Personal Data Protection Notice (KVKK)

Your personal data is processed by Yıldız Endüstriyel Araştırma Merkezi San. ve Tic. Ltd. Şti. as data controller.

• Address: Zafer Mah. Zafer Cad. No:61, 20020 Merkezefendi / Denizli, Türkiye
• Email: omer.yildiz@yilsa.com.tr
• Phone: +90 549 430 00 20

Depending on your relationship with us, the following personal data may be processed:

• Identity data: first name, last name
• Contact data: email address, phone number, address
• Customer transaction data: the company you work for, request, quote, order and correspondence content
• Transaction security data: server logs created during your visit to our website, such as IP address, browser type, access date and time
• Location data: approximate location (country, region, city) derived from the IP address in form, newsletter and chat records
• Conversation content: messages exchanged with the AI assistant on our website
• Marketing data: the email address shared when signing up for the newsletter

Your personal data is processed for the following purposes:

• Responding to your quote, information and technical support requests
• Preparing production line, machine and product quotes and carrying out contract and order processes
• Providing installation, training, after-sales support and spare parts services
• Meeting invoicing, accounting and legal record-keeping obligations
• Keeping our website secure and maintaining the service
• Responding to information requests from authorised public bodies

Your personal data is collected by automated or partly automated means through email, phone, the quote and contact forms on our website, newsletter sign-up, the AI assistant, trade fairs and face-to-face meetings, quote and contract documents, and our website's server logs.

This data is processed on the following legal grounds set out in Article 5(2) of KVKK:

• It is directly related to the conclusion or performance of a contract (subparagraph c)
• It is necessary for the data controller to fulfil a legal obligation (subparagraph ç)
• It is necessary for the establishment, exercise or protection of a right (subparagraph e)
• It is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (subparagraph f)

Where none of these grounds applies, your personal data is processed only with your explicit consent.

Limited to the purposes above and in line with Articles 8 and 9 of KVKK, your personal data may be transferred to:

• Public bodies authorised by law
• Business partners whose services we use, such as accounting, financial advisory, shipping and logistics
• Service providers supplying website hosting, database (Upstash), artificial intelligence (Google Gemini) and email infrastructure

As our website's hosting, database and AI services are provided through servers located abroad, data in server logs and in form, newsletter and chat records may be transferred abroad. This transfer is carried out in line with the conditions set out in Article 9 of KVKK.

Your personal data is kept for as long as the purpose of processing requires and for the legal retention periods set out in the relevant legislation. Form, newsletter and AI assistant records received through our website are kept to maintain the customer relationship until you ask for them to be deleted, and are deleted at your request. When these periods end, your data is deleted, destroyed or anonymised.

Under Article 11 of KVKK, you have the right to apply to our Company to:

• Learn whether your personal data is processed,
• Request information about it if it has been processed,
• Learn the purpose of processing and whether it is used in line with that purpose,
• Know the third parties to whom it is transferred in Türkiye or abroad,
• Request correction if it is incomplete or inaccurate,
• Request its deletion or destruction under the conditions set out in Article 7 of KVKK,
• Request that correction, deletion and destruction be notified to third parties to whom the data was transferred,
• Object to a result against you arising from analysis exclusively by automated systems,
• Claim compensation if you suffer damage because of unlawful processing.

You can send requests regarding your rights, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing together with information identifying you to Zafer Mah. Zafer Cad. No:61, 20020 Merkezefendi / Denizli, Türkiye, or by email to omer.yildiz@yilsa.com.tr.

Your application will be concluded free of charge within 30 (thirty) days at the latest, depending on the nature of the request. If the process requires an additional cost, the fee schedule set by the Personal Data Protection Board may apply.