1. Controller and scope
Maya Endüstriyel may process personal data as the data controller within product presentation, quotation management, communication and customer relationship processes carried out through this website.
This notice applies to website visitors, persons requesting quotations or information, and persons who contact us through phone, email, WhatsApp or similar communication channels.
2. Categories of personal data
- Identity and contact data such as name, surname, company name, email address, phone number and address details.
- Customer transaction data such as product interests, quotation details and procurement-related correspondence.
- Transaction security data such as IP address, session records, log data and technical error records.
- Preference data such as language selection, cookie preferences and communication choices.
3. Purposes of processing
- Providing information on products and services, preparing quotations and responding to requests.
- Managing customer relations, after-sales communication and operational coordination.
- Maintaining the website in a secure, accessible and sustainable manner.
- Complying with legal obligations, audit requirements, proof and reporting processes.
- Creating records when necessary for the establishment, exercise or protection of legal rights.
4. Legal grounds
Your personal data is processed based on the legal grounds listed in Articles 5 and, where applicable, 6 of Law No. 6698. The main grounds include the establishment or performance of a contract, compliance with legal obligations, legitimate interests and the establishment, exercise or protection of a right.
Where explicit consent is required, such as optional marketing or non-essential cookies, processing is carried out through a separate consent mechanism.
5. Data transfers
- Suppliers providing hosting, email, technical support and information technology services.
- Business partners supporting logistics, accounting, quotation or operational processes where required.
- Competent public institutions, authorities and judicial or administrative bodies when legally required.
6. Retention and disposal
Personal data is retained for as long as required by the relevant processing purpose and any applicable legal retention periods.
When the legal basis or business need ends, data is deleted, destroyed or anonymized using appropriate methods.
7. Rights of data subjects
- Learn whether personal data is processed.
- Request information if personal data has been processed.
- Learn the purpose of processing and whether it is used accordingly.
- Learn the third parties to whom data is transferred domestically or abroad.
- Request correction of incomplete or inaccurate personal data.
- Request deletion or destruction where legal conditions are met.
- Object to results produced exclusively by automated systems.
- Claim compensation in case of damage caused by unlawful processing.
8. How to apply
You may submit your requests under the PDPL in writing to the company address or by other methods accepted by the Authority.
Requests are reviewed within the time limits set out by applicable legislation.
