KVKK Disclosure Statement

This disclosure statement has been prepared by FUMSAN Silah Sanayii in its capacity as data controller, pursuant to Article 10 of Turkish Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

Data controller

Your personal data is processed by FUMSAN Silah Sanayii as data controller within the scope explained below. Our contact details appear at the foot of this page.

Categories of personal data processed

• Identity data: Name and surname.
• Contact data: E-mail address, telephone number, address, province and district.
• Customer transaction data: Content of requests and complaints, order and delivery records, warranty and service records.
• Transaction security data: IP address, browser and device information, server access logs.
• Dealer and supplier data: Company title, tax details, authorised person and contact details.

Purposes of processing

• Responding to contact, information and quotation requests,
• Carrying out product sales, delivery, warranty and after-sales services,
• Establishing and managing dealership and authorised point-of-sale relationships,
• Carrying out export and customs procedures,
• Conducting information security processes and maintaining site security,
• Conducting activities in compliance with legislation and reporting to competent authorities,
• Carrying out storage and archiving activities.

Method of collection and legal grounds

Your personal data is collected through the contact form on our website, e-mail, telephone, WhatsApp, face-to-face meetings and contract and order documents, by partly automated and non-automated means.

Data is processed on the legal grounds set out in Article 5 of the Law — that processing is expressly provided for by law, that it is directly related to the conclusion or performance of a contract, that it is mandatory for the data controller to fulfil a legal obligation, that the data has been made public by the data subject, and that processing is necessary for the legitimate interests of the data controller provided that it does not harm the fundamental rights and freedoms of the data subject. Where none of these grounds applies, processing is based on your explicit consent.

Transfer of personal data

Limited to the purposes listed above, your personal data may be transferred to our authorised distributor and authorised points of sale, to our supplier and logistics partners, to the providers of our hosting and information technology services, to the accountancy and audit firms we work with, and to public authorities legally entitled to receive it. Transfers abroad are not carried out unless the conditions in Article 9 of the Law are met.

Rights of the data subject

Under Article 11 of the Law you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used in accordance with that purpose; to know the third parties to whom it is transferred domestically or abroad; to request rectification if it is incomplete or inaccurate; to request erasure or destruction within the conditions of Article 7; to request that such operations be notified to third parties to whom the data was transferred; to object to a result arising against you from analysis carried out solely by automated systems; and to claim compensation if you suffer damage as a result of unlawful processing.

How to apply

You may submit your requests in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or through a registered electronic mail address, secure electronic signature, mobile signature, or the e-mail address you have previously notified to us and which is registered in our records.

Your application must clearly state your name and surname, signature, Turkish identity number, address for service, e-mail address and telephone number if any, and the subject of your request. Your request will be concluded free of charge as soon as possible and in any case within thirty days. If the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.

If your application is rejected, if you find the response insufficient, or if no response is given within the required period, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning the response and in any case within sixty days of the date of application.