Tan Grup – Privacy Policy & KVKK / GDPR Notice

This Privacy Policy and Notice ("Notice") has been prepared by Tan Grup ("Company", "we", "data controller") to inform all natural persons ("data subjects") who visit our website, use our services, or contact us, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and applicable personal data protection legislation including the EU General Data Protection Regulation (GDPR) where relevant.

1. Data Controller

Your personal data is processed by Tan Grup as the data controller under KVKK. You can reach our contact details on our contact page.

2. Personal Data We Process

Categories of personal data we may process include:

  • Identity Information: Name, surname, title.
  • Contact Information: Email address, phone number, postal address.
  • Customer / Request Information: Contact form content, request / complaint subjects, correspondence.
  • Transaction Security Information: IP address, browser information, visit date, log records, cookie information.
  • Marketing Information: Newsletter subscription data, areas of interest (only with explicit consent).

3. Purposes of Processing

  • Responding to your communication requests and questions,
  • Providing information about products and services offered,
  • Conducting commercial relations and managing contractual processes,
  • Improving the website user experience,
  • Ensuring information security and fulfilling legal obligations,
  • Carrying out marketing and promotional activities, provided your explicit consent has been obtained.

4. Method of Collection and Legal Basis

Your personal data is collected through forms on our website, email correspondence, phone calls, social media, and physical documents; by automated or partially automated means. Our processing activities are based on the following legal grounds set forth in Articles 5 and 6 of KVKK:

  • Necessity for the establishment or performance of a contract,
  • Necessity for the legitimate interests of our Company,
  • Express provision in laws and fulfillment of legal obligations,
  • Explicit consent of the data subject.

5. Transfer of Personal Data

Your personal data may be transferred, limited to the achievement of the purposes specified above and in accordance with KVKK Articles 8 and 9, to authorized public institutions, our business partners for the fulfillment of legal obligations, our service providers (hosting, email, analytics, security, etc.) and to domestic / international servers with necessary security measures in place.

6. Retention Period

Your personal data is stored for the periods stipulated in the relevant legislation or for the period required by the processing purpose. Once the periods expire, your data is deleted, destroyed, or anonymized.

7. Your Rights Under KVKK

Pursuant to Article 11 of KVKK, you may apply to the data controller and exercise the following rights:

  • To learn whether your personal data is processed,
  • To request information if it has been processed,
  • To learn the purpose of processing and whether they are used for their intended purpose,
  • To know third parties to whom the data is transferred at home / abroad,
  • To request correction of incomplete or inaccurate data,
  • To request deletion or destruction in accordance with KVKK,
  • To request notification of operations to third parties to whom data has been transferred,
  • To object to a result against you arising from analysis exclusively by automated systems,
  • To claim compensation if you suffer damages due to unlawful processing.

8. Application Method

Pursuant to Article 13 of KVKK, your requests must be submitted in writing to the address or email address specified on our contact page, together with documents that allow us to verify your identity. Your applications will be processed within a maximum of 30 (thirty) days.

9. Cookies

For detailed information about cookies used on our website, please refer to our Cookie Policy.

10. Updates

Tan Grup may update this Notice in the event of changes in legislation and as required by business processes. The current version is always published on this page.