Privacy Policy

At San Metal A.Ş. ("San Metal", the "Company"), we regard the protection of personal data obtained through our website as one of our fundamental responsibilities. This Privacy Policy has been prepared to explain how personal data belonging to our website visitors is collected, for what purposes it is processed, with whom it is shared, and what rights data subjects have.

The Policy applies to all pages under the sanmetal.com.tr domain. Your use of our website means that you accept the principles set out in this Policy.

In processing personal data we act in compliance with Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the European Union General Data Protection Regulation (GDPR). Accordingly, we process personal data in line with the following principles:

• Lawfulness and fairness
• Accuracy and, where necessary, being kept up to date
• Processing for specified, explicit and legitimate purposes
• Being relevant, limited and proportionate to the purpose of processing
• Being retained only for the period stipulated by the relevant legislation or required by the purpose of processing

The following categories of personal data may be collected through our website:

• Identity Details: Information identifying you, such as first name and surname.
• Contact Details: Email address, telephone number and company details.
• Electronic Data: IP address, browser information, pages visited, session duration and similar usage data.
• Security Logs: Log records kept for website and system security purposes.

This data is collected electronically through methods such as contact forms, newsletter sign-ups, cookies and automated tracking tools.

The personal data collected is processed for the following purposes:

• Ensuring the security of the website
• Responding to requests, applications and contact forms
• Providing information about our products and services
• Improving the user experience
• Fulfilling legal obligations
• Responding to requests from authorised public institutions and organisations
• Use in the resolution of potential disputes

Your personal data is processed on one or more of the following legal grounds:

• Being necessary for the conclusion or performance of a contract
• Processing being necessary for our Company's legitimate interests
• Your explicit consent (obtained in particular for non-essential cookies via the cookie management platform)

Your personal data may be transferred domestically to our business partners, suppliers and service providers for the purpose of carrying out our activities.

In the context of services such as website analytics (for example Google Analytics), your data may be processed on infrastructure located abroad. Such international transfers are carried out within the framework of the security measures and legal safeguards required by the KVKK and the GDPR.

Personal data is retained for as long as the purpose of processing requires and for the periods stipulated by the relevant legislation. General retention periods are illustrated below:

• Cookie data: 2 years maximum
• Contact form data: 3 years maximum
• Log records mandatory under legislation: 2 years minimum

Once the retention period expires, personal data is deleted, destroyed or anonymised, either on our own initiative or upon request.

Under Article 11 of the KVKK, you may apply to our Company as a data subject to exercise the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether the data is used in accordance with that purpose
• To know the third parties, in Türkiye or abroad, to whom the data has been transferred
• To request the correction of data processed incompletely or inaccurately
• To request deletion or destruction
• To request that correction, deletion or destruction be notified to third parties to whom the data was transferred
• To object to an adverse outcome arising from analysis carried out solely by automated systems
• To claim compensation for damage suffered as a result of unlawful processing

You may send your applications to info@sanmetal.com.tr . Depending on their nature, your requests will be concluded within 30 days at the latest.

San Metal takes technical and administrative measures to ensure the security of personal data:

• Firewall and intrusion detection/prevention systems
• Regular penetration tests and security audits
• Managing access rights on a "need to know" basis
• Personal data and information security training for employees
• Logging of system activity and regular auditing

This Privacy Policy takes effect on the date it is published on our website. San Metal reserves the right to update the provisions of the Policy in line with legislative changes, new features offered on the website, or needs arising in practice.

The current version of the Policy will always be accessible from this page. Significant changes may also be announced through appropriate communication channels.