Personal Data Protection Notice (KVKK / Turkish PDPL)
We fulfil our disclosure obligation as data controller under Law No. 6698 on the Protection of Personal Data.
Data Controller
This notice has been prepared by Tika Makine ve Otomasyon San. Tic. A.Ş. ("Tika Makine", "the Company") as data controller, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK", the Turkish Personal Data Protection Law).
Company: Tika Makine ve Otomasyon San. Tic. A.Ş.
Address: Zafer Mah. Yavuz Selim Cad. No: 58/1 Merkezefendi / Denizli, Türkiye
Phone: 0258 261 22 80
Email: [email protected]
Categories of Personal Data Processed
- Identity data: First and last name
- Contact data: Phone number, email address, company name
- Customer transaction data: Content of the request/quote/message, product or service of interest
- Transaction security data: IP address, browser information, the page address visited
- Marketing data: Only when explicit consent (cookie consent) is given, usage data obtained through cookies
Purposes of Processing
- Evaluating contact and quote requests and responding to them
- Preparing quotes for our products and services and carrying out pre-contractual processes
- Carrying out customer relationship management processes
- Ensuring website security and preventing misuse
- Where explicit consent is given, analyzing website usage and carrying out advertising activities
Collection Method and Legal Basis
Your personal data is collected electronically through the contact/quote form on our website, based on the following legal grounds:
- KVKK Art. 5/2-c: Being directly related to the establishment or performance of a contract (quote and order processes)
- KVKK Art. 5/2-f: Data processing being necessary for our Company's legitimate interests (request management, security)
- KVKK Art. 5/2-ç: Compliance with a legal obligation
- KVKK Art. 5/1: Explicit consent (only for analytics and advertising cookies and marketing activities)
Recipients of Personal Data
Your personal data may be transferred to our hosting and email service providers, to authorized public institutions and organizations, to competent judicial authorities upon request under applicable law, and, where you have given explicit consent, to third-party service providers such as Google (Google Analytics, Google Ads, Google Maps) and Meta (Meta Pixel).
Cross-Border Transfer
Our website is hosted on servers located in Turkey. However, where the infrastructure of providers such as Google and Meta is used, and only where you have given explicit consent (cookie consent), limited personal data may be transferred abroad under KVKK Art. 9. No such transfer takes place if you do not give explicit consent.
Retention Period
Your personal data is retained for as long as required by the purpose of processing, subject to the statutory limitation periods set out in applicable legislation. For example, correspondence obtained through contact/quote requests is retained for a reasonable period of 2 years, applied in a manner consistent with mandatory retention periods under applicable legislation.
Your Rights Under KVKK Article 11
Under Article 11 of KVKK, you may apply to our Company to:
- Learn whether your personal data is being processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used in accordance with that purpose,
- Know the third parties to whom it is transferred domestically or abroad,
- Request correction if it has been processed incompletely or incorrectly,
- Request deletion or destruction within the conditions set out in KVKK Art. 7,
- Request that correction, deletion or destruction be notified to third parties to whom the data has been transferred,
- Object to a result that arises against you due to analysis exclusively through automated systems,
- Request compensation for damages arising from unlawful processing.
How to Apply
To exercise the rights listed above, you may submit your request in writing to Zafer Mah. Yavuz Selim Cad. No: 58/1 Merkezefendi / Denizli, Türkiye, or by email to [email protected], in accordance with the procedures set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. Your request will be concluded within 30 days at the latest, depending on its nature.
Last updated: 27 September 2026