Privacy Notice and Privacy Policy

Introduction

This translation is provided for information. The legally binding version is the Turkish text.

As HC ORGANİZE TEKSTİL SAN. TİC. LTD. ŞTİ. (the "Company"), we pay the utmost attention to the security of your personal data. With this awareness, we attach great importance to processing and storing all personal data of all persons transmitted to us in accordance with Law No. 6698 on the Protection of Personal Data (the "KVKK").

Collection and Processing of Personal Data and Purposes of Processing

Your personal data will be collected and used by our Company for the management and administration of employment, so that our Company can fulfil the obligations it must meet within the scope of employment, where data processing is necessary to establish a right, so that you can benefit from customer services, consumer rights and other facilities and/or so that the related commercial, financial and legal responsibilities and obligations can be fulfilled, for ensuring the security of our Company, or where the processing of your personal data is required for the legitimate purposes of our Company.

To Whom and for What Purpose Processed Personal Data May Be Transferred

Where necessary for the purposes stated above, your collected personal data may be transferred by our Company to our business partners, our affiliates, Company officers, suppliers, persons providing services, legally authorised public institutions and private persons and/or to other countries, within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the KVKK.

Method and Legal Basis of Collecting Personal Data

Your personal data is obtained through all kinds of verbal, written or electronic media, for the purposes stated above, so that our Company can fully and correctly fulfil its responsibilities arising from the contracts it has concluded and from the law. Personal data collected on this legal basis may be processed and transferred within the purposes stated in items (1) and (2) of this text, in line with the personal data processing conditions and purposes set out in Articles 5 and 6 of the KVKK.

In line with the legitimate purpose of the Company stated above, your personal data is also collected by cameras inside the Company in order to ensure security within the Company. Data obtained in this way is kept within the Company and is not shared with any third party.

All data stored as digital copies is also recorded on the server located at the Company's headquarters.

The name, company, email, telephone, country and request details you submit through the quote/request form on our website are processed on the basis of your explicit consent for the purpose of evaluating your request, providing you with a quote and conducting commercial communication; they are stored in our secure database and forwarded to our sales team by email. Your IP address and browser information are not recorded with the form. After your request is closed, the record is kept for 3 years and deleted automatically at the end of that period; if you request its deletion earlier, the record is permanently deleted together with its notes.

Measurement of Website Visits

Visits to our website are measured by two separate and mutually independent methods. The data of the two methods is never combined on a per-person basis.

Server-side visit counter

When a page request reaches our server, only the following information is recorded: date and time, the address of the page viewed, the language of the page, the country, only the domain name of the referring website, and the device type (desktop, mobile, tablet). No tracking code, pixel, cookie or browser storage is added to the page for this counter; it does not require consent and does not need to be switched off.

Not collected: IP address, unique visitor identifier, device fingerprint, hash generated from browser information. The IP address is used in memory during processing only to determine the country and is then discarded; it is not written to the database or to log files. The country is determined on our server without sending a request to any external service (data: IP Geolocation by DB-IP, db-ip.com, CC BY 4.0 licence). What is counted is the page view; the person is not identified.

Retention: raw records are kept for a maximum of 30 days and are then summarised into daily totals (counts per page, country, language, source and device type) and deleted; daily totals contain no personal data and are kept for a maximum of 25 months.

Google Analytics

Google Analytics is used for detailed analysis and is loaded only if you give "analytics" permission in the cookie window; no request is sent to Google without permission. If permission is given, Google Analytics cookies (_ga, _ga_*) are placed in your browser and usage data such as the pages visited, session duration, referring source, approximate location and device information is transferred to Google LLC (USA); the data is processed on Google's servers. Google signals and ad personalisation are switched off; Google Analytics 4 does not store IP addresses. When the quote form is submitted, only a "form submitted" event is sent to Google Analytics; this event does not include your name, email, telephone or company name, only general information such as the country entered in the form and the product group selected.

You can withdraw your permission at any time: the "Cookie settings" link at the bottom of the page reopens the consent window. Google's data processing terms: https://policies.google.com/privacy

Data Security

Our Company protects your personal data in full compliance with all reasonable technical and administrative security controls required by information security standards and procedures, and at an appropriate level against possible risks.

Rights of the Data Subject Listed in Article 11 of the KVKK

If, as data subjects, you submit your requests regarding your rights to our Company by the methods set out in this Privacy Notice, our Company will respond to the request free of charge within 30 days at the latest, depending on the nature of the request. In this context, data subjects have the right to:

• Learn whether personal data is being processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether it is used in accordance with that purpose,
• Know the third parties to whom personal data is transferred in Turkey or abroad,
• Request the correction of personal data if it is incomplete or inaccurately processed, and request that the action taken in this context be notified to the third parties to whom the personal data has been transferred,
• Request the deletion or destruction of personal data if the reasons requiring its processing no longer exist, even though it has been processed in accordance with the KVKK and other relevant legal provisions, and request that the action taken in this context be notified to the third parties to whom the personal data has been transferred,
• Object to a result arising against the person through the analysis of processed data exclusively by automated systems,
• Claim compensation for damage suffered due to the unlawful processing of personal data

as listed above.

Pursuant to Article 13(1) of the KVKK, to exercise the rights listed above, please contact the Human Resources unit of our Company, request and complete the application form, and send it to us in writing or by email to the address stated in the application form.