+90 535 351 52 72

info@kartexm.com

Hours: 08:00–18:00 (GMT+3)

Remote or on-site service in all 81 provinces of Türkiye

Kartex Makina
Request a quote

Privacy Notice

Last updated: 26 October 2026

This English translation is provided for information only; in case of any discrepancy, the Turkish version prevails.

This privacy notice has been prepared under Law No. 6698 on the Protection of Personal Data (the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform (the “Communiqué”). Its purpose is to inform people who visit our website, kartexm.com, and use its contact/quote form about the processing of their personal data, as required by Article 10 of the Law.

Data controller

Your personal data is processed by Kartex Makina (full trade name to be added) (“Kartex Makina,” “we” or “us”) as the data controller. You can reach us using the details below:

  • Email: info@kartexm.com
  • Phone: +90 535 351 52 72
  • Website: kartexm.com

Scope of this notice

This notice covers personal data processed when:

  • You fill in and submit the contact/quote form on our website,
  • You send an email directly to the email address shown on our website,
  • You visit our website and, as a technical necessity of internet communication, certain information reaches the server,
  • You apply to us regarding your rights under the Law.

The visitor-facing pages of our website do not place cookies on your browser, and our website does not use analytics, advertising or visitor tracking tools. For details, see our Cookie Policy and Privacy Policy.

The phone and WhatsApp links on our website only open the relevant app on your device when you click them. If you contact us through these channels, the information you share is also used solely to respond to your request and on the legal grounds described in this notice. WhatsApp is an independent third-party service based outside Türkiye and subject to its own terms of service and privacy policy; messages you send through this channel are transmitted over that service’s infrastructure.

Personal data we process

  • Identity data: Full name.
  • Contact data: Email address and phone number; optionally, city or country.
  • Request and customer transaction data: Request type (quote, service, spare parts or other); the content of your message; optionally, company name, solution of interest and industry; correspondence with you about your request.
  • Transaction security data: The date and time the form was submitted; the IP address from which it was submitted; the fact that you ticked the box confirming that you have read this Privacy Notice; and technical information that may be reflected in server logs when you access our website, namely IP address, access date and time, address of the page accessed, address of the referring page, and technical information about your browser and device type.
  • Application data: If you apply to us under the Law, the information that an application must contain under the Communiqué on the Procedures and Principles of Application to the Data Controller (full name, signature for written applications, Turkish ID number or, for foreign nationals, nationality and passport number or ID number if any, residential or business address for notifications, email address and phone and fax numbers if any, and the subject of the request), together with any information and documents you attach.

Fields marked as required on the form are necessary for us to evaluate your request and get back to you; the form cannot be submitted without them. Whether you fill in the optional fields is up to you.

Please do not include personal data that is not needed for your request in the message field or in your correspondence, especially the special categories of personal data listed in Article 6 of the Law (for example, data on health, religion, race, ethnic origin, criminal convictions, and biometric and genetic data). If you share personal data of other people in connection with your request, please inform them about this notice.

Purposes and legal grounds

Your personal data is processed in line with the general principles in Article 4 of the Law, only for the purposes listed below, and on the legal grounds in Article 5(2) of the Law indicated for each purpose.

Receiving, evaluating and responding to your request

Receiving and evaluating your quote, service, spare parts and other requests; preparing a quote or information suited to your request; and contacting you by email or phone for this purpose.

  • If your request concerns the establishment of a contract in your own name or the performance of an existing contract: subparagraph (c), “processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract.”
  • If you submit your request on behalf of a company or organization as its employee or representative, or if your request is not related to a contract: subparagraph (f), “processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.” Our legitimate interest is to respond to requests and questions addressed to us and to establish and maintain business relations with the organization you represent.

Providing the website and keeping it secure

Technically delivering our website to you; preventing and detecting misuse of the form, unsolicited (spam) and automated submissions, and unauthorized access attempts; and ensuring the secure and uninterrupted operation of our website.

  • Subparagraph (f): our legitimate interest in ensuring the security of our website, the form infrastructure and the data kept on it.
  • Subparagraph (ç), “processing is necessary for the data controller to fulfill its legal obligation”: our obligation under Article 12 of the Law to take technical measures to ensure the security of personal data.

Proving compliance with the obligation to inform and protecting rights

Keeping a record that you have read this notice in order to prove that the obligation to inform has been fulfilled; and establishing, exercising and protecting our rights in the event of a dispute.

  • Subparagraph (ç): under the Communiqué, the burden of proving that the obligation to inform has been fulfilled lies with the data controller.
  • Subparagraph (e), “processing is necessary for the establishment, exercise or protection of a right.”

Handling applications under the Law

Receiving your applications concerning your rights under Article 11 of the Law, verifying the applicant’s identity, and evaluating and responding to the application.

  • Subparagraph (ç): our obligation under Article 13 of the Law to conclude applications.

Responding to requests from competent authorities

Fulfilling our obligations under applicable legislation; responding to requests for information and documents from courts, public prosecutors, the Personal Data Protection Board (the “Board”) and other public authorities with legal powers.

  • Subparagraph (a), “it is expressly provided for by law.”
  • Subparagraph (ç): fulfilling our legal obligations regarding such requests.

About explicit consent

The “I have read the Privacy Notice” box on the form only confirms that you have read this notice; it is not a declaration of explicit consent. None of the processing activities described in this notice relies on explicit consent. If processing your personal data for a purpose other than those listed here, such as sending promotional or campaign messages, is ever considered, you will be informed before that processing begins, and your explicit consent or your approval for commercial electronic messages will be obtained separately where required by law.

Method of collection

Your personal data is collected on the legal grounds stated above, by the methods below. Collection through the website, the form and email takes place electronically, by fully or partly automated means; collection through written applications takes place by non-automated means as part of a data recording system.

  • The information you enter in the contact/quote form is saved to our website’s database when you submit the form. The date and time of submission and the IP address are recorded automatically by the system at the same time.
  • When the form is submitted, the content of your request may be forwarded to our business email address as a notification email.
  • Emails you send us directly are stored on our email service infrastructure.
  • When you access our website, technical information sent by your browser may be recorded automatically as server logs on our hosting service infrastructure.
  • The information in your applications under the Law is collected through the application you send us in writing or electronically.

Transfers of personal data

Recipients in Türkiye

In accordance with Article 8 of the Law, and on the legal grounds stated above for each purpose, your personal data may be transferred only to the following groups of recipients and only for the purposes indicated:

  • Service providers: Providers from whom we obtain technical maintenance, security and IT support services for our website, for the purpose of carrying out those services and to the extent the service requires.
  • Legal advisors: Attorneys, for the purpose of establishing, exercising or protecting a right in the event of a dispute, and limited to that purpose.
  • Competent public authorities and judicial bodies: Courts, public prosecutors, the Board and other public authorities with legal powers, for the purpose of responding to their requests based on their legal powers and fulfilling our legal obligations.

Transfers abroad

Our website is hosted on servers located outside Türkiye that are provided by Hostinger. Our business email service is provided through Google Workspace, offered by Google, via servers located outside Türkiye. Accordingly, the information you submit through the form, the security information recorded with the form and server logs are stored and processed on Hostinger’s servers abroad, while form notifications, emails you send us and our correspondence with you are stored and processed on Google Workspace servers abroad. These service providers process this data in order to provide their services.

These transfers do not rely on your explicit consent. They are carried out only for the purposes stated above and limited to the legal grounds indicated for those purposes, in accordance with Article 9 of the Law and the Regulation on the Procedures and Principles for the Transfer of Personal Data Abroad. Where there is no adequacy decision issued by the Board for the country of transfer, the transfer is carried out by providing one of the appropriate safeguards listed in Article 9(4) of the Law, such as the standard contract announced by the Board.

Retention periods

  • Form records, form notifications and correspondence: Kept for 2 (two) years from the date of the last communication about your request. If your request leads to a contractual relationship, the relevant data is kept for the duration of that relationship and, after it ends, for the statutory retention periods for commercial books and records (for example, ten years under Article 82 of the Turkish Commercial Code No. 6102) and the applicable limitation periods.
  • IP address and submission time recorded with the form: Kept together with the related form record and deleted no later than that record.
  • Server logs: Kept for a limited period proportionate to, and required by, the security purpose; at the end of that period they are deleted in the normal course of the hosting infrastructure’s operation.
  • Applications under the Law: Your application and our response are kept after the application is concluded, for evidentiary purposes in possible complaint and dispute processes, for the applicable limitation periods.

Personal data for which the reasons for processing no longer exist, or whose retention period has expired, is erased, destroyed or anonymized in accordance with Article 7 of the Law and the Regulation on the Erasure, Destruction or Anonymization of Personal Data. Where legislation requires a longer retention period, or the data is needed as evidence in a dispute, the data continues to be kept, limited to that period and purpose.

Your rights

Under Article 11 of the Law, you may apply to us to exercise the following rights:

  • To learn whether your personal data is processed.
  • To request information about the processing, if your personal data has been processed.
  • To learn the purpose of processing and whether your data is used in line with that purpose.
  • To know the third parties in Türkiye or abroad to whom your personal data is transferred.
  • To request rectification if your personal data has been processed incompletely or inaccurately.
  • To request erasure or destruction of your personal data under the conditions set out in Article 7 of the Law.
  • To request that the rectification, erasure or destruction be notified to the third parties to whom your personal data has been transferred.
  • To object to a result against you arising from the analysis of the processed data exclusively by automated systems.
  • To claim compensation if you suffer damage due to the unlawful processing of your personal data.

We do not use your personal data to make assessments about you that produce results solely through automated systems.

How to apply

You can send us requests concerning your rights, in Turkish, in accordance with Article 13 of the Law and the Communiqué on the Procedures and Principles of Application to the Data Controller, by one of the following methods:

  1. By sending an email to info@kartexm.com from the email address you previously provided to us and that is registered in our system.
  2. By sending your application signed with a secure electronic signature or mobile signature to info@kartexm.com.

Kartex Makina does not currently have a registered electronic mail (KEP) address; if one is obtained, it will be announced in this notice and on the application form page.

Your application must include your full name (and signature for written applications), your Turkish ID number (for foreign nationals, nationality and passport number or ID number if any), your residential or business address for notifications, your email address and phone and fax numbers for notifications if any, and the subject of your request. To make applying easier, you can use the Data Subject Application Form.

Your application will be concluded free of charge as soon as possible, and within 30 (thirty) days at the latest, depending on the nature of the request. If the process requires an additional cost, a fee may be charged according to the tariff set by the Board. If your application is rejected, if you find our response insufficient, or if we do not respond in time, you may file a complaint with the Board within 30 (thirty) days of learning of our response and, in any case, within 60 (sixty) days of the application date.

Changes

This notice may be updated in line with changes in legislation or in our personal data processing activities. The current version is always published on this page; the date of the most recent update appears at the top of the page.