ENDA.COM WEBSITE PRIVACY POLICY - PERSONAL DATA PROCESSING DISCLOSURE

1. Data Controller

This Disclosure Text has been prepared by Sisel Mühendislik Elektronik Sanayi ve Ticaret Anonim Şirketi ("Company") as the data controller, in accordance with Article 10 of the Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation.

Data Controller Title: Sisel Mühendislik Elektronik Sanayi ve Ticaret Anonim Şirketi
Address: Şerifali Mah. Barbaros Cad. No:18/1 Ümraniye/İstanbul
Phone: 0216 499 46 64
E-mail: ik@enda.com.tr

The Company has adopted the principle of processing personal data through the website or processes connected to the website in compliance with the law and rules of honesty, accurately and up-to-date when necessary, for specific-explicit-legitimate purposes, in a manner connected-limited-proportionate to the purpose for which they are processed, and limited to the period stipulated in the relevant legislation/necessary for the processing purpose.

2. Scope and General Explanations

This Disclosure Text, within the scope of the website ("Website/Site") offered under the enda.com domain name;

Visitors who visit the Site,
Individuals who contact the Company,
Those who request information about products/services,
Those who engage with dealer/business partnership processes,
Explains the basic principles regarding the processing of personal data of relevant persons with whom the Company establishes relationships through digital channels within the scope of announcement, information, offer, sales, after-sales support and operational processes.

3. Categories of Personal Data Processed

Through the Website and connected digital touchpoints, the following data categories may be processed, varying according to the processing purpose and legal basis:

Identity: Name-surname (if declared in communication/application processes)
Contact: Phone number, e-mail address, address information (to the extent necessary in request/offer/contract processes)
Customer/Transaction: Transaction records related to offer-order-delivery-waybill-invoice processes (according to request type)
Legal Transaction: Correspondence and file information within the scope of dispute/complaint/mediation/litigation processes (when necessary)
Transaction Security: IP address, access logs, session information, technical records related to Site usage
Marketing (with consent): Advertising measurement/attribution information, cookie identifiers
Visual-Audio Records: Camera recordings in case of physical visit to the Company premises (in scenarios where contact occurs not limited to the Website)

The Company does not aim to process special categories of personal data as a rule; however, if required by legislation or the relevant process necessitates, action is taken within the framework of KVKK Article 6 and Board decisions by taking the necessary administrative/technical measures.

4. Purposes of Processing Personal Data

Your personal data may be processed within the scope of the Website and Company activities, particularly for the following purposes according to the nature of the specific process:

Communication and Request Management: Receiving, evaluating, and finalizing visitor/relevant person requests; providing information about products and services; managing request-complaint processes.
Offer, Order, Sales and After-Sales Processes: Preparing/presenting offers, conducting order and delivery operations, issuing waybills-invoices and completing financial processes, conducting warranty-maintenance-repair processes.
Business Partnership/Dealer Processes: Establishing communication in dealer network and business partnership processes, creating relevant records and managing processes.
Information Security and Operational Continuity: Ensuring the security of the Website and information systems, preventing unauthorized access, conducting cybersecurity controls, managing log and traffic records.
Legal Compliance and Fulfillment of Obligations: Fulfilling obligations arising from legislation, responding to requests from authorized institutions/organizations, managing disputes, and establishing/using/protecting Company rights.
Human Resources Application Processes (if applicable): Evaluating candidate applications, determining qualifications and suitability, conducting evaluations regarding wages and working conditions, conducting interviews and recruitment processes.
Cookie Management and Site Experience: Remembering site preferences, performance/statistics measurement, and conducting advertising measurement and marketing activities if explicit consent is given.

5. Method of Collecting Personal Data

Your personal data may be collected through automatic means via the Website (cookies, logs, technical records) and/or through verbal-written-electronic methods via communication channels you establish with the Company (phone, e-mail, correspondence, contracts and annexes, delivery/operation processes).

6. Legal Reasons for Processing Personal Data

Your personal data is processed based on the following legal grounds within the scope of KVKK Article 5 and Article 6, according to the specific data processing activity:

KVKK Art.5/2(c): Necessity of processing provided that it is directly related to the establishment or performance of a contract
KVKK Art.5/2(ç): Necessity for the data controller to fulfill its legal obligation
KVKK Art.5/2(e): Necessity of data processing for the establishment, exercise or protection of a right
KVKK Art.5/2(f): Necessity for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
KVKK Art.5/1: Explicit consent (especially for advertising/marketing cookies and similar preference-based operations)

7. Transfer of Personal Data and Recipient Groups

Your personal data may be transferred to the following recipient groups within the framework of relevant legislation, limited to the above purposes and by taking necessary security measures:

Authorized public institutions and organizations (upon proper request and as required by legislation)
Judicial authorities and relevant file parties, lawyers and consultants within the scope of mediation/arbitration processes
Persons/institutions providing services in financial advisory and finance processes
Cargo, transportation and logistics companies (when mandatory for product/document delivery)
Banks/payment institutions (within the scope of collection/payment processes)
IT/infrastructure and software service providers (hosting, maintenance, security, analytics, advertising technologies, etc.) — third-party providers may be involved especially through cookies.

When transfer abroad is in question, the transfer is carried out within the framework of KVKK Article 9 and current Board regulations, considering appropriate safeguards and/or the explicit consent conditions of the data subject.

8. Retention Period and Destruction

The Company retains personal data limited to the periods stipulated in the relevant legislation and the period necessary for the processing purpose. When the retention period expires or the processing purpose disappears, personal data is deleted, destroyed or anonymized by methods in accordance with KVKK Article 7 and the Regulation on Deletion, Destruction or Anonymization of Personal Data.

9. Cookies and Similar Technologies

Cookies may be used on the Website for remembering preferences, statistics/performance measurement, and advertising measurement/marketing activities if explicit consent is given. The information screen on the Site also provides guidance on cookie usage.

According to the cookie determinations you have submitted, the following cookies may operate on the Website:

A) Analytics / Performance Cookies

_ga (Google Analytics) – user/session distinction and statistical measurement (e.g., 2 years)
_ga_CYEF9XECWR (Google Analytics) – GA4/measurement component (e.g., 2 years)

B) Marketing / Advertising Measurement Cookies (With Explicit Consent)

_gcl_au (Google Ads/Conversion) – campaign conversion measurement
ar_debug (Double Click/Google Ads) – advertising measurement and debugging test/diagnostic cookie
DSID (DoubleClick) – identifier within the advertising targeting/measurement ecosystem
id (DoubleClick) – advertising identifier / targeting-measurement

C) Mandatory / Preference Management Cookies

cookie-consent – cookie preference status management
dont-offer-english – remembering language preference / session/preference recording for user experience

You can manage, change or delete your cookie preferences at any time through (i) the preference panel on the Site, (ii) your browser settings. Withdrawal of explicit consent for marketing cookies takes effect prospectively.

10. Your Rights Under KVKK

Pursuant to KVKK Article 11; by applying to the Company, you have the right to learn whether your personal data is being processed, to request information about it if processed, to learn its purpose, to learn whether it is used in accordance with its purpose, to know the third parties to whom personal data is transferred domestically/abroad, to request correction if it is processed incompletely/incorrectly, to request deletion/destruction/anonymization when KVKK Article 7 conditions are met, to request that these operations be notified to third parties to whom personal data has been transferred, to object to the emergence of a result against you through the analysis of processed data exclusively through automated systems, and to request compensation for damage in case of unlawful processing.

11. Application Method

Pursuant to KVKK Article 13 and the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your applications;

In writing or in a manner that will verify your identity,
By delivering in person / notary / registered mail to the Company address,
By e-mail (via your e-mail address registered in the Company system) to ik@enda.com.tr,
By electronic means using secure electronic signature/mobile signature.

The Company finalizes applications within 30 (thirty) days at the latest; if the transaction requires additional cost, a fee may be charged according to the tariff determined by the Board.