Our Policies

Customer & Supplier Privacy Notice

CUSTOMER INFORMATION NOTICE

Goal

Technocast Automotive Industry and Trade Joint Stock Company (“Technocast” or “the Company”) aims to process the personal data of its individual customers in accordance with the provisions of the Personal Data Protection Law No. 6698 (“PDPA”) and other applicable legislation.& nbsp; As a natural person customer of our Company, the personal data you have provided or will provide to us, and/or any personal data obtained by our Company through any external means, is processed by our Company in its capacity as the “Data Controller,”

We process your personal data within the scope of the purpose for which such processing is necessary, and in a manner that is relevant to, limited to, and proportionate to that purpose,
By ensuring that the personal data you have provided to our company—or as it has been reported to us—remains accurate and up-to-date,
that such personal data will be recorded, stored, retained, and reorganized, shared with institutions authorized by law to request such personal data, and that such data may be transferred, assigned, classified, and processed in other forms specified in the Personal Data Protection Law, as well as subject to other processing operations listed in the Personal Data Protection Law.

It has been established that the activities conducted by Technocast are carried out and developed in accordance with the principles set forth in the Personal Data Protection Law.

Collection and Procedures for Personal Data of Individual Customers

Our company will process your personal data in accordance with the purposes specified in this Privacy Notice. Should there be any change in the purpose of processing your personal data, we will obtain your separate consent.

The personal data of our customers that is collected and used by our company includes, in particular:

	Content of Personal Data
Identity Data	Documents such as a driver’s license or a copy of an ID card containing information such as first and last name, Turkish ID number, tax ID number, nationality, mother’s and father’s names, place of birth, date of birth, and gender, along with signature or initials.
Communication Data	Phone number, fax number, physical address, country, city, email address (including extension number and corporate email address).
Financial Data	Personal data processed in connection with information, documents, and records reflecting any financial outcomes arising from the type of legal relationship the company has established with the data subject, as well as information such as bank account numbers, IBAN numbers, credit card numbers, etc. (Information related to collections, payment transactions, etc.)
Customer Transaction Data	Records related to the use of products and services, as well as information such as instructions and requests necessary for the customer’s use of products and services, including customer numbers, contract numbers, transaction dates, and account numbers.
Marketing Data	Personal data of individuals used or to be used by the company in its marketing activities (campaign-related information, customer satisfaction survey data)
Other Data	Data such as quantity, region information, weight, material name, packaging type, verification code, etc., included in the sales report
Physical Space Security Data	Personal data related to records and documents collected upon entry into the physical premises and during the time spent within the premises; such as camera recordings and records collected at security checkpoints, etc.

We collect your personal data through any information, records, and documents you have provided to our Company—whether before or after the establishment of a contractual relationship and throughout its duration—as well as through third parties and public institutions and organizations, in accordance with the reasons stipulated by law. We also collect such data through physical or electronic media and via cameras installed in our Company’s premises, in accordance with the reasons stipulated by law.

Purposes and Legal Grounds for the Processing of Personal Data

Your personal data may be processed by our Company for the purposes specified below, though not limited to them.

Income Tax Law No. 193, Corporate Tax Law No. 5520, Turkish Commercial Code No. 6012, the Turkish Code of Obligations No. 6098, the Personal Data Protection Law No. 6698, the Stamp Tax Law No. 488, the Value-Added Tax Law No. 3065, and other applicable laws and regulations, are processed for the purpose of fulfilling legal obligations and requirements.

In accordance with the Income Tax Law No. 193, the Corporate Tax Law No. 5520, the Stamp Tax Law No. 488, the Value-Added Tax Law No. 3065, and the relevant legislation, laws, regulations, and circulars currently in force, for the purpose of fulfilling legal obligations, specifically;

Maintenance of invoice records

For the purpose of entering into and performing the contract, in particular;

Conducting sales processes,
Tracking sold products,
Conducting a customer financial status check,
Processing of bulk payments,
Conducting financial tracking,
The execution of shipping operations,
Conducting collateral monitoring and risk assessments,
Taking orders from customers and tracking them,
Monitoring current accounts and conducting risk assessments,
The processing of accounts receivable and accounts payable,
Monitoring of weighing operations,
Calculating premiums,
Determining pricing policies and monitoring the prices of products sold,
Processing checks and reporting checks to be returned,
The implementation of customer satisfaction processes,
Submission of a price quote,
Opening a checking account,
Creating form templates for customers in the current account system,
Informing customers about transactions,
Tracking payments,
Invoice issuance,
Issuing a receipt,
Tracking the customer’s transport vehicles,
Monitoring customer limits,
Sharing customer current account information with senior management

For the purpose of establishing, exercising, and protecting a right, and implementing our Company’s policiesspecifically;

Tracking customer complaints,
Conducting customer visits

Your personal data will be retained for a reasonable period as specified in the relevant legislation or until the purpose of processing no longer applies, and in any case for the duration of the statutory limitation periods.

Disclosure of Personal Data to Third Parties

Your personal data may be transferred to authorized public institutions and organizations, as well as to our Company’s relevant suppliers, business partners, subsidiaries, and affiliated companies, for the purpose of fulfilling legal obligations and contractual requirements under the Income Tax Law No. 193, the Corporate Tax Law No. 5520, the Stamp Tax Law No. 488, the Value-Added Tax Law No. 3065, and other applicable legislation, without being limited to the aforementioned laws; to authorized public institutions and organizations, our Company’s relevant suppliers, business partners, subsidiaries, and affiliated companies.

4.1. Transfer of Personal Data to Third Parties Within the Country;

This information is transmitted to the Revenue Administration for the purpose of providing updates regarding invoice records.

For the purpose of entering into and performing the contract, in particular;

Making payments,
Conducting risk assessments,
Tracking customer premiums,
The conduct of audits,
Providing information regarding shipping procedures,
Tracking sales figures,
The performance of production activities,
Tracking raw material orders,
Conducting market research,
Opening a checking account,
For the purpose of conducting management activities, our Company shares information with its business partners, subsidiaries, and suppliers.

4.2. Transfer of Personal Data to Third Parties Abroad;

For the purpose of entering into and performing the contract, in particular;

Submitting sales and accounts receivable reports to management,
Increasing customer risk limits,
The process of setting prices,
The execution of financial and accounting transactions,
Tracking sales figures,
Obtaining approval for financial matters,
This information is shared with our subsidiaries and affiliates for the purpose of risk monitoring.

Ensuring the Security and Confidentiality of Personal Data

In accordance with Article 12 of the Personal Data Protection Law, our company takes all necessary technical and administrative measures to ensure an appropriate level of security in order to prevent the unlawful processing of personal data and unauthorized access to such data, and to ensure the protection of personal data.

5.1. Ensuring the Lawful Processing of Personal Data and Protecting Personal Data in Accordance with the Law

Technical Measures Taken to Prevent Unauthorized Access

Internet security is ensured by the Sophos firewall. All users’ internet activity is logged, and potential external attacks are blocked by the firewall.
Backups of the database server containing personal data are taken every day of the week and are also transferred daily to another storage unit, where they are retained for a period of three months. Access to the data is encrypted.
All servers used by our company are configured to have incremental backups taken daily.
Access to the server room is restricted to authorized personnel.
In the event that our current server fails, the system has been configured in a cluster architecture that ensures uninterrupted operation by switching to a standby server.
In addition, our company has a UPS (Uninterruptible Power Supply) in the server room to ensure that the server room remains operational in the event of a power outage.
All servers and user computers are protected by the ESET NOD32 antivirus program.
Access to shared folders is restricted based on the permission matrix and access control list. No employee can access a folder for which they do not have permission.

Technocast has implemented all necessary technical and technological security measures to protect your personal data and has safeguarded it against potential risks.

5.2. Ensuring the Lawful Processing of Personal Data and Protecting Personal Data in Accordance with the Law

Administrative Measures Taken to Prevent Unauthorized Access

Training and raising awareness among company employees regarding the Personal Data Protection Law,
In cases involving the transfer of personal data, ensuring that a clause is included in the contracts entered into with the recipients of the personal data stating that the party transferring the data will ensure data security,
Identifying the requirements necessary for compliance with the Personal Data Protection Law and preparing internal policies for their implementation,

5.3. Measures to Be Taken in the Event of the Unauthorized Disclosure of Personal Data

In the event that processed personal data is obtained by others through unlawful means, our Company will notify the relevant data subject and the Board of this situation as soon as possible.

Deletion, Destruction, and Anonymization of Personal Data

Pursuant to Article 7 of the Personal Data Protection Law, even if personal data has been processed in accordance with applicable legislation, such data shall be deleted, destroyed, or anonymized by our Company either on its own initiative or upon the request of the data subject if the reasons necessitating its processing no longer exist.& nbsp; The procedures and principles regarding this matter will be carried out in accordance with the Personal Data Protection Law and the secondary legislation established based on this Law.

Customer Rights

Pursuant to Article 11 of the Personal Data Protection Law, you may submit requests to our Company regarding the following matters concerning your personal data:

To learn whether your personal data has been processed,
To request information regarding the processing of your personal data if it has been processed,
To learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose,
To learn the third parties to whom your personal data has been transferred within or outside the country,
To request the correction of your personal data if it has been processed incompletely or incorrectly, and to request that this action be notified to the third parties to whom your personal data has been transferred,
Requesting the erasure, destruction, or anonymization of personal data if the grounds for processing no longer exist, and requesting that this action be notified to third parties to whom the personal data has been transferred,
The right to object to a decision made solely through the automated processing of personal data that adversely affects the data subject,
The right to request compensation for damages incurred as a result of the unlawful processing of personal data.

Our company will process your requests arising from the Personal Data Protection Law through the “Data Subject Request Form.” In accordance with Article 13 of the Personal Data Protection Law, our company will process your requests free of charge within 30 (thirty) days, depending on the nature of the request. If the request is rejected, the reason(s) for the rejection will be communicated to you in writing or electronically, along with the relevant justifications. This Privacy Notice may be revised by our Company as deemed necessary. In cases where a revision is made, you will be notified accordingly. You can access the most up-to-date version of the Privacy Notice at https://www.technocast.com.tr/.

***

SUPPLIER PRIVACY NOTICE

DEALER-SUPPLIER-BUSINESS PARTNER-EXTERNAL SERVICE PROVIDER INDIVIDUAL REPRESENTATIVE PRIVACY NOTICE

As ( ) INC. (“Company”), acting as the data controller, we process your personal data obtained in the manners specified below,

within the scope of our commercial relationships or within the context of our business relationship with you,
in a manner that is limited and proportionate to the purpose requiring such processing and in connection with that purpose,
while ensuring the accuracy and up-to-date nature of the personal data as you have provided or as it has been reported to us,
will be recorded, stored, retained, reorganized, shared with institutions legally authorized to request such personal data, and transferred, assigned, classified, and processed in other forms as provided for under the KVKK within the country,
we hereby notify you.

1. YOUR PERSONAL DATA BEING PROCESSED

The personal data provided to us by you or by the authorized representatives of the company you represent within the scope of our contractual relationship, and which may be subject to processing by us, are as follows:

Content of Personal Data

Identification Data

Documents such as driver’s licenses and copies of national ID cards containing information such as first and last name, Turkish ID number, tax ID number, nationality, mother’s and father’s names, place of birth, date of birth, and gender, as well as signature and initial information.

Contact Data
Phone number, fax, physical address, country, city, email address (including internal number and corporate email address).

Financial Data
Personal data processed in relation to information, documents, and records reflecting any financial outcomes arising from the legal relationship established between the company and the data subject, as well as information such as bank account numbers, IBAN numbers, credit card numbers, etc. (Information regarding collections, payment transactions, etc.)

Customer Transaction Data
Information regarding records of the use of products and services, as well as instructions and requests necessary for the customer’s use of such products and services, including customer numbers, contract numbers, transaction dates, and account numbers

Marketing Data

Personal data of natural persons used or to be used by the company in its marketing activities (campaign-related information, customer satisfaction survey data)

Other Data
Other personal data you may share with us within the scope of our business relationship

Physical Premises Security Data
Personal data related to records and documents collected upon entry to the physical premises and during your stay within the premises; such as camera recordings and records taken at security checkpoints, etc.

2. METHOD OF COLLECTION AND LEGAL BASIS FOR YOUR PERSONAL DATA

We process the personal data mentioned above—which you have provided to us in writing, verbally, or electronically via means such as email or phone, or which has been transferred to us by our business partners such as suppliers or dealers—in accordance with Article 5 of the Personal Data Protection Law (KVKK), based on your explicit consent or on the grounds of disclosure by you for purposes such as communication, supply, or sales, and limited to such purposes.

Monitoring entry and exit to the workplace; monitoring technical equipment and workplace areas critical to security; preventing and detecting criminal acts committed by third parties on the premises; monitoring compliance with occupational health and safety measures, monitoring the proper use of workplace equipment and tools in accordance with regulations, and verifying the quality and performance of the work performed by employees—we may collect your visual and audio recordings through cameras located at the workplace in accordance with the Company’s legitimate interests as an employer.

3. PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data, processed for the legal grounds specified above, is used to ensure the enforceability of the contract between your company (of which you are a representative, such as an authorized representative, responsible party, or employee) and us, and to fulfill the terms and conditions of the contract;

Coordinating and conducting business operations and communications related to the goods and services provided, as well as quality control and evaluation regarding the performance of the service/contract,
Maintaining financial and accounting records and processing payments,
Facilitating communication between business partners such as suppliers, dealers, and external service providers and customers,
Obtaining support from business partner employees,

For these purposes.

Your personal data may also be processed for the purposes of exercising our right of defense, fulfilling our legal obligations if requested by us within the scope of a proper legal process, and where data processing is necessary for the establishment, exercise, or defense of a legal claim.

Your personal data will be retained for the maximum period specified in applicable legislation or necessary for the purpose for which it is processed, and in any case, for the duration of the statutory limitation periods.

4. SHARING OF YOUR PERSONAL DATA WITH THIRD PARTIES

Transfers of personal data are carried out in accordance with the principles of being relevant, limited, and proportionate to the purpose of processing as stipulated in the KVKK, and our Company implements the necessary administrative and technical measures to prevent unauthorized and/or unlawful access to your personal data.

For the purpose of ensuring your security and enabling our Company to fulfill its legal obligations, your personal data is processed in accordance with the Law on the Regulation of Publications Made on the Internet and the Fight Against Crimes Committed Through Such Publications, the Advertising and Promotion Regulation, the Turkish Commercial Code, the Personal Data Protection Law No. 6698, and other applicable legal provisions, to the extent permitted and required by such laws, with relevant public institutions or organizations, such as the Ministry of Health, the Ministry of Finance, the Ministry of Customs and Trade, and the Information and Communications Technologies Authority.

Additionally, we may share your personal data with third parties within the country under the following circumstances:

We may process your personal data in accordance with the purpose of the processing if it is necessary for the management of accounting and financial transactions using the relevant software. Such data may be stored in the software’s own data storage environment.
In addition, in order to exercise our right to defense, we may share your information with our attorneys or consultants, and with relevant judicial and administrative authorities within the scope of our obligation to comply with legal requests—such as court orders or requests for evidence—provided that such sharing is in accordance with the law and applicable procedures.
We may share your data with our domestic business partners and dealers for purposes related to the products we have sold or the services we have provided, including supply, delivery, maintenance, installation, and service operations.

Our company carries out the aforementioned transfers in accordance with Article 8 of the KVKK, taking into account the processing conditions within the framework of the conditions for transferring data to third parties within the country.

5. YOUR RIGHTS

Under Article 11 of the KVKK, data subjects (hereinafter referred to as the “Data Subject”) are granted the right to submit requests regarding the processing of their personal data in the following matters. Data subjects:

1. The right to inquire whether personal data has been processed,
2. The right to request information regarding the processing of personal data if it has been processed,
3. The right to inquire about the purpose of processing personal data and whether it is being used in accordance with that purpose,
4. To know the third parties to whom personal data has been transferred within or outside the country,
5. To request the correction of personal data if it has been processed incompletely or incorrectly,
6. To request the erasure or destruction of personal data within the framework of the conditions set forth in Article 7,
7. (5) and (7), to request that the actions taken pursuant to these provisions be notified to the third parties to whom personal data has been transferred,
8. Objecting to a decision made solely through the automated processing of data that adversely affects the individual,
9. Requesting compensation for damages incurred due to the unlawful processing of personal data,

Pursuant to the first paragraph of Article 13 of the KVKK; requests regarding these rights must be submitted to our Company, as the data controller, in writing or through other methods determined by the Personal Data Protection Board (“Board”).

In this context, written requests submitted to our Company may be communicated to us using the methods outlined in the “Information on Submitting Requests to the Data Controller” [CB1] and generally described below, for the purpose of verifying your identity.

1. By the applicant submitting the application in person,
2. Through a notary public,
3. Via a registered electronic mail (KEP) address, secure electronic signature, or mobile signature
4. By using the email address previously provided to our Company and registered in our Company’s system.

Below, information is provided regarding the specific channels for submitting written applications and how they should be submitted to us. In applications, it must be stated that the subject of the application constitutes a request for information in accordance with the Law, in accordance with the selected method.

Application Method

Address for Submission

Service of process via notary
: OSB. G.O.P. Neighborhood, 6th St., No. 12, 59500 Çerkezköy, Tekirdağ

Registered electronic mail (KEP) address,
: technocastotomotiv@hs01.kep.tr

Signed with a secure electronic signature or mobile signature
: info@technocast.com.tr

By using the email address previously provided to our company and registered in our system
: info@technocast.com.tr

If there are any omissions in the application information, our company may request additional information to verify the applicant’s identity. Providing your address and contact information in your applications is necessary for us to communicate with you more quickly and to process your request.

Requests included in your applications will be processed free of charge as soon as possible and no later than thirty days, depending on the nature of the request. However, if the process incurs additional costs, a fee in accordance with the tariff determined by the Board may be charged.

Our company is obligated to take all necessary administrative and technical measures to process applications effectively and in compliance with the law and the principle of good faith. To fulfill our obligations, we request that you provide accurate, complete, and up-to-date information when submitting an application using the form provided below. Our company assumes no liability for applications that are incomplete, unauthorized, or submitted in a foreign language.

You acknowledge that you have been informed by our Company in accordance with the duty to provide information under Article 10 of the KVKK and that you understand the matters set forth in this document.

Personal Data Request Form