This privacy notice has been prepared in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to explain for what purposes and how we process the personal data you share with us through our website, contact form and other communication channels. This English version is a translation provided for information purposes only; in the event of any discrepancy between the two versions, the Turkish version shall prevail.
Data controller
Your personal data is processed by Everest Erkılıç Gümrük Müşavirliği Ltd. Şti. (the “Company”), in its capacity as data controller, within the scope described below.
Address: Anbar Mah. Erdek Cad. Eren Apt. No: 49/A, Melikgazi / Kayseri · Email: [email protected] · Phone: +90 536 599 57 70
Personal data processed
When you visit our website, fill in our contact form, send us an email or call us, the following personal data may be processed, depending on the channel you use:
- Identity data: first name and last name
- Contact data: email address and phone number
- Customer transaction data: company name, the service you are interested in, the content of your message and correspondence relating to your request
- Transaction security data: the IP address, page visited, date and time, and browser information recorded in server access logs when you visit our website, and technical logs relating to the form submission
Purposes of processing
Your personal data is processed solely for the purposes listed below. Please do not share special categories of personal data, such as health, religious or biometric data, in the message field.
- Receiving, assessing and responding to your requests, questions and complaints
- Preparing a service quote and sending it to you
- Conducting pre-contractual discussions and communication activities
- Ensuring the security of the website and contact form, and preventing misuse and spam
- Fulfilling our legal obligations and responding to information requests from competent authorities
Legal grounds for processing
Your personal data is processed on the following legal grounds set out in Article 5(2) of the KVKK:
- Processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract (Art. 5/2-c)
- Processing is mandatory for the data controller to fulfill its legal obligations (Art. 5/2-ç)
- Processing is mandatory for the establishment, exercise or protection of a right (Art. 5/2-e)
- Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f)
Transfer of personal data
Limited to the purposes stated above, your personal data may be transferred to the service providers from which we obtain website hosting, security and content delivery services and email infrastructure services, and, where requested under our legal obligations, to competent public authorities and judicial bodies.
For security and content delivery, our website is delivered through the infrastructure of Cloudflare, Inc., a service provider established abroad; your IP address and technical connection data are therefore processed by this provider when you visit our website. The servers of our email infrastructure provider and, if you contact us via WhatsApp, of that service’s provider (Meta) may also be located abroad. These transfers abroad are carried out in compliance with the conditions set out in Article 9 of the KVKK. Your personal data is not shared with third parties for marketing purposes.
Method of collecting personal data
Your personal data is collected through communication channels such as the contact form on our website, email, phone and WhatsApp, partly by automated means (form and server logs) and partly by non-automated means (phone calls and correspondence).
If you contact us via WhatsApp, the service provider’s own privacy terms also apply separately.
Retention period
Your personal data is retained for as long as required by the purpose of processing and for the retention and limitation periods set out in the relevant legislation. When these periods expire, your personal data is deleted, destroyed or anonymized.
Contact requests that do not lead to a service relationship are deleted within a reasonable period after the request has been concluded. Technical logs kept for information security purposes are retained only for the limited period this purpose requires; server access logs are deleted automatically after 14 days.
Your rights as a data subject
Under Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:
- To learn whether your personal data is being processed
- To request information on the processing if your personal data has been processed
- To learn the purpose of processing your personal data and whether it is used in line with that purpose
- To know the third parties, in Türkiye or abroad, to whom your personal data is transferred
- To request the correction of your personal data if it has been processed incompletely or inaccurately
- To request the deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK
- To request that any correction, deletion or destruction be notified to the third parties to whom your personal data has been transferred
- To object to any outcome against you that arises from the analysis of processed data exclusively through automated systems
- To claim compensation for damages if you suffer loss due to the unlawful processing of your personal data
How to apply
You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller and together with information that identifies you, in writing to Anbar Mah. Erdek Cad. Eren Apt. No: 49/A, Melikgazi / Kayseri, either in person or through a notary public, or send them to [email protected] using a secure electronic signature, a mobile signature, or the email address you have previously provided to us and that is registered in our system.
Your application will be concluded free of charge as soon as possible, depending on the nature of the request, and within thirty days at the latest. If the process requires an additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board. If your application is rejected, you find the response insufficient, or no response is given in time, you may lodge a complaint with the Board under Article 14 of the KVKK.
Cookies and similar technologies
Our website uses only the technical infrastructure strictly necessary for the site to function securely and correctly. No analytics, marketing or advertising cookies are used, and your visits are not tracked by third-party tracking tools.
The infrastructure service used for site security may use strictly necessary technical cookies to distinguish malicious traffic; these cookies are not used to analyze personal preferences or behavior. Since fonts are served from our own server, no data is sent to external font services when you view our pages.
The map on our website (Google Maps) is loaded only after you click the “Show map” button; Google’s own privacy policy then applies.
Changes
This privacy notice may be updated in line with changes in the legislation or in our data processing activities. The current version is always published on this page.