Privacy Policy & Personal Data Notice

1. Data Controller

Your personal data is processed by Berkbey Elektrik Elektronik Asansör Makine Mühendislik İnşaat Turizm Sanayi Ticaret Limited Şirketi ("Berkbey Elektrik Asansör Market", "we") as data controller, in accordance with Turkish Law No. 6698 (KVKK).

Address: Kızılarık Mahallesi Gazi Bulvarı No:294/C, 07310 Muratpaşa / Antalya
Tax Office: Antalya Kurumlar — Tax No: 1650309478
MERSIS No: 0165030947800014 — Trade Registry No: 94078
Email: info@berkbeyelektrik.com — Phone: 0 (242) 244 89 31

2. What Personal Data We Process

• Contact form data: full name, phone number, email address and message content.
• Customer account data: if you create an account in our online store, your full name, email address, phone number and password (stored irreversibly hashed — we cannot read it).
• Order and invoice data: full name, phone, email, order contents and total, payment method, delivery preference; delivery address where shipping is selected; company name, tax office and tax number where a corporate invoice is requested.
• Approval and contract records: a record of the pre-information and distance sales agreement approvals you give when placing an order, and a copy of the agreement filled in with your name, contact and delivery details and order contents, with the approval time and IP address (we are legally required to be able to evidence these).
• Transaction security data: IP address and timestamp for failed admin panel logins, and for contact form submissions to prevent abuse.
• Automatically collected data: only if you consent to cookies — IP address, browser/device information and site usage statistics (see our Cookie Policy).

We never process your card details. If you pay by credit/debit card, the details are entered directly on the secure page of the payment institution (PayTR) and never reach our servers.

Please note: our online store is currently available in Turkish only.

3. Purposes of Processing

• Responding to requests and questions submitted via the contact form,
• Handling price quote, dealership or technical support requests,
• Taking your order, tracking its payment, preparing and delivering it,
• Creating your account and letting you sign in and view your order history,
• Issuing invoices and meeting our accounting and tax obligations,
• Handling withdrawal, return, exchange and warranty requests,
• Notifying you by email about the status of your order,
• Keeping our systems secure and preventing abuse,
• Complying with our legal obligations,
• Where you consent, analyzing site usage statistics to improve our service.

4. Legal Basis

• Order, delivery and account data: KVKK Art. 5/2-c — directly related to the establishment or performance of a contract.
• Invoice, accounting and commercial records: KVKK Art. 5/2-a — expressly provided for by law, and Art. 5/2-ç — compliance with our legal obligations (Turkish Tax Procedure Law and Turkish Commercial Code).
• Contact form data: KVKK Art. 5/2-c — necessary for entering into or performing a contract (quotes and pre-order requests) and Art. 5/2-f — legitimate interest, provided it does not harm your fundamental rights and freedoms (other requests and questions).
• Transaction security records: KVKK Art. 5/2-f — legitimate interest (system security, prevention of abuse).
• Strictly necessary cookies: KVKK Art. 5/2-c and 5/2-f — for the session, cart and site security.
• Analytics cookies and external content (Google Maps): only with your explicit consent (KVKK Art. 5/1), given per category in the cookie notice; you can withdraw it at any time via "Cookie Preferences".

5. Data Transfers

Your personal data is shared only with the following parties and only to the extent necessary:

• Courier companies: where you choose delivery by courier, your name, phone and delivery address are transferred to our contracted courier company in order to deliver the shipment.
• Payment institution (PayTR): where you pay by card, your name, email, phone, address and order total are shared with PayTR in order to process the payment. Your card details never reach us.
• Banks: where you pay by bank transfer, your name and order number appear in our bank account records so the payment can be matched.
• Our email and hosting provider: in the course of operating our server and email infrastructure.
• Our accountant: for keeping invoices and statutory books.
• Competent public authorities: where required by law.
• Google LLC: only if you allow the relevant cookie category, as part of Google Analytics (analytics) and Google Maps (external content). In that case your data may be transferred outside Turkey via Google's servers.

Other than the above, we do not sell or share your data with third parties for marketing purposes.

6. Retention Period

• Order, invoice and commercial records: 10 years, as required by the Turkish Tax Procedure Law and the Turkish Commercial Code. The order-specific copy of the pre-information form and distance sales agreement is kept with the order for the same period.
• Customer account data: for as long as your membership continues; if you delete your account, it is erased except for records we are legally required to keep (orders/invoices).
• Contact form data: for the time reasonably necessary to respond to your request and for potential legal purposes, after which it is deleted or anonymized.
• Password reset links: expire after 1 hour.
• Transaction security records: short-lived — login attempt and form submission records are cleaned up automatically.

Data whose retention period has expired is deleted, destroyed or anonymized.

7. Your Rights Under KVKK

Under Article 11 of KVKK, you may apply to us to:

• Learn whether your personal data is being processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties to whom it is transferred domestically or abroad,
• Request correction if processed incompletely or incorrectly,
• Request deletion or destruction where the conditions of KVKK Art. 7 are met,
• Request that the above actions be notified to third parties to whom the data was transferred,
• Object to a result that is to your detriment arising from analysis exclusively by automated systems,
• Request compensation for damages arising from unlawful processing.

To exercise these rights, apply to us using one of the methods below, as required by the Turkish Communiqué on Principles and Procedures for Applications to the Data Controller. Your application is concluded free of charge within 30 days at the latest.

• In writing (wet signature): deliver your signed application to Kızılarık Mahallesi Gazi Bulvarı No:294/C, 07310 Muratpaşa / Antalya, in person or through a notary.
• By registered electronic mail (KEP): from your own KEP address to berkbeyelektrik@hs01.kep.tr.
• With a secure or mobile electronic signature: send your signed application to info@berkbeyelektrik.com.
• From the email address registered in our systems: send your request to info@berkbeyelektrik.com.

A ready-to-use application form is available on our KVKK application form page (in Turkish). Using it is optional — a free-text request in English is equally valid.

We need to verify that the application comes from you, so we may ask you to confirm your identity. If your application is rejected, you find our response insufficient, or we fail to respond in time, you may lodge a complaint with the Turkish Personal Data Protection Board within 30 days of learning our response and in any case within 60 days of your application.

8. Data Security

We take reasonable technical and administrative measures to protect your personal data against unlawful access (HTTPS encryption, access restrictions, etc.).

9. Changes

This notice may be updated as needed. The current version is always published on this page. Last updated: August 2026.