DEMİR GROUP CONSTRUCTION INDUSTRY AND TRADE JOINT STOCK COMPANY
WEBSITE INFORMATION NOTICE
Demir Group Construction Industry and Trade Joint Stock Company (“Company”) considers the protection of the privacy of visitors to https://www.demirholding.com.tr/ as one of its core principles. This Information Notice sets out the principles regarding the processing of your personal data by the Company acting as the data controller located at “Büyükdere Cad. No.74 D Torun Center Office Kule K:11 N:45 Şişli/Istanbul”, in accordance with the Personal Data Protection Law No. 6698 (“Law”) and relevant legislation.
1. Purpose of Processing Personal Data
Your personal data obtained through your visit to our website may be processed by the Company in accordance with Articles 5 and 6 of the Law for the following purposes:
-
In case of requests submitted via the contact section and/or social media accounts,
-
Carrying out necessary activities by our business units to enable individuals to benefit from services offered by the Company,
-
Managing relevant business processes, providing information, evaluating requests/suggestions, and enabling complaint submissions,
-
Planning and executing activities required to tailor and promote services offered by the Company according to users’ preferences, usage habits, and needs,
-
Conducting necessary activities and managing related business processes for executing the Company’s commercial activities, and planning and executing business strategies,
-
In case of requests submitted via the communication portal, providing information, evaluating suggestions, and handling complaints,
-
Planning and executing the Company’s commercial and/or business strategies,
-
Ensuring legal, technical, and commercial-occupational security of the Company and relevant individuals in business relationships with the Company.
2. Method and Legal Basis for Collecting Personal Data
Your personal data are collected through technical communication files such as cookies when you visit our website, fully or partially automated means, as part of a data recording system in electronic and written form for the purposes stated in this Information Notice. For detailed information about cookies, please review the Cookie Information Notice. Personal data collected outside cookies are obtained through forms filled out by you on the website via non-automated means.
Your personal data are processed based on the following legal grounds:
-
Explicitly provided by law under Article 5/2(a) of the Law,
-
Necessary for compliance with the legal obligations of the data controller under Article 5/2(ç) of the Law,
-
Necessary for the legitimate interests of the Company, provided that it does not harm your fundamental rights and freedoms under Article 5/2(f) of the Law,
-
Obligations to retain traffic information under Law No. 5651 on Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications.
3. Recipients of Personal Data and Purpose of Transfer
Your personal data may be transferred to our business partners (outsourcing service providers, hosting service providers), subsidiaries, and legally authorized public institutions and private entities within the scope of Articles 8 and 9 of the Law and for the purposes stated above.
4. Data Retention Period
Your personal data collected through website visits are stored for the duration required by the processing purposes and applicable legal retention periods.
Accordingly;
-
Website access logs (IP address, traffic data, log records): 2 years under Law No. 5651 and relevant regulations,
-
Cookies: for the duration of the relevant cookie type’s lifecycle,
-
Data collected via contact forms (name, surname, phone number, email, message content): 3 years after completion of the request,
-
Technical logs for security and system management: 2 years from the date of recording,
are retained for the specified periods.
Upon expiration of the retention period or when the reasons requiring processing cease to exist, your personal data are deleted, destroyed, or anonymized in accordance with Article 7 of Law No. 6698 and relevant legislation.
5. Your Rights and Application to the Data Controller
In accordance with Article 11 of the Law, you have the right to apply to the Company and: a) learn whether your personal data are processed, b) request information if processed, c) learn the purpose of processing and whether it is used accordingly, d) learn third parties to whom it is transferred domestically or abroad, e) request correction if incomplete or incorrect, f) request deletion or destruction under Article 7 of the Law, g) request notification of actions taken under (e) and (f) to third parties, h) object to results arising exclusively from automated processing, and i) claim compensation for damages arising from unlawful processing.
You may submit your requests by completing the Application Form and sending it to the Company’s address above via mail or via email to [kvkk@demirgrup.com] in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.
Our Company will respond to your requests as soon as possible and within thirty days at the latest, free of charge for the first request. However, a fee may be charged for subsequent requests or if additional costs are required. The Company may accept and process the request or reject it in writing with justification.
In case of rejection, insufficient response, or no response within the legal period, you may file a complaint with the Personal Data Protection Board (“Board”) within thirty days of notification and in any case within sixty days of application. However, complaint procedures cannot be initiated without exhausting the application process.
The Board may examine complaints or act ex officio regarding alleged violations. If no response is provided within sixty days, the request is deemed rejected. If a violation is identified, the Board orders corrective actions, which must be implemented within thirty days. In cases of irreparable harm or clear illegality, the Board may suspend data processing or cross-border data transfer.
We would like to emphasize that your data are securely protected by our Company and thank you for your trust.