule within 30 days at the latest.