Last updated:
Contents
This is a courtesy translation; in case of any discrepancy, the Turkish version prevails.
This notice has been prepared pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform you about your personal data processed when you use the geciskontrolavm.com website, contact us and shop with us. This notice is not a contract and is not subject to your consent.
1. Data controller
Your personal data is processed, in its capacity as data controller, by the company whose details are set out below:
- Trade name: 2S Zayıf Akım Sistemleri Sanayi ve Ticaret Limited Şirketi (“Geçiş Kontrol AVM”)
- Address: Altınoluk Mah. Reyhan Cad. Lalepark Konakları No: 45/32, 38050 Melikgazi / Kayseri
- MERSIS No.: 0001246616500001
- Phone: 0539 821 66 12
- E-mail: [email protected]
- KEP address: [email protected]
2. Personal data processed, purposes and legal grounds
The table below shows each processing purpose together with the data processed for that purpose and the legal ground under the KVKK.
| Purpose | Data processed | Legal ground (KVKK Art. 5) |
|---|---|---|
| Receiving your order, collecting payment, delivering the product and invoicing | First and last name or trade name; e-mail, phone, delivery and billing address; where required for the invoice, Turkish national ID number or tax office and tax number; order, cart, amount, discount applied, payment method and payment result. Card details are processed by the payment institution and are not visible to us. | Establishment and performance of the contract (Art. 5(2)(c)); legal obligation (Art. 5(2)(ç)) |
| Handling withdrawal, return, exchange, defective product and warranty requests | Identity and contact details; order, delivery, return and warranty records; product and damage photos; IBAN for refunds by bank transfer (wire transfer/EFT); correspondence | Performance of the contract (Art. 5(2)(c)); legal obligation (Art. 5(2)(ç)) |
| Opening and managing your member account; order tracking | First and last name, e-mail, phone, password (stored in irreversible form), saved addresses, order history, favorite and recently viewed products; e-mail and order number in the order tracking form | Establishment and performance of the contract (Art. 5(2)(c)) |
| Responding to your quote, contact, bulk purchase and dealership requests | First and last name, phone, e-mail, company name, your message and your materials list; for dealership applications, field of activity and region and, where necessary, tax certificate details | Being directly related to the establishment of a contract (Art. 5(2)(c)); legitimate interest (Art. 5(2)(f)) |
| Fulfilling the record-keeping, retention and disclosure obligations arising from tax, commercial and consumer legislation | Order, invoice, payment and correspondence records | Being expressly provided for by law (Art. 5(2)(a)); legal obligation (Art. 5(2)(ç)) |
| Establishing, exercising and protecting our rights in disputes | Relevant order, transaction and correspondence records | Establishment, exercise or protection of a right (Art. 5(2)(e)) |
| Ensuring the security and operation of the website | IP address, browser and device information, session logs, strictly necessary cookies and similar records | Legitimate interest (Art. 5(2)(f)) |
| Website measurement by our infrastructure provider ikas (operates regardless of your cookie preferences) | Visitor, session and browsing identifiers written to your browser; pages visited and the previous page; products and categories viewed; search terms; add-to-cart actions and cart contents; checkout steps and order; if you are logged in, your member ID and e-mail address | Legitimate interest (Art. 5(2)(f)) |
| Only if you give permission: measuring website usage with analytics cookies (Google Analytics 4) | Cookie ID, IP address, device and browser information, pages visited and on-site interactions | Explicit consent (Art. 5(1)) |
| Only if you give your approval: sending campaign, new product and announcement messages | First and last name, e-mail, phone; the scope and date of the approval and where it was given | Your approval given under Article 6 of Law No. 6563 on the Regulation of Electronic Commerce, and explicit consent (Art. 5(1)) |
We do not request special categories of personal data (such as health data, biometric data, religion or political opinions); please do not share such information in forms and messages. Biometric templates stored on devices we sell, such as fingerprint readers, are under the control of the person or organization using the device; we do not access or process this data. Businesses and management bodies that use these devices are the data controllers with respect to their own users.
3. Transfer of personal data
Your personal data is transferred to the following recipient groups, limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK:
| Recipient group | Purpose of transfer |
|---|---|
| Our e-commerce infrastructure provider ikas | Operation of the website and its cart, checkout and membership pages, data hosting, order e-mails and website measurement |
| Payment institution (PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.) and banks | Collection and refund of payments, transaction security |
| Shipping company (Yurtiçi Kargo) | Delivery of the product and return shipments (first and last name, address, phone) |
| E-invoice and e-archive service provider, financial advisor (accountant) | Issuing invoices and keeping accounting records |
| Google (Google Analytics 4, Google Tag Manager, Google Fonts) | Measurement of website usage, only if you give permission; loading of fonts from Google servers each time a page is opened (IP address and browser information) |
| Message Management System (İYS) | Recording of commercial electronic message consent and opt-out records as required by law |
| Legal advisors | Protection of rights in disputes |
| Authorized public institutions and organizations, judicial authorities | Provision of information in cases provided for by law and upon request |
Transfer abroad
Since Google’s servers are located abroad, the data sent to Google for fonts when pages load and, when you allow analytics cookies, for analytics is thereby transferred abroad. This transfer is made under Article 9 of the KVKK on the basis of your explicit consent (KVKK Art. 9(6)(a); analytics and marketing permission in the cookie banner) or a standard contract concluded with the provider (KVKK Art. 9(4)). Location of the servers on which our infrastructure provider ikas hosts data: the cloud infrastructure used by ikas (current location information is available in ikas’s privacy policy). If you choose to write to us via our WhatsApp line, your messages are transmitted through the WhatsApp (Meta) infrastructure.
4. Method of collecting personal data
- Through forms on the website (by automated means): membership form, checkout page, My account page, contact form, quote and dealership application form, order tracking form,
- While you use the website (by automated means): strictly necessary cookies and similar records, ikas’s website measurement and, only if you give permission, analytics cookies,
- Through e-mail, phone and WhatsApp correspondence,
- Through transaction results received from the payment institution and the shipping company (payment confirmation, delivery and return information),
- Through written applications, withdrawal forms and return packages you send us (by non-automated means).
Detailed information about cookies is available on the Cookie Policy page.
5. Retention periods
- Order-related information and documents: 3 years (Distance Contracts Regulation).
- Invoices and accounting records: 5 years under tax legislation; commercial books and documents: 10 years under the Turkish Commercial Code No. 6102.
- Commercial electronic message consent and opt-out records: 3 years after the consent ceases to be valid.
- Membership information: for as long as your membership continues; after membership ends, only for the statutory periods above.
- Google Analytics data: for the period set in the Google Analytics account settings (maximum 14 months).
- Quote and contact correspondence: until your request is concluded, and thereafter for the statutory limitation periods for possible disputes.
When the period expires, your data is deleted, destroyed or anonymized.
6. Your rights
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in line with that purpose; to know the third parties to whom it is transferred domestically or abroad; to request its rectification if it is incomplete or inaccurately processed; to request its erasure or destruction under the conditions set out in Article 7 of the KVKK, and to request that these operations be notified to the third parties to whom it has been transferred; to object to a result to your detriment arising from analysis performed exclusively by automated systems; and to claim compensation for damage if you suffer damage due to unlawful processing.
You can also update your membership information yourself on the My account page. You can withdraw your explicit consent and your consent to commercial messages at any time; details are on the Explicit Consent Notice page.
7. Application
You may submit your requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, in Turkish and by one of the following means:
- With a wet-signed petition, in person, by post or through a notary public, to Altınoluk Mah. Reyhan Cad. Lalepark Konakları No: 45/32, 38050 Melikgazi / Kayseri,
- Signed with a secure electronic signature or mobile signature, by KEP to [email protected],
- From your e-mail address registered in our system to [email protected].
Your application must include your first and last name and (for written applications) your signature, your Turkish national ID number (if you are not a Turkish citizen, your nationality and your passport or identity number), your address for service of notifications, your e-mail address and phone number, if any, and the subject of your request.
We will conclude your application free of charge as soon as possible, depending on its nature, and within 30 days at the latest; if the response is to be given in writing and exceeds ten pages, a processing fee of 1 TL may be charged for each additional page. If your application is rejected, you find the response insufficient or no response is given in time, you may file a complaint with the Personal Data Protection Board within 30 days from the date you learn of the response and, in any case, within 60 days from the date of your application.