INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

ENDA.COM WEBSITE

1. Data Controller

This Information Notice has been prepared by Sisel Mühendislik Elektronik Sanayi ve Ticaret Anonim Şirketi ("Company"), in its capacity as data controller, within the scope of Article 10 of the Law on the Protection of Personal Data No. 6698 ("KVKK") and the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform.

Data Controller Title: Sisel Mühendislik Elektronik Sanayi ve Ticaret Anonim Şirketi
Address: Şerifali Mah. Barbaros Cad. No:18/1 Ümraniye/İstanbul
Telephone: 0216 499 46 64

The Company has adopted the principle of processing personal data processed through the website or in processes related to the website; in accordance with the law and the principles of good faith, accurate and up to date when necessary, for specific, explicit and legitimate purposes, in a manner that is relevant, limited and proportionate to the purpose for which they are processed, and limited to the period stipulated in the relevant legislation or required for the purpose of processing.

2. Scope and General Explanations

This Information Notice, within the scope of the website offered under the domain name enda.com ("Website/Site");

Visitors who visit the Site,
Persons who contact the Company,
Persons who request information regarding products/services,
Persons who contact within the scope of dealer/business partnership processes,
Relevant persons with whom the Company establishes relations through digital channels within the scope of announcement, information, offer, sales, after-sales support and operational processes

explains the basic principles regarding the processing of personal data.

3. Categories of Personal Data Processed

Through the Website and related digital contact points, the following data categories may be processed, varying according to the processing purposes and legal grounds:

Identity: Name-surname (if declared during communication/application processes)
Contact: Telephone number, e-mail address, address information (to the extent required in request/offer/contract processes)
Customer/Transaction: Transaction records regarding offer-order-delivery-waybill-invoice processes (according to the type of request)
Legal Transaction: Correspondence and file information within the scope of dispute/complaint/mediation/lawsuit processes (when necessary)
Transaction Security: IP address, access logs, session information, technical records regarding Site usage
Marketing (if consent is given): Advertising measurement/attribution information, cookie identifiers
Audio-Visual Records: Camera records in case of a physical visit to the Company premises (in scenarios where contact occurs, not limited to the Website)

As a rule, the Company does not aim to process special categories of personal data; however, if required by legislation or if the relevant process necessitates it, actions are taken within the framework of Article 6 of the KVKK and Board decisions by taking the necessary administrative and technical measures.

4. Purposes of Processing Personal Data

Your personal data may be processed within the scope of the Website and Company activities, depending on the nature of the concrete process, especially for the following purposes:

Communication and Request Management: Receiving, evaluating and concluding visitor/relevant person requests; providing information regarding products and services; managing request-complaint processes.
Offer, Order, Sales and After-Sales Processes: Preparation/submission of offers, execution of order and delivery operations, issuance of waybills and invoices and completion of financial processes, execution of warranty-maintenance-repair processes.
Business Partnership/Dealer Processes: Establishing communication in dealer network and business partnership processes, creating relevant records and managing the processes.
Information Security and Operational Continuity: Ensuring the security of the Website and information systems, preventing unauthorized access, conducting cyber security controls, managing logs and traffic records.
Legal Compliance and Fulfillment of Obligations: Fulfilling obligations arising from legislation, responding to requests of authorized institutions/organizations, managing disputes and establishing/exercising/protecting the Company's rights.
Human Resources Application Processes (if any): Evaluating candidate applications, determining qualifications and suitability, making evaluations regarding salary and working conditions, conducting interview and recruitment processes.
Cookie Management and Site Experience: Remembering site preferences, performance/statistics measurement and conducting advertising measurement and marketing activities if explicit consent is given.

5. Method of Collecting Personal Data

Your personal data may be collected through the Website by automatic means (cookies, logs, technical records) and/or through communication channels you establish with the Company (telephone, e-mail, correspondence, contracts and annexes, delivery/operational processes) by verbal-written-electronic methods.

6. Legal Grounds for Processing Personal Data

Your personal data are processed based on the following legal grounds under Articles 5 and 6 of the KVKK, depending on the concrete data processing activity:

KVKK Art. 5/2(c): Processing is necessary, provided that it is directly related to the establishment or performance of a contract
KVKK Art. 5/2(ç): Processing is mandatory for the data controller to fulfill its legal obligation
KVKK Art. 5/2(e): Processing is mandatory for the establishment, exercise or protection of a right
KVKK Art. 5/2(f): Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
KVKK Art. 5/1: Explicit consent (especially for advertising/marketing cookies and similar preference-based processes)

7. Transfer of Personal Data and Recipient Groups

Your personal data may be transferred to the following recipient groups, limited to the purposes above and by taking the necessary security measures, within the framework of the relevant legislation:

Authorized public institutions and organizations (upon duly request and as required by legislation)
Judicial authorities and relevant file parties, lawyers and consultants within the scope of mediation/arbitration processes
Persons/institutions providing services in accounting and financial processes
Cargo, transportation and logistics companies (if necessary for the delivery of products/documents)
Banks/payment institutions (within the scope of collection/payment processes)
IT/infrastructure and software service providers (hosting, maintenance, security, analytics, advertising technologies, etc.) — especially third-party providers may be involved through cookies.

In the event of a transfer abroad, the transfer is carried out within the framework of Article 9 of the KVKK and current Board regulations, by observing appropriate safeguards and/or the explicit consent conditions of the data subject.

8. Retention Period and Disposal

The Company stores personal data limited to the periods stipulated in the relevant legislation and the period required for the processing purpose. When the retention period expires or the processing purpose ceases to exist, personal data are deleted, destroyed or anonymized in accordance with Article 7 of the KVKK and the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

9. Cookies and Similar Technologies

On the Website; cookies may be used for remembering preferences, statistics/performance measurement and advertising measurement/marketing activities if explicit consent is given. Guidance regarding cookie use is also provided on the information screen on the Site.

According to the cookie detections provided by you, the following cookies may operate on the Website:

A) Analytics / Performance Cookies

_ga (Google Analytics) – user/session distinction and statistical measurement (e.g. 2 years)
_ga_CYEF9XECWR (Google Analytics) – GA4/measurement component (e.g. 2 years)

B) Marketing / Advertising Measurement Cookies (with explicit consent)

_gcl_au (Google Ads/Conversion) – campaign conversion measurement
ar_debug (DoubleClick/Google Ads) – test/diagnostic cookie for advertising measurement and debugging purposes
DSID (DoubleClick) – identifier within the advertising targeting/measurement ecosystem
id (DoubleClick) – advertising identifier / targeting-measurement

C) Mandatory / Preference Management Cookies

cookie-consent – management of cookie preference status
dont-offer-english – remembering language preference / session/preference record for user experience purposes

You may manage your cookie preferences; (i) through the preference panel on the Site, (ii) through your browser settings, and you may change them at any time or delete cookies. Withdrawal of explicit consent for marketing cookies produces results prospectively.

10. Your Rights Under the KVKK

Pursuant to Article 11 of the KVKK; by applying to the Company, you have the right to learn whether your personal data are processed, to request information if processed, to learn the purpose of processing and whether they are used in accordance with that purpose, to know the third parties to whom data are transferred domestically/abroad, to request correction if incomplete/incorrectly processed, to request deletion/destruction/anonymization when the conditions of Article 7 of the KVKK are met, to request notification of these transactions to third parties to whom data are transferred, to object to the occurrence of a result against you by analysis through automated systems, and to request compensation for the damage in case of unlawful processing.

11. Application Method

Pursuant to Article 13 of the KVKK and the Communiqué on the Principles and Procedures for Application to the Data Controller, you may submit your applications;

In writing or in a manner that will enable verification of your identity,
By hand delivery to the Company address / through a notary / by registered mail with return receipt,
By e-mail (through your e-mail address registered in the Company system) to ik@enda.com.tr,
Electronically by using a secure electronic signature/mobile signature.

The Company concludes the applications within 30 (thirty) days at the latest; if the process requires an additional cost, a fee may be requested according to the tariff determined by the Board.