KVKK Policy

Last Updated: 01 September 2025

1. Introduction
As BROTMAS MAKİNA GIDA SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“Company” or “we”), we attach great importance to the confidentiality of your personal data. In accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”), and in our capacity as the Data Controller, we have prepared this Privacy Policy to inform you about the processing, storage, and transfer of your personal data.
This policy explains how we process personal data collected when you visit our website [www.brotmas.com.tr], use our products and services, contact us, or interact with us through other means.

2. Data Controller
Your personal data is processed by us, in our capacity as the data controller, as detailed below:
Company Name: BROTMAS MAKİNA GIDA SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Address: BÜYÜKKAYACIKOSB MAH. REİSKÖY CAD. NO: 2 SELÇUKLU / KONYA
Phone: +90 332 502 12 10
Email: [email protected]
KVKK Application Address: [email protected]

3. Personal Data Collected and Methods of Processing
Within the scope of our business relationship, we may collect your personal data through the following means and within the following categories:

• Directly from You: when you fill out contact forms on our website, call us, send us an email, or place an order.
• Automatically: through cookies and similar technologies during your visit to our website.
• From Third Parties: through chambers of commerce, trade fairs, or our business partners (provided that you have given consent for commercial communications).

The types of data we process may include:

• Identity and Contact Information: name, surname, job title, phone number, email address, billing and delivery address.
• Customer Transaction Information: order history, invoice details, payment information, requested service and warranty records.
• Technical Data: IP address, browser type and version, operating system, visit time and duration, page view statistics.
• Commercial Information: quotations sent to you, contracts, and correspondence history.

4. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:

• Receiving, processing, delivering, and invoicing your orders.
• Providing after-sales support services, technical services, and warranty processes.
• Measuring customer satisfaction and managing complaints and suggestions.
• Fulfilling our legal and regulatory obligations (Tax Procedure Law, Consumer Protection Law, etc.).
• Improving our products and services in line with our legitimate commercial interests.
• Providing information to public institutions and organizations authorized by law.

5. Transfer of Personal Data
Your personal data may be transferred, limited to the purposes stated above and to the extent permitted by applicable legislation, to:

• Our Business Partners: contracted courier companies for product delivery, banks and financial institutions for payment processing, and our lawyers for legal consultancy services.
• Authorized Public Institutions: courts, supervisory authorities, and other official bodies, where legally required and in accordance with applicable procedures.

6. Data Security
We take appropriate technical and administrative measures (such as encryption, access controls, firewalls, regular security audits, and employee training) to protect your personal data against risks of unauthorized access, loss, disclosure, alteration, or destruction.

7. Cookies
Our website may use cookies to improve user experience, analyze website traffic, and provide services tailored to your needs. You may refuse cookies or configure your browser to notify you when cookies are used. However, this may cause some functions of our website to operate improperly.

8. Retention Period of Personal Data
Your personal data will be retained for the period necessary for the purposes for which it is processed and in accordance with the statutory limitation periods stipulated in applicable legislation (such as the Turkish Commercial Code and the Tax Procedure Law), generally between 5 and 10 years. Upon expiration of these periods, your personal data will be deleted, destroyed, or anonymized.

9. Your Rights (Article 11 of KVKK)
Pursuant to Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed.
• Request information if your personal data has been processed.
• Learn the purpose of processing and whether it is used in accordance with that purpose.
• Know the third parties to whom your personal data is transferred, domestically or abroad.
• Request correction of incomplete or inaccurate personal data.
• Request deletion or destruction of your personal data under the conditions set forth in the KVKK (“Right to Be Forgotten”).
• Request notification of correction or deletion to third parties to whom the data has been transferred.
• Object to the occurrence of a result against you arising from analysis by automated systems.
• Request compensation for damages in case your personal data is processed unlawfully.

10. Contact and Exercise of Rights
To exercise the rights listed above, you may submit your application, together with documents verifying your identity, prepared in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller,” by one of the following methods:

• By sending a written petition bearing a wet signature to our company address in person or via a notary public.
• Via your Registered Electronic Mail (KEP) address, e-Devlet password, or Mobile/Electronic Signature to our KEP address: [email protected].
• By using a Secure Electronic Signature/Mobile Signature and sending it to the email address [[email protected]].

Our company will finalize your request free of charge within a maximum period of 30 (thirty) days. However, if the process requires an additional cost, the fee determined by the Personal Data Protection Authority may be charged.

11. Policy Amendments
We may update this Privacy Policy to comply with newly enacted legislation or changes in our business processes. Any amendments will become effective as of the date the updated policy is published on our website.