Purpose
This text has been prepared by Hidroser Hydraulic Press (hereinafter referred to as the “Company”) within the framework of the Personal Data Protection Law No. 6698 (“PDPL”); to provide information about the personal data collected, processed, and stored within the scope of the services provided by the Company, the activities carried out, potential business relationships, and communication processes, the purposes for which these data will be used, to whom they may be transferred, the rights of the data owner, and the security measures to be applied.

Data Controller
As the data controller;
Hidroser Hydraulic Press
Address: Minareli Çavuş OSB Mah. Köknar Cad. No: 44, 16140 Nilüfer / Bursa / TURKEY
Phone: +90 224 441 23 23
E-mail: hidroser@hidroserbursa.com

Scope
This clarification text covers personal data collected in areas such as internal and external service processes (e.g., sales, support, maintenance-service, candidate/application, supplier relations, etc.), potential customer/poly relationships, employee candidacy processes, and website/cookie usage.

Collected Personal Data and Purposes
The following categories of personal data may be collected by our Company:

• Identity and contact information: Name, surname, phone number, email address, fax, postal address.

• Website and cookie data: IP address, device information, browser type, visited pages, cookie preferences, usage habits.

• HR/candidate data (if any): Resume information, education and work experience, references, interview records.

These data are processed for the following purposes:

• Execution of the products and services offered by our Company, management of after-sales support and service processes.

• Establishing and maintaining communication with customers, suppliers, and business partners.

• Execution of contracts, realization of billing and payment transactions.

• Website and digital content management, usage analyses, monitoring for security purposes.

• Evaluation of applications in candidate/employee processes, execution of recruitment processes.

• Fulfillment of obligations arising from legislation (e.g., tax, accounting, auditing).

• Execution of internal business processes, monitoring of occupational safety, quality, and performance processes.

Legal Reasons
The following legal reasons are applied in the processing of personal data:

• Explicit consent of the relevant person.

• Explicitly stipulated in the laws.

• Necessary for the establishment or performance of a contract.

• To fulfill the legal obligation of the data controller.

• Protection of vital interests.

• Existence of legitimate interest (e.g., improving service quality, machine safety, internal efficiency).

Data Transfer
Our Company may share your personal data with the following persons and/or institutions:

• Relevant third-party suppliers and service companies with whom sales, service, maintenance agreements are made.

• Banks and payment service providers for financial transactions.

• Web analytics, cloud data services, and hosting providers.

• Professional firms providing support services such as auditing, financial consultancy, legal services.

• Legally authorized public institutions and organizations (tax office, SSI, etc.).

Transfer may be made to domestic or, if necessary, foreign (outside EU/EEA countries) data processing organizations; in this case, measures in compliance with the legislation will be taken.

Data Security
Technical and administrative measures are applied to ensure that personal data are processed in accordance with the law, and protected against unauthorized access, alteration, deletion, or damage. These measures include but are not limited to:

• Access control mechanisms, user authorizations.

• Data encryption, secure servers, firewall, antivirus solutions.

• Not storing personal data in open environments, backup systems.

• Defining tasks related to data processing activities, personnel training.

• Monitoring and recording data security incidents.

Data Retention Period
Personal data are retained until the end of the period necessary for the processing purpose and/or until the retention periods stipulated in the relevant legislation (e.g., tax, accounting, labor law regulations) expire. When the period ends, the data are either deleted or anonymized and retained.

Rights of the Relevant Person
Pursuant to Article 11 of the PDPL, as a data subject, you have the following rights:

1. To learn whether your personal data are processed or not,

2. To request information if they have been processed,

3. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

4. To learn whether they are transferred domestically or abroad, and if transferred, to which country,

5. To request the correction of incomplete or incorrectly processed data,

6. To request their deletion or destruction in accordance with the conditions,

7. To request the anonymization of data if the purpose of processing has disappeared or has become unlawful,

8. To object to being evaluated by automatic systems within the framework of the relevant legislation (profiling),

9. To request compensation for damages in case of suffering a loss.

If you request the exercise of these rights, our Company will conclude it free of charge as soon as possible and within no later than 30 days.

Application Procedure
Data subjects can apply in writing to the following address to exercise their rights listed above with our Company:
Hidroser Hydraulic Press
Minareli Çavuş OSB Mah. Köknar Cad. No: 44, 16140 Nilüfer / Bursa / TURKEY
Email: hidroser@hidroserbursa.com
They can apply by filling out the “Data Subject Application Form” (if any) on the website. Submitted applications will be evaluated and concluded as soon as possible.

Changes
This clarification text may be updated from time to time as required by the PDPL and other relevant legislation. The current text will be published on our website.

Enforcement
This text will be effective as of the date it is published.