1. Data Controller

Your personal data is processed by GERMAN KUPFERMAX AUTOMOTIVE AND SECURITY SYSTEMS IMPORT EXPORT JOINT STOCK COMPANY (“Company”) in its capacity as data controller in accordance with the provisions of the Law on the Protection of Personal Data No. 6698 (“KVKK”) and within the framework of this Membership and/or Marketing Process Information Text (“Information Text”). This Information Text explains the scope in which your personal data collected within the framework of the membership and marketing activities conducted by our Company is processed.

Company Information:

Trade Name: GERMAN KUPFERMAX AUTOMOTIVE AND SECURITY SYSTEMS IMPORT EXPORT JOINT STOCK COMPANY
Tax Identification Number: 3941438203
Mersis No: 0394143820300001
Trade Registry No: 1149592
Address: Mimar Sinan Mah. Üsküdar Cad. Yedpa No: 1 B İç Kapı No: 10, Ataşehir / İstanbul, Türkiye
Phone: +90 850 304 8871
Email: [email protected]

2. Methods of Collecting Your Personal Data

Your personal data is processed by our Company through fully or partially automated means or non-automated means as part of any data recording system; from physical and/or electronic environments. www.germankupfermax.com Your personal data is collected through integrated systems within the Company, including the website, mobile applications owned by the Company (if any), electronic application portals, physical stores, dealers, printed forms, call center/customer service, handheld terminals, phone, fax, mail/cargo, email, SMS, request/complaint platforms, social media platforms, online meeting/communication platforms, and integrated systems with authorized public institutions and private organizations, as well as other methods (channels) that may be added in the future.

3. Purposes and Legal Reasons for the Collection and Processing of Your Personal Data Categories

The purposes and legal reasons for the collection and processing of your personal data categories related to your membership relationship with our Company and the marketing activities conducted by our Company are as follows:

Personal Data Categories

Identity Data (e.g., full name, date of birth, Turkish ID number)
Contact Data (e.g., phone number, email address, delivery address)
Legal Transaction Data (e.g., membership/approval information, explicit consent statements)
Transaction Security Data (e.g., IP address, log records)
Customer Transaction Data (e.g., order information, call center records, request/complaint information)
Marketing Data (e.g., interest area information, campaign preferences, customer segment)
Professional Experience Data (e.g., information about the institution worked at, corporate email address in case of corporate membership)

Purposes of Data Processing

Establishing, executing, and canceling membership processes
Providing order, payment, delivery, and after-sales support services
Receiving, evaluating, and concluding requests, complaints, and suggestions
Conducting activities aimed at increasing customer satisfaction and experience
Conducting marketing, campaign, offer, promotion, and information activities
Planning and executing social media and digital marketing processes
Planning and executing organization, events, and promotions
Ensuring information security and system security
Protection of our company's rights and interests
Fulfillment of legal obligations and conducting archival activities

Legal Reasons for Data Processing

KVKK Art. 5/2(a): Clearly provided for in the laws
KVKK Art. 5/2(c): It is directly related to the establishment or performance of a contract
KVKK Art. 5/2(ç): It is mandatory for the data controller to fulfill its legal obligation
KVKK Art. 5/2(e): Processing of data is mandatory for the establishment, use, or protection of a right
KVKK Art. 5/2(f): It is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
KVKK Art. 5/1: The explicit consent of the data subject is available

4. Sharing / Transferring Your Personal Data

Your personal data collected and processed within the scope of the personal data categories mentioned above may be shared and/or transferred with the following recipient groups based on the conditions for personal data processing as per Articles 8 and 9 of the KVKK:

Recipient Group	Purposes of Transfer	Personal Data Category	Legal Basis for Transfer
Suppliers based in and/or outside the country (e.g., infrastructure, verification, integration, message sending, marketing analysis, information technology, data hosting service providers)	Provision of products and/or services within the scope of conducting, auditing, and ensuring the continuity of business activities	Identity, Communication, Professional Experience, Request/Complaint/Suggestion, Customer Transaction, Legal Transaction, Transaction Security, Marketing	KVKK Art. 5/2(f) – It is necessary for legitimate interests KVKK Art. 5/1 – In the presence of explicit consent
Domestic business partners (e.g., dealers, collaborating companies, event organizers)	Execution of membership benefits, campaigns, and activities aimed at customer satisfaction	Identity, Communication, Professional Experience, Customer Transaction, Marketing	KVKK Art. 5/2(f) – It is necessary for legitimate interests KVKK Art. 5/1 – In the presence of explicit consent
Lawyers and legal advisors	Resolution of disputes that our Company is or may be a party to, protection of rights and interests	Identity, Communication, Request/Complaint/Suggestion, Customer Transaction, Legal Transaction, Transaction Security	KVKK Art. 5/2(e) – It is necessary for the establishment, use, or protection of a right KVKK Art. 5/2(f) – It is necessary for legitimate interests
Certified public accountants and independent audit firms	Verification of financial statements, tax declarations, and financial audit processes	Identity, Communication, Professional Experience, Customer Transaction, Legal Transaction	KVKK Art. 5/2(ç) – It is necessary for a legal obligation KVKK Art. 5/2(f) – It is necessary for legitimate interests
Authorized public institutions and organizations (e.g., courts, Communication Management System Inc., regulatory authorities)	Fulfillment of legal obligations, meeting official requests	Identity, Communication, Customer Transaction, Legal Transaction, Transaction Security, Marketing	KVKK Art. 5/2(a) – Clearly provided for in the laws KVKK Art. 5/2(ç) – It is necessary for a legal obligation KVKK Art. 5/2(e) – It is necessary for the establishment, use, or protection of a right

5. Your Rights Under KVKK

We inform you that you have the rights under Article 11 of the KVKK as a relevant person. You can submit your applications regarding these rights to our Company through the Application Form with information/documents verifying your identity, so that our Company can determine that you are the actual rights holder, in accordance with the provisions of the Communiqué on the Procedures and Principles for Applications to the Data Controller, or in accordance with the procedures and principles regulated in the relevant legislation.

Mailing Address: Mimar Sinan Mah. Üsküdar Cad. Yedpa No: 1 B İç Kapı No: 10, Ataşehir / İstanbul, Türkiye

Phone: +90 850 304 8871

Email Address: [email protected]

* We would like to remind you that no special qualified personal data (e.g., religious information or blood type information) should be included in the relevant documents.