Personal Data Protection Policy

1. Data Controller: The data controller under the Personal Data Protection Law No. 6698 (“KVKK”) and the European Union General Data Protection Regulation (“GDPR”) is DYK Grup – www.dykgrup.com

2. Personal Data Processed The following personal data provided by you or obtained via automated means are processed:

• Identity and contact information (name, surname, telephone, e-mail, etc.)
• Content of requests and messages
• Digital behavior data (IP address, cookie data, site usage information, etc.)

3. Purposes and Legal Grounds for Processing Personal Data Your personal data are processed for the following purposes and based on the following legal grounds:

• Provision of products and services, execution of quotation processes
• Management of customer relations and communication processes
• Analysis of website performance and improvement of user experience
• Fulfillment of legal obligations

This data is processed based on explicit consent, the establishment and performance of a contract, compliance with legal obligations, and legitimate interests.

4. Transfer of Personal Data Your personal data may be transferred—in line with the purposes stated above—to:

• Authorized public institutions and organizations
• Business partners providing services (hosting, analytics, advertising services, etc.)
• Third parties, within the scope of legal obligations

...in accordance with the provisions of the KVKK and GDPR.

5. Retention Period Your personal data are retained for the periods stipulated in applicable legislation or for the duration required by the purpose of processing. At the end of the period, the data is deleted, destroyed, or anonymized.

6. Rights of the Data Subject: Under Article 11 of the KVKK, data subjects have the right to:

• Learn whether their personal data is being processed
• Request information regarding such processing
• Learn the purpose of the processing and whether the data is being used in accordance with that purpose
• Request the correction of the data if it has been processed incompletely or incorrectly
• Requesting deletion or destruction
• Requesting compensation for damages in the event of unlawful processing

...have the right to...

7. Application Method: You may submit requests regarding your personal data and applications concerning your rights under the KVKK (Personal Data Protection Law) in writing, or via Registered Electronic Mail (KEP), e-mail, or the website.