Privacy Policy and KVKK Disclosure Statement

1. Data Controller

Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed within the scope described below by Mechart Mühendislik Mekanik İnşaat Ticaret Limited Şirketi ("Mechart" or the "Company") in its capacity as data controller.

• Company name: Mechart Mühendislik Mekanik İnşaat Ticaret Limited Şirketi
• Address: Cevizli Mah. Karabük Cad. Akıncıoğlu İş Merkezi No:24 İç Kapı No:20 Kartal/İstanbul, Türkiye
• Phone: +90 216 766 52 68
• E-mail: [email protected]
• MERSİS No: 0622246008700001

2. Personal Data Processed

Through its services and website (mechart.com.tr), Mechart may process the following categories of personal data:

• Identity data: name, surname, company/title information.
• Contact data: phone, e-mail, address.
• Customer transaction data: quotation/order records, request and complaint records, correspondence regarding the service.
• Transaction security data: IP address, cookie records, site usage and log records.
• Financial data: invoice information and transaction records regarding payment. (Credit card/debit card details are not seen or stored by the Company; payment is carried out through the secure infrastructure of authorised payment institutions.)

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Providing the services and products offered, and concluding and performing contracts,
• Conducting quotation, order and payment processes,
• Issuing invoices and fulfilling financial/legal obligations,
• Managing customer requests, questions and complaints,
• Ensuring the security and functionality of the website,
• Fulfilling legal obligations and responsibilities arising from relevant legislation.

4. Legal Grounds for Processing

Your personal data is processed on the legal grounds set out in Article 5 of the KVKK, namely: being directly related to the conclusion or performance of a contract, enabling the data controller to fulfil its legal obligation, the establishment/exercise/protection of a right, and the legitimate interest of the data controller provided that it does not harm the fundamental rights and freedoms of the data subject; and, where necessary, on the basis of your explicit consent.

5. Transfer of Personal Data

Your personal data may be transferred, limited to the achievement of the above purposes and in accordance with Articles 8 and 9 of the KVKK, to:

• Authorised payment and electronic money institutions (e.g. iyzico, PayTR) and relevant banks for the purpose of carrying out payment transactions,
• Authorised public institutions and organisations for the purpose of fulfilling legal obligations,
• Authorised suppliers and business partners from whom support is received for the performance of the service (financial advisor, legal advisor, IT infrastructure providers, etc.).

Data transferred to payment institutions is processed solely for the purpose of securely completing the payment transaction and within the framework of the privacy policies of the relevant institutions.

6. Cookie Policy

The Mechart website may use cookies to improve the user experience and ensure the security and functionality of the site. Cookies can be classified as strictly necessary cookies, performance/analytics cookies and functionality cookies. You can manage or delete cookies through your browser settings; however, disabling some cookies may affect certain functions of the site.

7. Retention Period of Personal Data

Your personal data is retained for the period required by the purpose for which it is processed and for the statutes of limitation and retention periods provided by the relevant legislation (e.g. legal retention obligations for commercial and financial records). When the periods expire, your data is deleted, destroyed or anonymised.

8. Rights of the Data Subject (KVKK Art. 11)

Pursuant to Article 11 of the KVKK, as a data subject you have the right to:

• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used in accordance with its purpose,
• Know the third parties to whom it is transferred domestically or abroad,
• Request correction if it has been processed incompletely/incorrectly,
• Request its deletion/destruction within the conditions provided by the KVKK,
• Request that correction/deletion operations be notified to third parties to whom data has been transferred,
• Object to a result against you arising from the analysis of data exclusively by automated systems,
• Request compensation for damage in the event you suffer damage due to unlawful processing.

9. Application Method

You may submit your requests regarding the above rights, together with information verifying your identity, by sending an e-mail to [email protected] or in writing to the company address indicated above. Your request will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest depending on its nature; however, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.