KVKK Disclosure Notice

1. Identity of the Data Controller

Data controller: Toprak Mekatronik Ltd. Şti. Registered address: Demirkol Sokak No: 1/1, 31175 Hatay, Türkiye R&D office: METU Technopolis, 06800 Ankara, Türkiye E-mail: info@toprakmekatronik.com Phone: +90 539 246 87 02

2. Categories of Personal Data Processed

• Identity data: first name, last name
• Contact data: e-mail address
• Professional data: company name, company website
• Customer transaction data: content of your enquiry or complaint, the product line of interest
• Transaction security data: IP address and browser information (only where analytics consent is given, in truncated form)

3. Purposes of Processing

• Conducting communication activities and responding to your enquiries
• Handling information, pricing and demo requests regarding our products and services
• Carrying out sales and marketing processes within the scope of your explicit consent
• Improving our products, services and website experience
• Establishing and performing contractual processes
• Fulfilling legal obligations and following up legal affairs
• Operating information security processes

4. Legal Grounds for Processing

Your personal data is processed on the following grounds under KVKK Art. 5/2:

• Art. 5/2-(c): Directly related to the conclusion or performance of a contract
• Art. 5/2-(ç): Necessary for the controller to fulfil a legal obligation
• Art. 5/2-(e): Necessary for the establishment, exercise or protection of a right
• Art. 5/2-(f): Necessary for the legitimate interests of the controller, provided it does not harm your fundamental rights and freedoms
• Your explicit consent under Art. 5/1 for newsletter subscriptions and analytics cookies

5. Method of Collection

Your personal data is collected electronically through the contact form and newsletter form at www.toprakmekatronik.com by partly automated means. Analytics data is obtained by fully automated means through cookies, and only where you have granted cookie consent.

6. Transfer of Personal Data

Within the framework of KVKK Arts. 8 and 9 and limited to the purposes above, your personal data may be transferred to our cloud infrastructure and hosting suppliers, to our analytics provider where you have consented, and to competent public authorities in response to requests arising from legislation.

Because our cloud infrastructure is located in Amazon Web Services’ Ireland (eu-west-1) region, a cross-border transfer takes place. This transfer is carried out on the basis of standard contractual clauses providing appropriate safeguards under KVKK Art. 9. Transfers occurring through analytics cookies rely on your explicit consent and can be stopped at any time by withdrawing that consent.

7. Your Rights Under KVKK Art. 11

As a data subject you have the right, under KVKK Art. 11, to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether the data is used accordingly; know the third parties in Türkiye or abroad to whom the data is transferred; request correction of incomplete or inaccurate data; request erasure or destruction; request that these operations be notified to third parties; object to an adverse result produced solely by automated analysis; and claim compensation for damage arising from unlawful processing.

8. Application Procedure

You may submit requests regarding your rights through one of the following channels, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• By delivering a wet-signed petition together with identification documents to Demirkol Sokak No: 1/1, 31175 Hatay, in person or via notary
• By writing to info@toprakmekatronik.com from the e-mail address registered in our system
• By sending an application signed with a secure electronic signature or mobile signature to info@toprakmekatronik.com

Your application must include your name and surname, signature, Turkish ID number (nationality and passport number for foreign nationals), your address for notification, your e-mail address if applicable, and the subject of your request.

Your request is concluded free of charge as soon as possible and in any case within 30 days. If the process incurs an additional cost, a fee set by the Board’s tariff may apply. If your application is rejected, you find the response insufficient, or no response is given in time, you may file a complaint with the Turkish Data Protection Board within 30 days of learning the response and in any case within 60 days of your application.