Privacy Policy

As “SUR YAPI ENDÜSTRİ SANAYİ VE TİCARET ANONİM ŞİRKETİ” (SUR YAPI), we place great importance on the security and lawful processing of your personal data. Accordingly, in compliance with Article 10 of the Personal Data Protection Law No. 6698 ("KVKK"), we fulfill our obligation to inform you as the data controller.

Your personal data is processed in accordance with the Law No. 6698 on the Protection of Personal Data, within the purposes and legal grounds stated below, while respecting the spirit and general principles of the law.

Within this scope;

The personal data you provide through our website via WhatsApp application and other platforms/channels, as specified in the table below, may be processed for the purposes of managing loyalty processes relating to the company/product/services, conducting marketing analysis activities, managing customer relationship processes, carrying out advertising, campaign, promotion, marketing, and promotional activities, collecting your feedback and satisfaction options regarding the project, and sharing your satisfaction opinions with third parties, provided that your explicit consent is obtained in accordance with Article 5/1 of the Personal Data Protection Law (KVKK).

Your personal data is processed in accordance with the principle of purpose limitation- limited, proportionate, specific, clear, and legitimate purposes, in compliance with laws and principles of fairness. Additionally, our Company takes necessary measures to ensure the personal data we process is accurate and up-to-date. Within this framework, your personal data may be processed for the following purposes.

Our company may require your explicit consent to process your personal data for certain activities. Our company may process your name, surname, phone number, and email address for the purposes of informing our customers and potential customers about general/special offers relating to services, keeping them updated on current developments, sending celebratory messages, sharing content such as presentations and newsletters, and sending commercial electronic communications and other messages in compliance with relevant laws for promotion and advertising. This processing also covers your contact information, identity details, and marketing data for managing sales of goods/services, advertising, promotion, campaign, and promotional activities.

Your personal data you provide to us via WhatsApp, for the purposes stated above and with your explicit consent, may be transferred and stored abroad due to the location of the system servers, under the responsibility of “SUR YAPI ENDÜSTRİ SANAYİ VE TİCARET ANONİM ŞİRKETİ (SUR YAPI), which acts as the Data Controller pursuant to the Law on the Protection of Personal Data No. 6698 ("Law").

Additionally, your personal data listed above may be transferred to persons, institutions, organizations, judicial authorities, and law enforcement agencies authorized by law to request such information, upon their lawful request.

Your personal data may be collected by our company based on your explicit consent stated in Article 5/1 of the Personal Data Protection Law (KVK Law) and the following legal grounds outlined in Article 5/2 of the KVK Law if it is:

a) explicitly stipulated by the law;
b) mandatory for the protection of the life or physical integrity of the person who is unable to disclose their consent due to actual impossibility or whose consent is not legally valid;
c) necessary for the processing of personal data belonging to the parties of a contract, provided it is directly related to the establishment or performance of the contract;
ç) mandatory for the data controller to fulfill their legal obligation;
d) made public by the individual concerned;
e) necessary for the establishment, exercise, or protection of a right; and
f) mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the individual concerned

through physical and electronic means, including email, phone, SMS, and other devices, to ensure the practical and effective execution of the purposes mentioned above.

Your personal data may be stored for the durations required by the purposes of processing. In accordance with Article 5/2(ç) of the Personal Data Protection Law, which pertains to the company’s legal obligations, our Company may retain your personal data for up to 3 months from the date of withdrawal of consent, provided that there is no reason requiring a longer retention period after you reject receiving commercial electronic communications or withdraw your consent to commercial electronic communication.

In the absence of any other justification or legal basis, prescribed legal retention periods, international laws or regulations, or obligations arising from contacts, your personal data, whose processing purposes have expired, will be deleted, destroyed, or anonymized.

Sur Yapı reserves the right to amend the content of this privacy notice regarding the processing of personal data belonging to the relevant individuals. The amended privacy notice shall be announced in accordance with the relevant policies and procedures of Sur Yapı. This privacy notice shall be interpreted within the scope of the Personal Data Protection and Processing Policy of Sur Yapı.

Your personal data may be collected and processed through verbal or electronic means, including automated methods such as recording via cameras, photographs, or audio recordings, as well as through non-automated methods, such as directly providing verbal or written information by you.

In accordance with Article 11 of the Personal Data Protection Law (KVKK), you have the right to apply to our company to:

• learn whether your personal data is being processed;
• request information if your personal data has been processed;
• learn the purpose of processing your personal data and whether it is used in accordance with that purpose;
• learn the third parties to whom your personal data is transferred, domestically or abroad;
• request correction of your personal data if it is incomplete or inaccurately processed, and request that this correction be notified to third parties to whom your personal data was transferred;
• request deletion or destruction of your personal data in accordance with the conditions set forth in Article 7 of the KVKK, and request that this deletion be notified to third parties to whom your personal data was transferred;
• object to any outcome that arises against you as a result of analysis of processed data exclusively through automated systems; and
• demand compensation in case you suffer damages due to unlawful processing of your personal data.

You can submit your requests relating to your rights stated above in accordance with the Communiqué on the Procedures and Principles of Application to Data Controllers via email at [email protected], or you may deliver your written requests in person to Burhaniye Mah. Abdullahağa Cad. No: 21 Altunizade - Üsküdar/Istanbul along with documents verifying your identity. Alternatively, you can send your requests via a notary public or other methods stipulated by the Personal Data Protection Law (KVKK). Your applications will be processed by our company as soon as possible and no later than thirty days depending on the nature of your request. If fulfilling your requests incurs an additional cost, a fee determined by the Personal Data Protection Authority’s tariff may be requested from you.