Supplier Signature Authority

KVKK

Supplier Signature Authority – Data Protection Notice

As Kiatork Gaz Mühendislik, we provide this notice in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698) and the regulation published in the Official Gazette dated March 10, 2018 (No. 30356).

Purpose of the Notice

To inform supplier representatives about:

What personal data is collected
Why and how it is processed
With whom it may be shared
Legal basis for processing
Data retention and disposal
Rights under KVKK

Personal Data Processed

Collected from authorized supplier representatives:

Identity and contact details (name, TCKN, address, phone, email, GSM, KEP)
Financial and transactional data (bank account, IBAN, tax ID, invoice details, delivery address, purchase history, payment instruments)
Business activity data (product/service purchased, order and request details, workplace address, feedback and survey responses)
Identity registry details (volume/family/serial numbers, place of birth, parents’ names)
Signature

Data Sharing & Processing Purposes

Your data may be shared with:

Public authorities, legal advisors, financial consultants, banks, external service providers, and other suppliers For purposes such as:
Legal compliance and audits
Contract execution and supply chain management
Financial and accounting operations
Customer service and satisfaction activities
Product/service delivery and post-sales support
Complaint and request handling
Operational security and continuity

Collection Methods

Data is collected via:

Service contracts and supplier forms
Electronic or verbal notifications
Order entries and invoicing
Email, spreadsheets, and physical files
ERP and accounting systems
Bank transactions and payment tracking
Surveys and feedback channels

Legal Basis

Contract formation and execution
Legitimate interest of the data controller
Legal obligation
Establishment or protection of legal rights

Your Rights Under KVKK

You may request:

Confirmation of data processing
Access, correction, or deletion
Information on third-party sharing
Objection to automated decisions
Compensation for unlawful processing

Data Protection Measures

We implement technical and administrative safeguards to prevent unauthorized access, misuse, or loss. In case of a breach, relevant authorities and affected individuals will be notified.

Data Accuracy

You are responsible for providing accurate and up-to-date information. Updates should be communicated via the contact details below.

Data Retention and Disposal

Your data will be deleted, destroyed, or anonymized when the processing purpose ends or the legal retention period expires, in accordance with our Data Retention and Disposal Policy.