KVKK Privacy Notice

Your personal data is processed by İstanbul Sertifika Ofisi Danışmanlık Ltd. Şti. (the “Company”) as data controller, within the scope described below.

Address: Topçular Mah. Axis İstanbul AVM Ofis Blokları Kat:2 No:18, Eyüpsultan / İstanbul · Email: info@sertifikaofisi.com · Phone: 0212 577 57 12

• Identity: name and surname.
• Contact: phone number, email address.
• Customer transaction: company name, requested service, product / HS code / destination country, message content.
• Certification process: contact persons and personal data contained in application files and commercial documents.
• Transaction security: IP address, browser information and time of access (to prevent abuse).

• Responding to your information, quote and contact requests,
• Preparing quotes and managing contractual processes,
• Carrying out certification, audit and application processes with authorised bodies,
• Invoicing, finance and accounting,
• Information security, prevention of spam and abuse,
• Complying with legal obligations and informing competent authorities.

Your data is collected through the contact and quote forms and the “Get a Quote” window on our website, email, phone, WhatsApp and in-person meetings, by automated or partly automated means.

Processing relies on the legal grounds in Article 5(2) of the KVKK: (c) establishment or performance of a contract, (ç) compliance with a legal obligation, (e) establishment, exercise or protection of a right, and (f) the Company’s legitimate interests, provided your fundamental rights are not harmed. Where none of these applies, your data is processed only with your explicit consent.

Limited to the purposes above, your data may be transferred to competent public authorities, legally authorised private parties, accreditation and certification bodies, and our service providers (hosting, IT, accounting and legal counsel).

Where your certification request must be processed by the competent body in the destination country (e.g. the Russian Federation, Ukraine, Saudi Arabia), the relevant data is transferred abroad in accordance with Article 9 of the KVKK — relying on appropriate safeguards where available or, for incidental transfers, on the transfer being necessary for the performance of the contract or on your explicit consent.

Your data is kept for the periods required by law or by the purpose of processing, after which it is deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

By applying to the Company, you may:

• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether data is used accordingly,
• Know the third parties to whom data is transferred in Türkiye or abroad,
• Request correction of incomplete or inaccurate data,
• Request deletion or destruction under the conditions of Article 7,
• Request that correction, deletion or destruction be notified to third parties to whom data was transferred,
• Object to a result against you arising exclusively from automated analysis,
• Claim compensation for damages arising from unlawful processing.

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests in writing with a wet signature to Topçular Mah. Axis İstanbul AVM Ofis Blokları Kat:2 No:18, Eyüpsultan / İstanbul, via registered electronic mail (KEP), with a secure electronic or mobile signature, or by email to info@sertifikaofisi.com from an email address previously notified to us and registered in our systems.

Your application should include your name, surname, signature (for written applications), Turkish ID number (for foreign nationals: nationality and passport / ID number), address for notifications, email and phone if any, and the subject of your request.

Requests are concluded free of charge within 30 days at the latest. If the process involves an additional cost, the fee set by the Personal Data Protection Board may be charged. If your request is rejected, the answer is insufficient or no answer is given in time, you may file a complaint with the Board under Article 14 of the KVKK.