Personal Data Protection Notice

Data Controller and Purpose

As Milano Mühendislik (the “Company”), acting as the data controller, we take the necessary security measures to ensure that your personal data is processed lawfully and your privacy is protected. We process personal data in accordance with applicable legislation. Pursuant to Article 10 of Turkish Personal Data Protection Law No. 6698 and with a focus on your satisfaction, this notice explains transparently how your personal data is collected, the purposes and legal grounds for processing, the parties with whom it may be shared, and your rights.

General Information About the Law

Turkish Personal Data Protection Law No. 6698 (the “Law”) was adopted on 24 March 2016 and published in Official Gazette No. 29677 on 7 April 2016. The Law protects the fundamental rights and freedoms of individuals, particularly the right to privacy, and regulates the obligations, procedures, and principles applicable to natural and legal persons processing personal data.

Scope of This Notice

This Notice applies to our customers and prospective customers, business partners and suppliers, Website visitors, training and event participants, and other third parties who share personal data with the Company.

Purposes and Legal Grounds for Processing Personal Data

Managing Relationships with Business Partners and Suppliers

We may process information contained in signature circulars, such as name, surname, email address, telephone number, address, Turkish identification number, date and place of birth, to establish contracts and verify the authority of signatories. Processing is based on the legal grounds that it is directly related to the establishment or performance of a contract and is necessary for processing personal data belonging to the parties to that contract.

Sales and Marketing

Subject to obtaining the permissions required under the Law on the Regulation of Electronic Commerce, we may process your name, surname, email address, telephone number, address, and survey response data for traffic measurement, statistical analysis, customer portfolio analysis and segmentation, measuring and improving customer satisfaction, receiving opinions and suggestions about products and services, and presenting personalised information, campaigns, and benefits. Such processing is based on your explicit consent; strictly necessary cookies may be processed where required to fulfil our legal obligations.

Cookies and similar technologies that collect and store information may be used for these purposes when you visit our Website. You can manage your preferences through the relevant settings. For more information, please review our Cookie Policy.

Request and Complaint Management

We may process your name, surname, email address, telephone number, address, and the content of messages sent through our communication channels to receive and resolve questions and requests, address you correctly, provide information and advisory support, respond to complaints, and retain evidence in possible disputes. This processing is based on our legitimate interests, provided that your fundamental rights and freedoms are not harmed.

Customer Relationship Management

We may process your name, surname, email address, and telephone number to provide products and services, receive orders, process payments, prepare records and documents, arrange product delivery with logistics providers, and prepare comparative product or service offers. Processing is based on the establishment or performance of a contract and the necessity of processing personal data belonging to the parties to that contract.

Training and Event Management

We may process your name, surname, title, organisation, email address, and telephone number to plan training sessions, congresses, and events; manage invitation and participation processes; and issue participation documents. Processing is based on the establishment or performance of a contract and our legitimate interests.

Ensuring Security

Image data may be collected through recording devices in our office and warehouse areas to ensure security, prevent accidents and unlawful or criminal acts, and inform law enforcement authorities where necessary. This processing is based on our legitimate interests, provided that your fundamental rights and freedoms are not harmed.

How Is Your Personal Data Collected?

Your personal data may be collected verbally, in writing, or electronically through Website forms, our sales and marketing team, forms completed during customer visits, digital marketing channels, contracts, applications, offers, cookies used during Website visits, email and telephone correspondence, and camera recordings.

Transfer of Personal Data

Limited to the purposes described above, your personal data may be transferred to manufacturers whose products we represent, logistics and cargo companies, information technology and hosting service providers, legal and financial advisers, banks, and authorised public institutions and organisations upon request, in accordance with the conditions set out in Articles 8 and 9 of the Law.

Your Rights Under Article 11 of the Law

If you submit a request concerning your rights using the methods set out below, the Company will respond as soon as possible and no later than thirty days, depending on the nature of the request. Personal data subjects have the right to:

Application Procedure

Requests concerning the rights listed above may be submitted in Turkish and in writing, or through a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or an email address previously notified to and registered in the Company’s systems, in accordance with Article 13/1 of the Law and the Communiqué on the Procedures and Principles of Application to the Data Controller.

Applications may only concern the applicant; information about family members or other third parties cannot be provided. The Company reserves the right to verify your identity before responding. Your application must include:

Written applications may be sent with the required documents to İvedik OSB. 1368 Caddesi No: 18/42, Eminel İş Merkezi, Yenimahalle / Ankara, Türkiye. Electronic applications may be sent to milano@milanomuhendislik.com.tr. A fee schedule determined by the Turkish Personal Data Protection Board may apply to responses.

Depending on the nature of your request, information and documents that allow identification must be provided completely and accurately. Otherwise, the investigation required to respond to your request may not be carried out fully and effectively. In such cases, the Company reserves its statutory rights.