Privacy Notice

• Identity data: first name, last name.
• Contact data: e-mail address, phone number, country.
• Professional and company data: company name, job title, industry.
• Enquiry data: the subject you select on the contact and fair forms, how you heard about us, your message, the fair where we met.
• Transaction security data: IP address, browser and device information, access time and requested pages (server access logs), bot-verification result, your cookie and language preferences.
• Marketing and analytics data: analytics on how the site is used, only if you accept cookies; a record of your consent if you opt in to commercial messages.

The site does not request or process ID numbers, financial data, health data or any other special category of personal data.

Your personal data is collected electronically, by automated or partly automated means, when you fill in the contact and fair forms, through the server logs created while you browse the site, and through cookies. Form submissions are delivered to the relevant team through the Company's corporate e-mail servers hosted in Türkiye.

• The identity, contact, professional and enquiry data you submit through a form is processed on the legal grounds of KVKK Article 5/2-c (processing directly related to the conclusion or performance of a contract) and Article 5/2-f (legitimate interest), because it is necessary to contact you at your request and to run pre-contractual processes.
• Transaction security data is processed on the legal ground of KVKK Article 5/2-f (legitimate interest), to keep the site secure and working and to prevent misuse.
• Analytics cookie data and commercial electronic messages are processed only on the basis of your explicit consent under KVKK Article 5/1. You may withdraw your consent at any time.

• Carrying out communication activities and following up requests and complaints
• Running product demo, sales and partnership processes
• Following up after fairs and events
• Managing customer relationship processes
• Running information security processes and securing the data controller's operations
• Conducting activities in compliance with legislation and providing information to authorised persons, institutions and organisations
• Carrying out storage and archiving activities
• With your explicit consent: running advertising, campaign and marketing processes and analysing site usage

Your personal data is not processed for any other purpose.

In accordance with KVKK Article 8, your personal data may be transferred within Türkiye to group companies under SAN Companies and to business partners in order to handle your request, and to authorised public institutions and organisations in order to meet legal obligations.

The website itself and some of the service providers used to run it are hosted on servers outside Türkiye. To that extent your personal data may be transferred abroad within the scope of KVKK Article 9:

• Amazon Web Services (AWS): hosting of the website, Ireland (eu-west-1, European Union) data centre. All data you submit through the site and the server access logs are processed on this infrastructure.
• Cloudflare (Turnstile bot verification): IP address and browser information on form submissions.
• Google (Google Analytics 4, Google Tag Manager): site usage data, only if you accept cookies. By accepting, you also give explicit consent to this transfer.
• Document viewing and cloud-based collaboration tools: processing form submissions within the relevant team.

These transfers rely on the appropriate safeguards required by the Law (adequacy decisions, standard contractual clauses and similar mechanisms); this notice is updated as information about the safeguard mechanism used becomes available.

Information you submit through a form is kept for as long as needed to handle your request and for the limitation periods set by the applicable legislation. Server access logs are kept for a limited time for security purposes. Cookie durations are listed in the Cookie Policy.

Personal data whose processing ground no longer exists is deleted, destroyed or anonymised in the periodic destruction cycles (at least every six months) or, at your request, within thirty days at the latest.

Under Article 11 of KVKK you have the right:

• to learn whether your personal data is processed,
• to request information if it has been processed,
• to learn the purpose of processing and whether the data is used in line with that purpose,
• to know the third parties to whom your data is transferred, in Türkiye or abroad,
• to request correction of incomplete or inaccurate data,
• to request erasure or destruction of your data under the conditions set out in Article 7 of the Law,
• to request that corrections and erasures be notified to the third parties to whom the data was transferred,
• to object to a result to your detriment arising from analysis of your data exclusively by automated systems,
• to claim compensation for damage suffered due to unlawful processing.

Before lodging a complaint with the Personal Data Protection Board you must first apply to the data controller through the channels below. Your request is concluded free of charge within 30 days at the latest; if the process incurs an additional cost, the fee set by the Board's tariff may be charged. If your request is rejected, the response is found insufficient or no response is given in time, you may lodge a complaint with the Board.

You may submit your requests, together with information and documents that identify you, through the channels below. The data controller reserves the right to verify the identity of the applicant.

• SAN BİLGİSAYAR TİCARET TURİZM İTHALAT VE İHRACAT AŞ
• Pınarbaşı Mh. Hürriyet Cad. Antalya Teknokent ARGE 5 3F/2 Konyaaltı, Antalya, Türkiye
• Phone: +90 850 777 00 00
• E-mail: info@santsg.com

• Name / Title: SAN BİLGİSAYAR TİCARET TURİZM İTHALAT VE İHRACAT AŞ
• Address: Pınarbaşı Mh. Hürriyet Cad. Antalya Teknokent ARGE 5 3F/2 Konyaaltı, Antalya, Türkiye
• MERSİS No: 0742042956600027
• Tax Office / No: Antalya Kurumlar VD. 7420429566