Personal Data Protection Notice (KVKK)
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, regarding the processing of personal data of people who contact us through our website and other communication channels. This English version is a translation provided for information only; in case of any discrepancy, the Turkish version prevails.
Data controller
Your personal data is processed, in the capacity of data controller, by Karan Gözetim Ve Danışmanlık Hizmetleri Limited Şirketi (the Company) within the scope described in this notice.
The Company's address is Eşref Dinçer Mah. Dere Sk. Asilhan Atay İş Merkezi No:3 İç Kapı No:408 Gemlik/Bursa, Türkiye. The Company is registered with the Gemlik Tax Office under tax number 5181051888. You can reach the Company at [email protected] or by phone at +90 553 543 71 59. Our website address is https://www.karangozetim.com.
Categories of personal data processed
Through the contact and quote forms on our website, server access logs and our communication channels outside the website (phone, e-mail, WhatsApp), the following categories of personal data are processed:
- Identity data: first name and surname.
- Contact data: e-mail address, phone number (optional in the forms) and the name of the company you represent (optional in the forms).
- Customer transaction data: the service requested, vessel name, port, estimated date (optional in the forms), the content of your message and your correspondence with us.
- Transaction security data: the IP address, date and time of access, requested page address (URL) and browser information (user agent) logged by the server when you visit our website.
Purposes of processing
Your personal data is processed for the following purposes:
- Receiving, assessing and responding to your contact and quote requests.
- Preparing quotations and carrying out the process of concluding contracts for the inspection and consultancy services you request.
- Communicating with you by phone, e-mail or messaging applications.
- Performing services and keeping related records within an established business relationship.
- Ensuring the security of the website and information systems and preventing misuse and unauthorized access.
- Fulfilling obligations arising from legislation and responding to requests and audits of competent public authorities.
Legal grounds for processing
Your personal data is processed on the following legal grounds set out in Article 5(2) of the KVKK:
- Processing is necessary, provided that it is directly related to the conclusion or performance of a contract, for the personal data of the parties to the contract (Art. 5(2)(c)): assessing quote requests, preparing quotations, concluding contracts and performing services.
- Processing is mandatory for the data controller to fulfil its legal obligations (Art. 5(2)(ç)): keeping commercial and tax records in accordance with legislation and responding to requests of competent public authorities.
- Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5(2)(f)): responding to general enquiries, keeping records of correspondence and ensuring the security of the website.
The checkbox in the forms
The checkbox in the forms by which you confirm that you have read this notice is not a declaration of explicit consent; it only confirms that you have been informed of this notice. Your personal data is processed on the legal grounds listed above, not on the basis of explicit consent.
Method of collection
Your personal data is collected electronically and by partly automated means when you fill in the contact and quote forms on our website, when you contact us by e-mail, phone or WhatsApp, and through access logs kept by the server when you visit our website.
Information submitted through the forms is not stored in a database on the web server. It is sent as an e-mail via the SMTP server of the Company's e-mail service provider to [email protected] and kept in that mailbox. The IP-based rate limit applied to form submissions to prevent misuse is held only temporarily in server memory and is not stored permanently.
Transfer of personal data
Your personal data may be transferred to the following groups of recipients, under the conditions set out in Articles 8 and 9 of the KVKK and limited to the purposes above:
- Service providers: our e-mail service provider (Hosting Merkezi, operating in Türkiye), through which form submissions are delivered and in which e-mails are stored, and the server provider hosting the website; only to the extent necessary for providing these services.
- Competent public authorities: upon their request and within the powers granted to them by legislation.
Messaging applications and transfers abroad
If you choose to contact us via messaging applications such as WhatsApp, that communication takes place over the infrastructure of the relevant application provider, and that provider's own privacy terms also apply.
Should any of our service providers process personal data abroad, such transfer takes place in accordance with Article 9 of the KVKK as amended by Law No. 7499, namely where an adequacy decision exists, where one of the appropriate safeguards such as standard contracts is provided, or where one of the conditions for occasional transfer applies.
Retention period
Your personal data is retained for as long as necessary for the purpose for which it is processed. Correspondence relating to contact and quote requests that do not lead to a business relationship is retained for the period necessary for that purpose after the request has been concluded, and is then deleted, destroyed or anonymized.
If a business relationship is established, records that become commercial books or documents are retained for the statutory periods (10 years) under the Turkish Commercial Code No. 6102 and the Tax Procedure Law No. 213.
Server access logs are kept for a short period for security purposes and deleted at the end of that period.
Your rights as a data subject
Under Article 11 of the KVKK, you may apply to the Company to:
- learn whether your personal data is processed,
- request information if your personal data has been processed,
- learn the purpose of processing and whether your data is used in line with that purpose,
- know the third parties in Türkiye or abroad to whom your personal data is transferred,
- request rectification if your personal data is incomplete or inaccurately processed,
- request erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
- request that the rectification, erasure or destruction be notified to third parties to whom your personal data has been transferred,
- object to a result against you arising from the analysis of processed data exclusively by automated systems,
- claim compensation for damages if you suffer damage due to unlawful processing of your personal data.
How to apply
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests to the Company by one of the following methods:
- In writing, together with documents verifying your identity, delivered in person or sent by post to Eşref Dinçer Mah. Dere Sk. Asilhan Atay İş Merkezi No:3 İç Kapı No:408 Gemlik/Bursa, Türkiye,
- From your registered electronic mail (KEP) address, or signed with a secure electronic signature or mobile signature, to [email protected],
- From an e-mail address you have previously notified to us and that is registered in our system, to [email protected].
Content of the application and response time
Your application must include your name, surname and, if in writing, your signature; your Turkish identity number for Turkish citizens, or your nationality, passport number or identity number (if any) for foreign nationals; your residential or business address for notifications; your e-mail address, phone and fax number for notifications, if any; and the subject of your request.
Your application will be concluded free of charge as soon as possible according to the nature of the request and within thirty days at the latest. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
Right to complain to the Personal Data Protection Board
If your application is rejected, if you find the response insufficient, or if no response is given in time, you may file a complaint with the Personal Data Protection Board under Article 14 of the KVKK within thirty days from the date you learn of the response, and in any case within sixty days from the date of your application.
Company details
Karan Gözetim Ve Danışmanlık Hizmetleri Limited ŞirketiEşref Dinçer Mah. Dere Sk. Asilhan Atay İş Merkezi No:3 İç Kapı No:408, Gemlik / Bursa
Tax Office: Gemlik Vergi Dairesi · Tax No: 5181051888
E-mail: [email protected] · Phone: +90 553 543 71 59
Last updated: