Personal Data Protection

Lonca Makina San. Tic. A.Ş. (Data Controller), considering the safety of its valued customers and the protection of fundamental rights and freedoms, particularly privacy, provides the following information under its disclosure obligation pursuant to Law No. 6698 on the Protection of Personal Data, which entered into force upon publication in Official Gazette No. 29677 of 7 April 2016:

- As data controller and processor, we record and retain your personal data to establish and maintain service relationships, perform services and fulfil our responsibilities under other laws.

- In this capacity, personal information may be obtained, recorded, retained, updated and reorganised to maintain contractual relationships, disclosed, assigned, transferred or shared with third parties where and to the extent permitted by applicable legislation, and otherwise processed as specified in the Law.

- Your personal data means identifying data and information such as your name, surname, address, contact numbers and email addresses provided to benefit from service agreements; corporate or personal invoice information; questions posed by customer representatives and your answers; requested transactions; and access and traffic information.

- Personal data may be collected wholly or partly by automated means, by telephone or in person, by recording information requested by customer representatives for your security and your statements, and through your submission of data and documents requested for other services.

- Special categories of personal data include race, ethnic origin, political opinions, philosophical beliefs, religion, denomination or other beliefs, appearance and clothing, association, foundation or union membership, health, sex life, criminal convictions and security measures. Biometric and genetic data are not collected.

- As a rule, our company neither requests nor processes special-category data from customers. However, if information required for registration under third-party policies constitutes special-category personal data, it may be recorded solely to that extent. For example, an identity-document copy containing a religion field may contain special-category data even if recording such information is not the purpose.

Subject to the exceptions under Article 28 of the Law, you may apply to our Company to exercise the following rights under Article 11:

1. Learn whether your personal data is processed;

2. Request information if your personal data has been processed;

3. Learn the purpose of processing and whether your personal data is used in accordance with that purpose;

4. Know the third parties to whom your personal data is transferred domestically or abroad;

5. Request correction of incomplete or incorrect processing, and request deletion or destruction under the conditions in Article 7;

6. Request notification to third parties receiving your personal data of actions taken under items 4 and 5 above;

7. Object to an adverse result arising from analysis of your data exclusively by automated systems;

8. Request compensation for damage caused by unlawful processing of your personal data.

9. We reserve the right to request reimbursement of expenses incurred in fulfilling your requests according to the tariff specified in Article 13, “Application to the Data Controller”.