Personal Data Protection and Processing Clarification Text for Atik Metal
Introduction and Data Controller Information
As ATİK METAL, a trusted name in high-quality gray and ductile iron component manufacturing, we are deeply committed to protecting the privacy and fundamental rights of all individuals whose personal data we process. We act as the Data Controller for the data we collect. Our contact details are: Atatürk Organize Sanayi Bölgesi (AOSB), 10037 Sok. No:6, 35620 Çiğli / İzmir, Türkiye, and you can reach us via email at info@atikmetal.com.tr. This text informs you about how we process your personal data in compliance with the Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the EU’s General Data Protection Regulation (GDPR).
Processed Personal Data and Collection Methods
We process various categories of personal data necessary to conduct our core business of engineering, casting, machining, and assembly, and to serve our customers, including OEMs and system integrators across Europe.
Categories of Data: This typically includes Identity Data (name, surname, job title), Contact Data (business phone, email, work address), Professional Data required for project management and contractual execution, Financial Data (bank details for payments to suppliers), and Physical Location Security Data (CCTV recordings for site safety at our İzmir facility).
Collection Methods: Your data is collected through direct means such as business contracts, technical and commercial correspondence (email, phone calls), order forms, and physical collection points like visitor sign-in logs and security cameras within our operational facilities.
Purposes and Legal Grounds for Processing
We process your personal data in a lawful, fair, and transparent manner, ensuring it is relevant and limited to the purposes for which it is collected.
1. Contractual Performance: The primary purpose is the execution and performance of our integrated services (concept design, casting, machining, assembly) and all related contracts with our customers and suppliers. Processing is necessary for the performance of a contract or to take steps at your request before entering into a contract.
2. Fulfillment of Legal Obligations: We process data to comply with all applicable legal obligations, including tax, customs, labor, and commercial laws, both in Turkey and internationally.
3. Legitimate Interests: We also process data to ensure the commercial, legal, and technical security of our company and our business partners. This includes ensuring physical security, preventing fraud, and conducting internal audits. This processing is based on our legitimate interests, provided that your fundamental rights and freedoms are not overridden by these interests.
Transfer of Personal Data
Your personal data may be transferred to third parties only when necessary and in accordance with legal requirements:
Domestic Transfers: Data may be shared with authorized public institutions (e.g., courts, tax authorities), our suppliers (e.g., logistics companies), business partners, and professional advisors (e.g., auditors, legal counsel).
International Transfers: As we serve OEMs and system integrators across Europe, data may be transferred to our customers and business partners in the European Economic Area (EEA) for the performance of contracts and logistics. We ensure that such transfers comply with KVKK’s foreign transfer provisions and GDPR’s Chapter V requirements, implementing appropriate safeguards (such as Standard Contractual Clauses) where required.
Your Data Subject Rights
You have the right to exercise control over your personal data. This includes the right to:
Access your personal data and receive confirmation on whether it is being processed.
Request rectification if your data is incomplete or inaccurate.
Request erasure of your personal data (the ‘right to be forgotten’), subject to our legal retention obligations.
Request restriction of processing.
Object to the processing of your data, particularly where the legal ground is legitimate interests.
Request the data portability (GDPR only) of the data you have provided to us.
Request that correction, deletion, or destruction operations be notified to third parties to whom your data was transferred.
Application and Contact
To exercise your rights, you must submit a written request, along with necessary verification documents, to our company address or via email to info@atikmetal.com.tr. We will respond to your request free of charge as soon as possible, and no later than thirty (30) days as stipulated by law.