Corporate

Privacy Policy and Personal Data Protection Notice

Information on how your personal data is processed under the Turkish Personal Data Protection Law No. 6698 (KVKK) and applicable data protection rules.

This notice has been prepared by our company, acting as data controller, to explain how the personal data of visitors to our website and of people who contact us is processed under the Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Data Controller

Your personal data is processed by AHM SERA (the "Company") as data controller, within the scope and for the purposes described below.

Company contact details: Address: 1st Organised Industrial Zone, 100th Street No: 1, Selçuklu / Konya, Türkiye — Email: info@ahmsera.com — Phone: +90 (555) 000 00 00.

2. Personal Data We Process

If you complete a contact or quotation form on our website, the following data may be processed:

Identity data: first name, last name
Contact data: phone number, email address, city/region
Project data: land location and size, target crop, greenhouse type requested
Request data: the content of your form message and your request history
Transaction security data: IP address, browser information, cookie records, server access logs

3. Purposes of Processing

Your personal data is processed for the following purposes:

Evaluating and responding to your quotation, survey and design requests
Establishing, performing and following up on contracts
Providing after-sales technical support, maintenance and warranty services
Managing requests and satisfaction processes, and carrying out communication activities
Complying with legal obligations and providing information to authorised authorities
Ensuring website security and measuring service quality

4. Legal Grounds

Your personal data is processed on the legal grounds set out in Article 5/2 of the KVKK, namely (a) explicit provision by law, (c) direct relevance to the conclusion or performance of a contract, (ç) compliance with a legal obligation, (e) establishment, exercise or protection of a right, and (f) legitimate interest; where none of these apply, it is processed based on your explicit consent.

5. Transfer of Personal Data

Limited to the purposes stated above, your personal data may be transferred to IT, hosting, email and accounting service providers, logistics and installation partners, independent audit firms and authorised public institutions and organisations within the framework of Articles 8 and 9 of the KVKK.

Where a transfer abroad is required, no transfer is made without the appropriate safeguards foreseen under the relevant articles of the KVKK.

6. Retention Period

Your personal data is retained for as long as the processing purposes require and taking into account the maximum periods stipulated by applicable legislation. At the end of these periods the data is deleted, destroyed or anonymised. Records created following your request are destroyed once commercial and legal retention obligations end.

7. Your Rights Under Article 11 of the KVKK

Under Article 11 of the KVKK you have the following rights:

To learn whether your personal data is being processed
To request information if it has been processed
To learn the purpose of processing and whether it is used in line with that purpose
To know the third parties to whom it is transferred domestically or abroad
To request rectification of incomplete or inaccurate data
To request deletion or destruction within the scope of Article 7 of the KVKK
To request that rectification or deletion be notified to third parties to whom the data was transferred
To object to results arising against you through analysis exclusively by automated systems
To claim compensation for damages suffered due to unlawful processing

8. How to Apply

You may submit requests regarding your rights in writing to our company address, or from your email address registered in our system to info@ahmsera.com, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on its nature. Where the transaction also requires a cost, the fee set out in the tariff determined by the Authority may be charged.

9. Cookies and Analytics

Our website may use strictly necessary cookies for the site to function, functional cookies that remember your preferences, and analytics cookies that measure visit behaviour anonymously. You may delete or block cookies at any time in your browser settings; however, disabling strictly necessary cookies may cause some parts of the site to stop working.

10. Data Security

The Company takes the technical and administrative measures required to ensure data security, in order to prevent personal data from being disclosed, accessed, transferred or otherwise processed unlawfully. In this context, access authorisation, encryption, regular backups, logging and employee awareness training are applied.

11. Updates

This notice may be revised in line with legislative changes or updates to our services. The current version of the notice is always published on this page.

This text is a template. Before going live we recommend a review by your legal counsel, together with the company's registered title, address, tax details and any list of data processors.