1. Introduction
At RMA YAPI, we value your privacy and are committed to protecting your personal data. This policy explains what data we collect, how we use it, how it may be shared, and what rights you have. The text has been prepared in accordance with applicable data protection laws, primarily the Turkish Personal Data Protection Law (KVKK) and the European Union General Data Protection Regulation (GDPR).
2. Data Controller
RMA YAPI
3. Data We Collect
- Name, surname, email, phone number, country, and contact information
- Content and requests you provide in contact forms
- IP address, browser information, visit time/duration, and cookie data
- Your preferences and marketing data (if subscribed)
4. Purposes and Legal Bases for Processing
Your data is processed for the following purposes and based on the relevant legal grounds:
- Responding to inquiries and requests (performance of a contract / legitimate interest)
- Evaluating service offers and managing contracts (contract performance)
- Measuring and improving website performance (legitimate interest)
- Providing marketing communication (with explicit consent)
- Fulfilling legal obligations (legal requirement)
6. Data Retention
Your data is stored for as long as necessary to fulfill the purposes for which it was collected or for the period specified by relevant laws. After this period, your data will be securely deleted, destroyed, or anonymized.
7. Data Security
RMA YAPI implements technical and administrative measures to protect personal data, including access controls, encryption, firewalls, regular backups, and staff training.
8. Additional Information for EU/EEA and UK Users
Key information for visitors from the EU/EEA or the United Kingdom:
- Your data may be processed in Turkey; in such cases, appropriate safeguards (e.g., Standard Contractual Clauses) will be applied to ensure adequate protection.
- Under GDPR, you have the right to access, correct, delete, transfer, restrict, or object to the processing of your personal data.
- The legal basis for processing depends on the nature of your request and may include contract performance, consent, legal obligation, or legitimate interest.
9. Your Rights and Contact
Under KVKK and GDPR, you have the following rights:
- To learn whether your personal data is being processed
- To request information regarding such processing
- To request correction of incomplete or inaccurate data
- To request deletion, destruction, or anonymization of your data
- To object to processing for marketing or legitimate interest purposes
- To exercise your right to data portability under GDPR
You may submit your requests via email to [email protected] or in writing to our offices. Applications will be answered within 30 days under KVKK or within a reasonable time under GDPR, free of charge.
11. Policy Updates
This policy may be updated from time to time. Changes become effective upon publication on our website. Users will be informed of any significant updates.