KVKK Data Protection Notice

Data Controller Information Obligation under the Personal Data Protection Law No. 6698

DATA CONTROLLER IDENTITY

CKS Elevio Elevator Systems Ltd.

Address: Oba Mh. Eski Gazipaşa Cd. No: 3 A/1 A2 Nolu Giriş İç Kapı No: 2 Alanya/ANTALYA

KVKK Contact Person: CKS Elevio KVKK Officer

Email: info@ckselevio.com

Phone: 0 (242) 505 69 40

PERSONAL DATA PROCESSING PURPOSES

1. Customer Services

- Order receipt and evaluation

- Technical support provision

- Complaint management

- Customer satisfaction measurement

2. Contract Management

- Contract preparation and signing

- Payment processing

- Invoicing processes

- Debt collection procedures

3. Operational Activities

- Elevator installation and maintenance

- Quality control processes

- Security measures

- Technical service operations

4. Legal Obligations

- Tax legislation requirements

- TSE standards compliance

- Occupational health and safety regulations

- Commercial law obligations

LEGAL BASIS

KVKK art. 5/2-c - Contract Performance:

- Establishment of customer contracts

- Performance of sales and service contracts

- Payment and delivery processes

KVKK art. 5/2-a - Legal Obligation:

- Tax legislation requirements

- Commercial law obligations

- Occupational safety regulations

KVKK art. 5/2-f - Legitimate Interest:

- Customer service quality

- Operational efficiency improvement

- Security measures implementation

KVKK art. 5/1 - Explicit Consent:

- Marketing activities

- Newsletter sending

- Personalized services

DATA CATEGORIES

A. Mandatory Data:

Identity and Contact Information:

- Name, surname, ID number

- Phone number, email address

- Address information

Financial Information:

- Payment information

- Invoice details

- Tax number (for legal entities)

B. Optional Data:

Marketing Preferences:

- Campaign notification preferences

- Communication channel preferences

Special Requirements:

- Elevator usage requirements

- Custom design requests

DATA TRANSFER INFORMATION

Domestic Transfers:

Public Institutions:

- Tax Office (tax obligations)

- Social Security Institution

- Relevant municipalities (permit procedures)

Business Partners:

- Authorized services

- Supplier companies

- Logistics companies

Professional Service Providers:

- Accounting firms

- Legal advisors

- IT service providers

International Transfers:

EU Countries:

- Countries with adequacy decisions

- With standard contractual clauses

Other Countries:

- Only with adequate protection measures

- With KVKK Board approval

RETENTION PERIODS

Data Type
Retention Period
Legal Basis
---------------
---------------------
-----------------
Customer Records
10 years
Code of Obligations art. 147
Financial Records
5 years
Tax Procedure Law
Job Applications
6 months
Labor Law
Security Records
30 days
Personal Data Protection Law
Marketing Data
Until consent withdrawal
KVKK art. 7
Contract Documents
Contract + 10 years
Turkish Code of Obligations

When Retention Period Expires:

- Data is deleted or anonymized

- Retention continues if legal obligation exists

- Archiving procedures are implemented

YOUR RIGHTS AND PROCEDURES

1. Right to Information

- Learn whether your personal data is being processed

- Learn the purposes of processing

- Learn what data is collected

2. Right to Rectification

- Request correction of incorrect data

- Request completion of incomplete data

3. Right to Erasure

- When the purpose of processing ceases

- When legal retention period expires

- When you withdraw your explicit consent

4. Right to Object

- Object to processing based on legitimate interest

- Object to marketing activities

Application Procedure:

1. Application Form:

- Written application (wet signature)

- Electronic application (secure electronic signature)

- Personal application

2. Identity Verification:

- Copy of ID card

- Authorized signature circular for legal entities

3. Response Time:

- Maximum 30 days

- Reasoned acceptance or rejection

- Provision of requested information

4. Application Address:

info@ckselevio.com

5. Right to Appeal:

- If not satisfied with the response

- Right to apply to Data Protection Board