Personal Data Protection (KVKK) & GDPR Privacy Notice

Pursuant to Turkish Personal Data Protection Law No. 6698 ("KVKK") and related secondary legislation, together with the European Union General Data Protection Regulation No. 2016/679 ("GDPR"), corporate information regarding our company acting in the capacity of Data Controller is detailed below:

Personal data collected through interactive forms on our website (Contact Form, Dealership Pre-Application, RFQ / Quotation Requests, and Newsletter Subscription) encompass the following categories:

• Identity Data: Full name, company title/position.
• Contact Data: Corporate or personal e-mail address, telephone number (mobile/landline), company address, city, country.
• Commercial & Operational Data: Company name, business activity type (manufacturer, distributor, wholesaler, retailer), product groups of interest, tax office and tax ID (at the contractual stage).
• Transaction & Security Data: IP address logs, website access/session timestamps, activity records and time stamps (as mandated by Law No. 5651).
• Inquiry & Feedback Data: Comments, suggestions, specifications, and project scopes submitted via contact or dealership request forms.

Your collected personal data is processed strictly in compliance with the principles set out in Articles 4, 5, and 6 of the KVKK and Article 6 of the GDPR for the following legitimate purposes:

• Evaluating dealership and regional distributorship applications, verifying financial and corporate qualifications,
• Managing product orders, fulfillment, logistics, international export, and delivery operations,
• Preparing tailored filtration, lubricant, and spare parts quotations and delivering technical follow-ups,
• Managing customer and authorized dealer relations, resolving inquiries and service feedback,
• Fulfilling legal obligations under Turkish Commercial Code, Tax Procedure Law, and internet compliance regulations,
• Ensuring the legal, technical, and commercial security of our company, facilities, and partners,
• Delivering product updates, technical bulletins, and corporate announcements where explicit opt-in consent is provided.

Your personal data is transferred solely for the purposes enumerated above and in strict accordance with Articles 8 and 9 of the KVKK to the following authorized recipient categories:

• Logistics & Freight Partners: Exclusively for the dispatch of cargo orders, catalog kits, and product sample boxes,
• Legally Authorized Authorities: Judicial, administrative bodies, and regulatory tax authorities where compelled by law,
• IT & Infrastructure Service Providers: Cloud server hosting, e-mail relay, and ERP enterprise system operators under rigorous data processor agreements,
• Auditors & Legal Counsel: Financial auditors, certified public accountants, and legal advisors for statutory reporting and legal risk management.

Personal data is collected automatically or semi-automatically through our digital web forms, encrypted e-mail communication, corporate telephone exchanges, trade fairs (e.g. Automechanika), and direct commercial visits.

Our lawful bases include:

• KVKK Art. 5/2-c: Processing is directly necessary for the establishment or execution of a contract (dealership vetting, commercial orders),
• KVKK Art. 5/2-ç: Compliance with a legal obligation to which the data controller is subject,
• KVKK Art. 5/2-f: Legitimate interests pursued by the data controller, provided that it does not infringe fundamental rights and freedoms,
• KVKK Art. 5/1: Explicit Consent for marketing communications and international newsletter updates.

Personal data is retained only for the duration required to achieve the stated processing purposes and in accordance with statutory statutory limitation periods (typically 10 years under Turkish Commercial and Obligations Code).

Upon expiration of statutory retention periods or once the lawful grounds cease to exist, records are securely erased, destroyed, or irreversibly anonymized in alignment with our periodic data disposal schedule and KVKK guidelines.

Under the GDPR, individuals residing within the European Union enjoy the following comprehensive rights:

• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of personal data from our active storage where legally permissible (GDPR Art. 17),
• Right to Data Portability: Receive your provided data in a structured, commonly used, machine-readable format (GDPR Art. 20),
• Right to Restriction of Processing: Request suspension of processing under particular circumstances (GDPR Art. 18),
• Right to Object: Object at any time to data processing grounded on legitimate interests or direct marketing (GDPR Art. 21).

Under Article 11 of the KVKK, you are entitled to apply to İkiler Otomotiv to:

• Learn whether your personal data is being processed,
• Request details and explanation if your personal data has been processed,
• Learn the purpose of processing and verify whether data is being utilized appropriately,
• Know the domestic or international third parties to whom personal data is transferred,
• Request correction of inaccurate or incomplete personal data,
• Request erasure or destruction of personal data under statutory conditions,
• Request notification of corrections, erasures, or destructions to third-party recipients,
• Object to any unfavorable outcome produced solely through automated data processing systems,
• Claim compensation for damages incurred as a consequence of unlawful data processing.

In accordance with Article 13 of the KVKK and the Communiqué on the Principles and Procedures for the Request to Data Controller, you may submit your formal requests via any of the following channels:

• In Writing with Wet Signature: Delivered by hand or via notary to our address: Sümer Mh. 3. San. Sit. 25. Cd. No:63 Merkezefendi / DENİZLİ / TURKEY,
• Secure Registered E-Mail (KEP): Sent to our official KEP address: ikilerotomotiv@hs01.kep.tr,
• Registered Corporate E-Mail: Sent from your previously registered e-mail address to kvkk@ikilerotomotiv.com or info@ikilerotomotiv.com.

Your request will be evaluated and finalized free of charge within 30 (thirty) days at the latest, with a formal response communicated in writing or electronically.