Personal Data Protection Notice

1. Data Controller

Pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by Tuna Group (the group companies operating under the Tuna Mühendislik, Oflaz Elektrik Enerji and Tuna Lift brands, together the "Company") acting as data controller, within the scope described below.

Address: Fevzi Çakmak Mah. Gülistan Cad. No:120 AB Karatay, Konya, Türkiye
E-mail: bilgi@tunagroup.com.tr
Phone: +90 332 249 20 09

2. Personal Data Processed

The following personal data is processed through our website (tunagroup.com.tr):

• Identity Data: Name, surname
• Contact Data: Phone number, e-mail address
• Request Data: Message content submitted via the quote request or contact forms, service categories of interest, subject line
• Transaction Security Data: IP address, form submission date and time, cookie records

3. Purposes of Processing

Your personal data is processed within the conditions set out in Articles 5 and 6 of the KVKK for the following purposes:

• Receiving, evaluating and responding to your quote requests
• Answering questions, opinions and requests submitted through the contact form
• Carrying out site survey, engineering design and pricing processes for the services you request
• Planning and executing customer relationship management processes
• Fulfilling legal obligations and providing information to authorised institutions
• Ensuring website security and preventing misuse

4. Transfer of Personal Data

Your personal data may be shared, limited to the purposes stated above, with our group companies, legally authorised public institutions, and IT infrastructure suppliers (hosting, e-mail services) in accordance with Articles 8 and 9 of the KVKK. Certain technical data may also be transferred to Google LLC through the Google reCAPTCHA and Google Maps services used on our website.

5. Method and Legal Basis of Collection

Your personal data is collected electronically through the quote and contact forms on our website, based on the legal grounds set out in Article 5 of the KVKK: "processing being directly related to the establishment or performance of a contract", "processing being necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed", and where required, "explicit consent".

6. Retention Period

Your personal data is retained for as long as required by the processing purposes and, in any case, for the limitation periods stipulated in the applicable legislation. Upon expiry of the retention period, your personal data is deleted, destroyed or anonymised.

7. Your Rights under the KVKK

Under Article 11 of the KVKK, everyone has the right to apply to the data controller and, with respect to their own data:

• Learn whether their personal data is being processed,
• Request information if their personal data has been processed,
• Learn the purpose of processing and whether the data is used in accordance with that purpose,
• Know the third parties to whom personal data is transferred, domestically or abroad,
• Request correction of incomplete or inaccurate personal data,
• Request deletion or destruction of personal data under the conditions set out in Article 7 of the KVKK,
• Request notification of correction, deletion and destruction operations to third parties to whom the data has been transferred,
• Object to a result arising against the person through analysis of processed data exclusively by automated systems,
• Claim compensation for damages incurred due to unlawful processing of personal data.

8. How to Apply

You may submit your requests regarding the rights above, together with documents verifying your identity, in writing to our company address in person, via a notary, or to bilgi@tunagroup.com.tr. Your application will be concluded free of charge within 30 (thirty) days at the latest, depending on the nature of the request.