Personal Data Protection and Privacy Policy
Last updated: 10 August 2026
1. Data Controller
Pursuant to Turkish Law no. 6698 on the Protection of Personal Data ("KVKK"), the data controller is:
| Company name | Kariyer Mefrusat Aydınlatma Mobilya Dekorasyon San. ve Tic. Ltd. Şti. |
| Address | Oba Mah. Çevre Yolu Cad. No:18 Alanya / Antalya, Türkiye |
| Tax office / number | Alanya V.D. / 5240531103 |
| Mersis number | 0524053110300015 |
| Phone | +90 242 514 33 11 |
| kvkk@kariyergroup.com.tr | |
| Website | kariyergroup.com.tr |
In this document "the Company", "we" or "Kariyer Group" refers to the data controller identified above.
2. Which Personal Data We Process
2.1 Through the quote and contact form
| Data Category | Data Collected |
|---|---|
| Identity | First name, last name |
| Contact | Email address, phone number |
| Customer transaction | Business name and type, subject of the request, message content |
| Transaction security | Date and time of submission, selected site language, address of the page the form was submitted from |
When you submit the form, your request reaches us through the infrastructure of our email delivery provider. Connection data such as your IP address may be recorded by that provider during transmission.
2.2 Automatically while visiting the website
| Data Category | Data Collected |
|---|---|
| Transaction security | IP address, browser and device information, operating system, access date and time (in the server logs of our hosting and content delivery infrastructure) |
| Preference | Your cookie preference (strictly necessary cookie only; see the Cookie Policy for details) |
We currently use no analytics or advertising cookies on this site. For detailed information about cookies: Cookie Policy
3. Purposes of Processing
- Responding to your quote and information requests
- Answering questions and complaints regarding our products and services
- Conducting pre-contractual negotiations and, where applicable, the contract process
- Managing after-sales support and customer relations
- Ensuring the security of the website and preventing misuse
- Fulfilling retention, notification and reporting obligations arising from legislation
- Sending campaign and promotional content, where you have given explicit consent
4. Legal Grounds
Your personal data is processed on the following legal grounds within the scope of Article 5 of the KVKK:
| Activity | Legal Ground (KVKK Art. 5) |
|---|---|
| Responding to your quote request | Art. 5/2-(c) Directly related to the conclusion or performance of a contract |
| Site security, strictly necessary cookies | Art. 5/2-(f) Legitimate interest of the data controller |
| Statutory retention obligations | Art. 5/2-(ç) Fulfilment of a legal obligation |
| Analytics and marketing cookies | Explicit consent (Art. 5/1) |
| Commercial electronic messages | Explicit consent (Art. 5/1) |
Processing for analytics and marketing purposes takes place only with your explicit consent. Withholding consent does not prevent you from using our site, and you may withdraw your consent at any time.
5. Recipients of Your Personal Data
Your personal data may be transferred to the following groups of recipients in accordance with Articles 8 and 9 of the KVKK:
| Recipient Group | Purpose of Transfer |
|---|---|
| Our hosting service provider | Operating the website and storing data |
| Our content delivery network (CDN) provider | Delivering the site quickly and securely |
| Our form delivery and email infrastructure provider | Delivering your quote and contact requests to us |
| Authorised public institutions | Requests for information and documents arising from legislation |
| Legal, accounting and audit service providers | Fulfilment of legal obligations |
Transfers abroad
The servers of our content delivery network and form delivery providers are located abroad. Accordingly, data such as your IP address and the content of your form submission may be transferred abroad. Such transfers are carried out on the basis of one of the appropriate safeguards set out in Article 9 of the KVKK — an adequacy decision, standard contractual clauses or an undertaking — or on the basis of your explicit consent. Our hosting service is located in Türkiye.
6. Retention Periods
| Data | Retention Period |
|---|---|
| Quote / contact form records | 2 years after the request is concluded |
| Records that result in a contract | 10 years from the end of the relationship (Turkish Code of Obligations Art. 146) |
| Data related to commercial books and records | 10 years (Turkish Commercial Code Art. 82) |
| Site traffic and security logs | 1 year |
| Cookie records | The periods stated in the Cookie Policy |
| Marketing data based on explicit consent | Until consent is withdrawn |
At the end of the retention period your personal data is deleted, destroyed or anonymised.
7. Your Rights (KVKK Art. 11)
In relation to your personal data, you have the right to:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether the data is used in accordance with that purpose
- Know the third parties to whom the data is transferred, in Türkiye or abroad
- Request rectification if the data is incomplete or incorrect
- Request erasure or destruction under the conditions set out in the law
- Request that rectification, erasure and destruction be notified to the third parties to whom the data was transferred
- Object to an adverse outcome arising from analysis carried out solely by automated systems
- Claim compensation for damage suffered due to unlawful processing
How to apply
You may submit your requests, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- In writing: by signed petition to Oba Mah. Çevre Yolu Cad. No:18 Alanya / Antalya, Türkiye
- With a secure electronic signature or mobile signature: kvkk@kariyergroup.com.tr
- From the email address registered in our systems: kvkk@kariyergroup.com.tr
Your application will be concluded free of charge within 30 days at the latest. If the process entails an additional cost, the fee set out in the tariff determined by the Board may be charged.
If your application is rejected, if you find the response insufficient or if no response is given within the applicable period, you may file a complaint with the Personal Data Protection Board within 30 days of learning the response and in any event within 60 days of the date of application.
8. Data Security
Technical and administrative measures are taken to ensure an appropriate level of security in order to prevent unlawful processing of and access to your personal data and to ensure its safekeeping. These include access authorisation, encryption, up-to-date software infrastructure, regular backups, confidentiality undertakings by employees and data processor agreements with service providers.
9. Changes
This policy may be updated in line with developments in legislation and changes in our business processes. The current text is always published on this page.