PDPL (KVKK) Clarification Text

Rota Yapı & Mühendislik (“Company”) processes your personal data in its capacity as data controller, in accordance with the principles stipulated in the PDPL and secondary legislation, limited to the purposes set out below.

1. Identity of the data controller

Title: Rota Yapı & Mühendislik. Address: Küçükbakkalköy Mah. Selim Sok. Rota Plaza No:6 Ataşehir / İstanbul, Türkiye. E-mail: info@rotayapimuhendislik.com. Phone: +90 (216) 575 25 34.

2. Purposes of processing personal data

Your personal data may be processed for the following purposes, without being limited to these where required by law or legitimate business needs:

• Receiving, evaluating and responding to requests via contact channels
• Preparing proposals, technical evaluations and commercial offers
• Execution and management of contract and business partner processes
• Finance, accounting, billing and collection operations
• Archiving and documentation in line with legal retention periods
• Fulfilling obligations arising from legislation
• Information security, audit and improvement of business processes

3. Categories of personal data processed

Depending on your relationship with our Company, the following categories may be processed in whole or in part:

• Identity information (name, surname, title)
• Contact information (e-mail, phone, address)
• Customer / business transaction data
• Visual and audio records where meetings or site visits are documented, if applicable
• Process security data (logs, IP address, device and browser information)
• Marketing preferences, if explicit consent is obtained

4. Legal basis and collection method

Personal data are collected through our website, e-mail, telephone, physical applications and similar channels, partly automatically (e.g. server logs). Processing is based, as the case may be, on the legal grounds set out in Articles 5 and 6 of the PDPL, such as establishment or performance of a contract, legal obligation, legitimate interest and explicit consent.

5. Transfer of personal data

Your data may be transferred to business partners, suppliers, legally authorized public institutions and judicial authorities, and to domestic or foreign service providers (e.g. hosting, e-mail infrastructure) where permitted under Articles 8 and 9 of the PDPL and provided that necessary security measures are taken.

6. Retention and destruction

Personal data are stored for the period required by the relevant legislation or for the period necessary for the processing purpose. Upon expiry, they are deleted, destroyed or anonymized in accordance with the Company’s retention and destruction policy.

7. Security measures

Technical and administrative measures are applied against unauthorized access, unlawful processing and destruction or loss of data, including access authorizations, secure communication channels where appropriate, and staff awareness.

8. Rights of the data subject

Under Article 11 of the PDPL, you have the right to request information on your data, to request correction or deletion where conditions are met, to object to outcomes against you by exclusively automated analysis, and to claim compensation for damages.

• Learning whether your personal data are processed
• If processed, requesting information
• Learning the purpose and whether use is in line with the purpose
• Knowing third parties to whom data are transferred domestically or abroad
• Requesting correction of incomplete or inaccurate data
• Requesting deletion or destruction under PDPL conditions

9. Application procedure

You may submit your requests under the PDPL in writing or by using the registered e-mail (KEP) address of the data controller, or through a secure electronic signature, mobile signature or the e-mail address previously notified to our Company by you and registered in our systems. The Company will conclude requests free of charge within the shortest time and in any case within thirty days at the latest; if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.

This clarification text may be updated to reflect legislative changes or our business processes. The current version is always published on this page with the revision date. For website, cookies and general privacy practices, see also our Privacy & Cookie Policy.