1) Aim:
This policy has been prepared in order to comply with all laws and secondary legislation related to KVKK. Şakalak Tarım Makinaları Sanayi ve Ticaret A.Ş. (Hereinafter referred to as the "company".) The personal data and/or sensitive personal data we receive from you in all the works and transactions we do are kept confidential and not shared with third parties unlawfully. Our company has always shown due care and attention to the protection of personal data and/or special categories of personal data. Again, in accordance with the KVKK, our in-house regulations have been made with care and attention; technical and administrative measures were taken. From now on, as a company, we undertake to comply with all the obligations ordered by the legislation.

2) Scope
Our Privacy Policy has been prepared in accordance with the law and secondary legislation related to KVKK.
Your personal data and/or sensitive personal data are processed with your consent or within the scope of compliance with the law. 
Your data in question;

•    To increase our product and service quality,
•    To be able to carry out our commercial activities more healthily,
•    To ensure company security,
•    To serve you better,
•    Quick resolution of your problems,

can be used for the purposes.
Some personal data and/or sensitive personal data coming from you are depersonalized and anonymized as explained in the law when necessary. As a company, we have the right to change our Privacy Policy in order to comply with the legislation and to protect personal data
The Privacy Policy aims to protect the data obtained by any means of real and legal persons, customers, employees and all other persons with whom the company is a solution partner, and contains regulations for this purpose.

3) Deletion, Destruction and Anonymization of Personal Data

Your personal data and/or sensitive personal data are deleted, destroyed or anonymized after the expiry of the statute of limitations and storage periods, the completion of the judicial processes or the expiration of other relevant requirements. 
Deletion, destruction and anonymization processes are carried out at the request of the relevant data owner or automatically by the company.

4) Principles Determined by Article 4 of the KVKK on the Processing of Personal Data and/or Special Categories of Personal Data

The basic principles regarding the processing of personal data and/or special categories of personal data are as follows. The following principles will also apply to the data that the company processes based on express consent or within the scope of compliance with the Law.
•    Compliance with the Law: The company controls the source and legality of the personal data and/or sensitive personal data received from natural and legal persons and collected through various means. Obtaining the data in accordance with the law is valuable to the company.
•    Compliance with the Rules of Integrity: The company controls the source and legality of the personal data and/or sensitive personal data received from natural and legal persons and collected through various means. Obtaining the data in accordance with the rules of honesty is an indispensable principle for the company.
•    Being Limited, Measured and Connected to the Purpose for which they are Processed: The company uses the personal data and/or special quality personal data obtained through various means in accordance with the purpose for which they are processed, limited, measured and to the extent required by the performance of the service.
•    Accuracy of Personal Data and/or Private Personal Data: The company attaches importance to the fact that the personal data and/or sensitive personal data received from natural and legal persons and collected through various means do not contain false information and are accurate. However, the company is not obliged to investigate the accuracy of personal data and/or sensitive personal data declared by its customers or real and legal persons with whom it is in contact. For this reason, transactions are carried out on the basis that the declared data is correct.
•    Being Up-to-Date When Necessary: If there has been a change in the personal data and/or special quality personal data obtained by the company in various ways, the said change is communicated to the company and, if transmitted, the data is carried out.
•    Processing for Specific and Legitimate Purposes: The company processes personal data without the explicit consent of the data owner or within the framework of the exceptions stipulated by the law. The purpose of processing each personal data is specific and no personal data processing is carried out for any illegitimate purpose.
•    Retention for as long as required by law and/or for the purpose for which they are processed: The Company stores the personal data and/or sensitive personal data it obtains for the periods stipulated in the relevant laws. For this reason, it keeps contractual personal data as long as the statute of limitations and the duration of disputes stipulated by the Laws, the requirements of Commercial, Obligations and Tax Law. When the said purposes are over, it anonymizes, destroys or deletes the data.

5) Data Minimization

Personal data received in various ways and/or special quality personal data are transferred to our company's system and processed as necessary. The data are collected by the company in accordance with the purpose and data that are not related to the purpose are not collected. Excess data beyond the purpose is not recorded in the company system, deleted or anonymized. Rights for statistical purposes are reserved.

6) Data Confidentiality and Security

As a company, the privacy of your personal data and/or sensitive personal data is valued and your personal data and/or sensitive personal data that reach our company in any way are kept confidential. The company respects the confidentiality of the said data at every stage of its operation and complies with the company's privacy policy and other relevant policies.
Necessary technical and administrative measures are taken to ensure that personal data and/or sensitive personal data collected through various means do not fall into the hands of unauthorized persons, that the rights of the data owner are not harmed, and that the data is protected. In addition, data protection is requested from third parties with whom we share personal data and/or sensitive personal data, provided that it remains within the limits permitted by the legislation. Regarding security, our IT unit has taken and continues to take the necessary precautions, and our programs are updated and constantly renewed. In order to provide necessary and sufficient protection, all technological requirements are fulfilled and compliance with standards is ensured.

7) Continuity in updating data

The principle of timeliness is essential in the company. Personal data and/or special quality personal data obtained in various ways and ways can be updated when necessary or upon request. Necessary measures regarding the update are also taken by the company.

8) Accuracy Of Data

The principle of accuracy of declared personal data and/or sensitive personal data has been adopted by the company. The company is not obliged to investigate the accuracy of the personal data and/or special quality personal data declared by the customers or the real and legal persons with whom it is contacted. For this reason, business and transactions are carried out by accepting that the declared data are correct.
Addresses in Article 1 have been determined as the legal residence addresses of the parties in order to fulfill the issues in this undertaking and to make the necessary notices and notifications. If the address changes are not notified to the other party within three (3) days from the date of change, the notices and notifications sent to the address included in this undertaking will be deemed to have been made to the parties themselves.

9) Purposes of Processing Personal Data and/or Private Personal Data

The processing of personal data and/or special quality personal data is carried out in line with the purposes of the Company's Clarification Texts. The aforementioned Clarification Texts may vary depending on the processed personal data and/or sensitive personal data or who the relevant person is. Depending on the content of the Clarification Texts, the purposes of processing personal data and/or special categories of personal data may also change.

10) Processing of Personal Data and/or Private Personal Data for Advertising Purposes

Electronic messages sent for advertising purposes must be approved by the recipient. For this reason, e-mails for advertising purposes can only be sent to people with prior approval. The subject in question is also clearly regulated in the "Law on the Regulation of Electronic Commerce" and the "Regulation on Commercial Communication and Commercial Electronic Messages".
The Company complies with the provisions of the Law mentioned above when sending electronic commercial messages for advertising purposes. Again, in accordance with the Law, it complies with the approval and the details of the approval. said consent; It can be received in physical environment by any electronic means of communication or in written form. The basis for the approval is the presence of a positive declaration of will of the recipient of the commercial electronic message to accept the sending of the commercial electronic message, the presence of the electronic communication address and name-surname.
Approval from the buyer, marketing, promoting the company's goods and services, promoting its business, ensuring its recognition, celebration, wish and congratulation, etc. It includes all commercial electronic messages sent to electronic communication addresses in order to increase the recognition of the contents.
Apart from all these, before sending electronic commercial messages, individuals are informed that their data can be processed and their express consent is obtained when necessary. For this reason, while sending electronic commercial messages for advertising purposes, the provisions of the KVKK No. 6698 are complied with.

11) Collection and Processing of Personal Data within the Contractual Relationship

If a contractual relationship is established with customers or prospects, the data collected pursuant to the contract can be used by the company without express consent. The personal data in question are used within the framework of the performance of the service, the execution of the contract, the execution of the commercial activity and the requirements. This data can be updated at any time by contacting customers.

12) Personal Data Shared with Business-Solution Partners and Business Partners

The company has made it a principle to act in accordance with the law regarding the sharing of personal data. For this reason, it acts in accordance with the legislation while sharing data with its business - solution partners and commercial partners.
With its commitment to data privacy, the company shares only as much personal data as necessary for the performance of the service, the execution of the business and the continuation of the commercial activity with its business - solution partners and commercial partners. With the shared data, business - solution partners and commercial partners are requested to take the necessary administrative and technical measures to ensure data security.

13) Personal Data Processed by Automatic Systems and/or Private Personal Data:

Data obtained from information obtained through automated systems without the explicit consent of individuals cannot be used against individuals. The Company complies with the provisions of the relevant legislation in personal data and/or special quality personal data processed through automatic systems.

14) ……………... Personal Data of Employees and/or Private Personal Data

Processing Under Legal Obligations:
Personal data belonging to the employees may be processed by the company without the express consent of the for the purpose of expressly stipulating in the legislation on data processing or fulfilling the obligation stipulated by the law. The processing of the said data is limited to the fulfillment of the obligations arising from the legislation.
Processing of Personal Data in Accordance with the Employment Contract and Business Relationship:
The personal data of the employees can be processed without the express consent of the employees, within the framework of proportionality, as much as necessary in order to ensure the business relationship between the company and the employees. The company undertakes to protect and confidentiality of employee data in all cases and to take necessary measures in this regard.
Processing of Employees' Private Personal Data:
In accordance with the KVKK, the explicit consent of the person whose data will be processed and additionally the necessary measures foreseen by the Board are required for the processing of sensitive personal data. While processing sensitive personal data within the framework of compliance with the KVKK and the principles of the Board, the Company takes both the explicit consent of the relevant person and the necessary measures determined by the law, when necessary. However, special categories of personal data may be processed in exceptional circumstances stipulated in the Law, without the explicit consent of the person concerned, provided that it is limited and measured.
Personal Data Processed Through Automatic Systems:
Some personal data of employees can be processed in automated systems. These data are used in various evaluations regarding employees. Employees have the right to object to unfavorable results. The appeal must be made in accordance with internal company rules. The objection is evaluated within the company.
Processing of Personal Data for the Benefit of Employees:
Personal data belonging to employees can be processed by the Company without obtaining explicit consent within the framework of the relationship provided by the employment contract for transactions related to the benefit of the employee. Again, in disputes regarding the business relationship with the company, the company may process the personal data of the employees.
Company Internal Telecommunications, Internet and Communications:
In order to facilitate the performance of the work, the company can allocate computers, telephones, cars, applications, software and e-mail to the internal employees. The company can control and audit the personal data on the vehicles it has allocated. Regarding these issues, the company also fulfills the necessary Lighting Obligation.
The employee cannot use the vehicles allocated to him for private purposes. It is obligatory to use it only for the purpose of ensuring the performance of the work. Again, the employee undertakes that he will not contain any data or information other than the work and the necessity of the work in the vehicles allocated from the moment the working relationship with the company begins.

15) Transfer of Personal Data to Domestic and International

The company may share personal data with business-solution partners, real and legal persons, commercial partners and shareholders in order to perform the service and carry out commercial activities. Again, the company will be able to transfer personal data to its suppliers on a limited and measured basis in order to provide the necessary service for the execution of the commercial activity, which is outsourced from the supplier.
The company may transfer data within the country and abroad in accordance with the conditions stipulated in the KVKK and within the framework of the principles determined by the Board, within the scope of compliance with the law or with the express consent of the person concerned.
The company acts in accordance with Articles 8 and 9 of the KVKK when transferring personal data and/or sensitive personal data.
16) Rights of the Person Requesting Information
The rights of the data owner are stipulated in Article 11 of the KVKK No. 6698. The Company accepts that, pursuant to the Law, the data subject should be informed before the data is processed and their explicit consent should be obtained when necessary, and that the person has the right to request information about the data, to be updated, deleted, destroyed and anonymized after the data is processed.
Relevant persons can access the "Information Request Form Pursuant to Law No. 6698" from the company's website, regarding personal data;

1.    Learning whether personal data is processed,
2.    Requesting information on personal data if it has been processed,
3.    Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
4.    Knowing the third parties to whom personal data is transferred in the country or abroad,
5.    Requesting correction of personal data in case of incomplete or incorrect processing,
6.    Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the law titled "Deletion, destruction or anonymization of personal data,
7.    Requesting notification to third parties to whom personal data has been transferred, that the incomplete or incorrectly processed data has been corrected or that the data has been deleted or destroyed upon the request of the relevant person.
8.    Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
Requesting the compensation of the damage in case of loss due to unlawful processing of personal data
has rights.

Applications for the above-mentioned requests are made through the company's website or by filling in the application form obtained from the company. The application form can be signed with a wet signature (with a copy of the ID) and sent to the KEP address registered at our company address or to an e-mail address with a corporate extension via a notary public, registered mail with return receiptrequested. Applications must belong to the person concerned. An application cannot be made for a request for information regarding the personal data of another person. In addition, the information request made on behalf of someone else will not be answered by the company. If it is determined by the company that the application made on behalf of another person in the information request is made; The company reserves the right to all kinds of lawsuits and claims. The requests of the person concerned will be answered within thirty days at the latest from the date they reach the company. If the company deems necessary, it may request other information and documents from the applicant. The "Information Request Form in accordance with the Law No. 6698" regarding the application process that enables you to exercise these rights has been prepared by the Company and uploaded in PDF format to the Clarification Text located in the KVKK tab. You will be able to use the above-mentioned rights by complying with the application procedures and principles.

17) Privacy Policy

All personal data and/or special categories of personal data belonging to persons who have reached the company through various forms and channels are confidential. No one can use, reproduce, transfer, copy personal data and/or sensitive personal data without the purpose of processing the data and the reasons for compliance with the law.

18) Audit and Transaction Security

Necessary technical and administrative measures are taken to ensure that personal data and/or sensitive personal data collected from various forms and channels do not fall into the hands of unauthorized persons, that the rights of the data owner are not harmed, and that the data is protected. In addition, data protection is requested from companies with whom we share personal data and/or sensitive personal data within the framework of Legal Compliance. Again, our software programs are updated, constantly renewed and developed. In order to provide a high level of protection, all technological requirements are fulfilled and compliance with standards is ensured. In parallel with all these, the company carries out all internal and external audits necessary for the protection of personal data and/or sensitive personal data.

19) Notification of Personal Data Violations

In case of any breach of personal data, the company takes immediate action to remedy the breaches reported to it. It takes all necessary measures to eliminate or minimize the harm of the person concerned.
In the event that personal data and/or sensitive personal data are obtained from outside by unauthorized third parties, the company notifies the Personal Data Protection Board. It is possible to apply for notification of violations as stated on our company's website.

20) Other Considerations

Persons under the age of 18 must visit the Website under the supervision of their parents. They should not use this Web Site and share any personal data without the accompaniment of their parents.
From our websites, it can be ensured that contact information, preferences and other personal data are accurate, complete and up-to-date. Password, credit card information or other personal data are not requested via e-mail.
When he receives a message that appears to have come from us requesting your personal data, he should not respond.
If you do not want to be included in the announcement and information lists, the preferences should be updated. Access and control authority to commercial-electronic messages sent by our company for notification and communication purposes is in the hands of the user. While subscriptions to services and services continue, if you do not want to be contacted by you, you can use the "CANCEL" right in digital media. Cancellation can be done by sending a free SMS to the company or by contacting our call center.
Our company does not send spam emails. We do not use your personal data (including your e-mail address) for direct marketing or advertising purposes without your consent, and we do not share it with any third party.

21) Update

Changes to the Privacy Policy will be listed below as of the dates they were made.
COOKIE POLICY