Privacy Notice

The basis of our KVKK and data security policy

The Turkish Personal Data Protection Law No. 6698 (KVKK) is a legal requirement for protecting the privacy of data in a digital world. As Erk PVC Makine, we manage the data of everyone we deal with in our machine manufacturing and sales processes in full compliance with the obligations of this law. For us, data security is not only a legal procedure but a foundation of the trust we have with our business partners.

We follow the principle of transparency whenever personal data is processed in any of our operations. Any information obtained from our customers, suppliers or visitors is kept to high security standards. Our data security processes are supported by protocols that are updated continuously against cyber threats, and the encryption methods we use to prevent data leaks ensure that data can be accessed only by authorised persons.

Our data processing principles and legal grounds

In processing data we adhere strictly to the core principles set out in the law. We process data lawfully and in line with the rules of good faith, accurately, for specific, explicit and legitimate purposes, and in a way that is relevant, limited and proportionate to the purpose for which it is processed. This approach prevents unnecessary accumulation of data and minimises data security risks.

The legal grounds for our processing can be summarised as follows:

• Processing is expressly provided for by law.
• Processing is directly related to the conclusion or performance of a contract.
• Processing is necessary for the data controller to fulfil a legal obligation in carrying out work performed by Erk PVC Makine.
• Processing is necessary for the establishment, exercise or protection of a right.

Purposes of processing personal data

Your personal data is used only in the limited areas needed to run our business processes properly. For example, when you order a PVC mixer or an automatic powder dosing unit, your address details must be processed so that the delivery reaches the right address. In this case your data is used only to complete logistics and invoicing.

In more detail, our processing purposes are:

• Managing after-sales technical support and the supply of spare parts.
• Following up surveys and feedback used to measure customer satisfaction.
• Meeting tax and accounting obligations arising from legislation.
• Informing you about our machines, such as ribbon blenders.

Data transfers and sharing with third parties

Your data is kept within Erk PVC Makine, and we are highly selective about transferring it to third parties. Transfers take place only where the conditions set out in the law are met and where the nature of the work makes them necessary. For example, if we need support from an outside technical team to install a system, only the technical data that is required is shared.

Recipients may include:

• Logistics and courier companies (for deliveries).
• Public authorities (under legal obligations and inspections).
• Cloud-based software service providers (for secure data storage).

For all such transfers we put the contractual safeguards in place to ensure the other party also complies with KVKK standards. We know that a chain of data security is only as strong as its weakest link.

Data security and retention periods

Data security is a combination of technical, physical and administrative measures. Erk PVC Makine has a multi-layered security structure to keep data from unauthorised access. Our servers undergo regular penetration testing, and access rights are configured on the principle of least privilege.

How long data is kept depends on the purpose of processing and on legal retention obligations. For example, invoice data must be kept for 10 years under the Turkish Tax Procedure Law. Data whose processing purpose no longer exists is securely deleted, destroyed or anonymised under our data destruction policy. Destroying data irreversibly in this way also removes the risk of digital waste.

Your rights: you are in control of your data

Under KVKK, every individual has full control over their own personal data. As Erk PVC Makine, we run a transparent process to make these rights easy to use. Knowing how your data is processed is your most basic right.

You can contact us to exercise the following rights:

• To learn whether your personal data is being processed.
• If it has been processed, to request information about it.
• To learn the purpose of processing and whether the data is used in line with that purpose.
• To request correction of data that is incomplete or inaccurate.
• To request deletion or destruction of your data.

Frequently asked questions

Who is my data shared with? Only with business partners where this is needed to meet legal obligations or to provide the service.

How can I have my data deleted? You can apply to the data controller with a request for destruction.

How long is my data kept? Until the legal periods (for example 10 years) expire or the purpose of processing ends.

Conclusion and contact

Data privacy is as critical to us as precision in our manufacturing. At Erk PVC Makine we combine the engineering quality of our machine building with our security standards in data management. We take the protection of your personal data seriously and are always open to your questions on this subject.

For any question, comment or deletion request about our KVKK policy, you can contact us directly at [email protected] and obtain detailed information from our data controller. We are here for a secure partnership.

This is an English translation provided for information. The Turkish KVKK notice is the binding version and prevails in case of any difference.