PDPL Website Privacy Notice

BAŞAK TRAKTÖR WEBSITE PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

As Başak Satış Pazarlama ve Yatırım Anonim Şirketi (BAŞAK Traktör), we attach great importance to ensuring the security of your personal data. As the BAŞAK Traktör family, we take all necessary measures and exercise the utmost care to protect personal data, and we would like to inform you regarding the processing of your personal data.

1. DATA CONTROLLER

BAŞAK Traktör processes your personal data in its capacity as the “Data Controller” as defined under Article 3 of Law No. 6698 on the Protection of Personal Data.

BAŞAK SATIŞ PAZARLAMA VE YATIRIM ANONİM ŞİRKETİ

Registered Office Address: Hanlı Sakarya Mah. Başak Sk. No: 62 İç Kapı No: 1 Arifiye/Sakarya, Telephone: 0 264 295 83 00 Email: info@basaktraktor.com.tr Registered Electronic Mail (KEP) Address: basaksatispazarlama.00kamu@hs02.kep.tr.

2. PURPOSES AND LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

We process the personal data we collect from you through digital forms completed online, call center conversations and physical forms completed through our representatives, falling under the categories of identity, contact, customer transaction, transaction security, financial, marketing, visual and audio records, for the purposes and on the legal grounds detailed below.

Expressly Provided for by Law

Based on the legal ground that the processing is expressly provided for by law (Article 5/2-a of Law No. 6698), we process your personal data in the categories of identity, contact, transaction security and customer transaction for the purposes of:

Conducting Activities in Compliance with Legislation
Monitoring and Conducting Legal Affairs
Conducting / Auditing Business Activities
Conducting Goods / Services Sales Processes
Conducting Risk Management Processes
Conducting Storage and Archiving Activities
Providing Information to Authorized Persons, Institutions and Organizations
Conducting Management Activities

for these purposes,

Establishment or Performance of a Contract

Based on the legal ground that the processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract (Article 5/2-c of Law No. 6698), we process your personal data in the categories of identity, contact, customer transaction, transaction security and financial data for the purposes of:

Conducting Information Security Processes
Conducting Activities in Compliance with Legislation
Conducting Finance and Accounting Affairs
Monitoring and Conducting Legal Affairs
Conducting Communication Activities
Conducting / Auditing Business Activities
Conducting Logistics Activities
Conducting After-Sales Support Services for Goods / Services
Conducting Goods / Services Sales Processes
Conducting Goods / Services Production and Operational Processes
Conducting Customer Relationship Management Processes
Conducting Activities Aimed at Customer Satisfaction
Conducting Storage and Archiving Activities
Conducting Contractual Processes
Conducting Pricing Policy Processes
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations
Conducting Management Activities

for these purposes,

Compliance with Legal Obligations

Based on the legal ground that processing is mandatory for the data controller to fulfil its legal obligations (Article 5/2-ç of Law No. 6698), we process your personal data in the categories of identity, contact, customer transaction and financial data for the purposes of:

Conducting Information Security Processes
Conducting Activities in Compliance with Legislation
Conducting Finance and Accounting Affairs
Monitoring and Conducting Legal Affairs
Conducting Goods / Services Sales Processes
Conducting Risk Management Processes
Conducting Storage and Archiving Activities
Conducting Contractual Processes
Conducting Pricing Policy Processes
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations
Conducting Management Activities

for these purposes,

Legitimate Interests of the Data Controller

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that such processing does not prejudice the fundamental rights and freedoms of the data subject (Article 5/2-f of Law No. 6698), we process your personal data in the categories of identity, contact, customer transaction, transaction security, visual and audio records for the purposes of:

Conducting Activities in Compliance with Legislation
Conducting Company / Product / Service Loyalty Processes
Conducting Internal Audit / Investigation / Intelligence Activities
Conducting / Auditing Business Activities
Receiving and Evaluating Suggestions for Improving Business Processes
Conducting Business Continuity Activities
Conducting Logistics Activities
Conducting After-Sales Support Services for Goods / Services
Conducting Goods / Services Sales Processes
Conducting Goods / Services Production and Operational Processes
Conducting Customer Relationship Management Processes
Conducting Activities Aimed at Customer Satisfaction
Conducting Risk Management Processes
Conducting Storage and Archiving Activities
Conducting Strategic Planning Activities
Monitoring Requests / Complaints
Providing Information to Authorized Persons, Institutions and Organizations
Conducting Management Activities

for these purposes,

Processing Based on Explicit Consent

Where consent has been provided for advertising and marketing activities and campaign notifications, based on explicit consent (Article 5 of Law No. 6698), we process your personal data in the categories of identity, contact, customer transaction, transaction security, marketing, visual and audio records for the purposes of:

Conducting Company / Product / Service Loyalty Processes
Conducting Communication Activities
Conducting Business Continuity Activities
Conducting Customer Relationship Management Processes
Conducting Activities Aimed at Customer Satisfaction
Conducting Marketing Analysis Activities
Conducting Advertising / Campaign / Promotion Processes
Conducting Risk Management Processes
Conducting Strategic Planning Activities
Monitoring Requests / Complaints
Conducting Pricing Policy Processes
Conducting Product / Service Marketing Processes
Providing Information to Authorized Persons, Institutions and Organizations
Conducting Management Activities

and your personal data is processed by us for the purposes stated above.

3. TO WHOM PERSONAL DATA IS TRANSFERRED AND FOR WHAT PURPOSES

We transfer the personal data processed within the scope of our commercial activities and the provision of goods and services to Natural Persons and Private Legal Entities, our Group Companies, and Authorized Public Institutions and Organizations for the purposes set out below.

Natural Persons, Private Legal Entities and Group Companies

We may transfer your personal data in the categories of identity, contact, customer transaction, transaction security, financial, marketing, visual and audio records to Natural Persons, Private Legal Entities and our Group Companies for the purposes of:

Conducting Information Security Processes
Conducting Activities in Compliance with Legislation
Conducting Finance and Accounting Affairs
Monitoring and Conducting Legal Affairs
Conducting Communication Activities
Conducting / Auditing Business Activities
Conducting Logistics Activities
Conducting Goods / Services Procurement Processes
Conducting After-Sales Support Services for Goods / Services
Conducting Goods / Services Sales Processes
Conducting Goods / Services Production and Operational Processes
Conducting Customer Relationship Management Processes
Conducting Activities Aimed at Customer Satisfaction
Conducting Storage and Archiving Activities
Conducting Contractual Processes
Monitoring Requests / Complaints
Conducting Supply Chain Management Processes
Conducting Pricing Policy Processes
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations

for these purposes,

Authorized Public Institutions and Organizations

We may transfer your personal data in the categories of identity, contact, transaction security and financial data to Authorized Public Institutions and Organizations for the purposes of:

Conducting Activities in Compliance with Legislation
Conducting Finance and Accounting Affairs
Monitoring and Conducting Legal Affairs
Conducting Communication Activities
Conducting / Auditing Business Activities
Conducting Storage and Archiving Activities
Conducting Contractual Processes
Providing Information to Authorized Persons, Institutions and Organizations

for these purposes and in accordance with the personal data processing conditions specified above.

4. METHODS OF COLLECTING PERSONAL DATA

We collect personal data through automatic, partially automatic, or non-automatic means provided that such processing forms part of a data recording system, as follows:

Your personal data in the categories of identity, contact, customer transaction, transaction security, financial, marketing, visual and audio records is collected directly from you through physical forms, online forms, information and documents provided by you in written or physical form, photographs taken, and information provided verbally during call center conversations;
Your personal data in the categories of identity, contact and marketing is collected from the relevant third-party social media companies (Google or Meta) through Google and Meta social media forms completed by you on the relevant platforms;
Your personal data in the categories of identity, contact, customer transaction and transaction security is collected directly from you through communication and live support applications and telephone conversations.

Your personal data collected through these methods is obtained through lawful means.

5. YOUR RIGHTS AS A DATA SUBJECT

You may submit your requests regarding your rights under Article 11 of Law No. 6698, which regulates the “rights of the data subject”, and the implementation of the Law, in writing, through your registered electronic mail (KEP) address, by using the email address registered in our systems, or through other application methods stipulated in the Communiqué on the Procedures and Principles of Application to the Data Controller, to kvkk@basaktraktor.com.tr. You may also obtain the necessary explanations, application form and information request form from the relevant department with which you are in contact. Depending on the nature of your request, we will conclude your application as soon as possible and in any event within 30 (thirty) days, free of charge for up to ten pages.