Personal Data Policy

Privacy Notice on the Processing of Personal Data

As Kamsan Chair (“Kamsan”), we have prepared this clarification text to inform our visitors, online visitors, customers, potential customers, supplier employees, and supplier representatives regarding the processing, storage, and transfer of their personal data within the framework of the Law on the Protection of Personal Data No. 6698 (“KVKK”), the European Union General Data Protection Regulation (“GDPR”), and other applicable legislation and legal regulations.

1) Which Categories of Personal Data Do We Process and For What Purposes?

Your personal data may be processed by Kamsan Chair in accordance with the principles set out in Article 4.2 of the KVKK: lawfulness and fairness, accuracy and, when necessary, being up to date, processing for specific, explicit, and legitimate purposes, being relevant, limited, and proportionate to the purposes for which they are processed, and being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed. Within the scope of our business relations (a person may fall into more than one category), your data may be processed for the purposes listed below.

A. Visitors

Identity information of our visitors (e.g., name, surname, Turkish ID number, place and date of birth, etc.) will be processed for the purpose of creating and maintaining visitor records.

B. Online Visitors

Transaction security information (e.g., your IP address), marketing information (e.g., shopping history, cookie records), and—if you provide them—identity and contact details (email, address, phone number) of online visitors using our website will be processed to ensure compliance with legislation, manage information security processes, handle requests/complaints, carry out communication activities, and provide access to our website.

C. Customers

Identity, contact, transaction, financial, legal, and marketing data of our individual customers or of the representatives/employees of our corporate customers (e.g., order, invoice, contract information) will be processed for the purposes of compliance with legislation, financial/accounting processes, operational management, logistics, after-sales support, marketing analysis, legal dispute resolution, risk management, and the execution of campaigns, advertisements, and communication activities.

D. Potential Customers

Identity, contact, transaction, and marketing information of our potential customers will be processed for the purposes of managing sales processes, conducting contractual relations, performing marketing analyses, and sending commercial electronic messages based on your explicit consent.

E. Business Partners

Identity, contact, financial, legal, and marketing data of our business partners or their authorized representatives/employees may be processed for the purposes of compliance with legislation, financial management, contractual performance, risk and logistics management, dispute resolution, advertising, promotion, and communication activities.

F. Supplier Employees

Identity, contact, and professional experience data (e.g., training records) of supplier employees will be processed for the purposes of managing communication, operational supervision, supply chain management, logistics, compliance with legal requirements, and occupational health and safety.

G. Supplier Representatives

Identity, contact, transaction, financial, legal, and marketing data of supplier representatives will be processed for the purposes of managing operational activities, purchasing processes, financial/accounting affairs, contractual obligations, and legal compliance.

2) How Do We Collect Your Personal Data?

Your personal data, as categorized above, may be collected through physical means (order forms, contracts, visitor logs, etc.) or electronically (telecommunication infrastructure, computers, phones, third-party systems, our website, and other documents submitted by you), either automatically or manually.

3) How Long Do We Retain Your Personal Data?

Your personal data will be retained for the period prescribed by the relevant legislation or, if no period is specified, as long as our legitimate interests persist, taking into account the following criteria:
1. Kamsan practices
2. Applicable commercial customs
3. Statutes of limitation provided in the relevant legislation
After these periods, personal data will be deleted, destroyed, or anonymized.

4) What Is the Legal Basis for Processing Your Personal Data?

Your personal data is processed by Kamsan Chair for the purposes set forth above in accordance with Article 5 of the KVKK, based on the following legal grounds:
1. Explicitly stipulated by law,
2. Necessity for the establishment or performance of a contract,
3. Compliance with legal obligations,
4. Necessity for the establishment, exercise, or protection of a right,
5. Necessity for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
Additionally, the identity and contact information of our partners, customers, and potential customers may be processed based on their explicit consent for the purposes of advertising, campaigns, promotions, and sending commercial electronic messages. You have the right to withdraw your consent at any time.

5) Do We Transfer Your Personal Data to Third Parties?

Depending on the category of data subjects, personal data may be shared with public authorities, law enforcement, judicial authorities, business partners, logistics companies, suppliers, banks, financial advisors, and law firms in accordance with legal obligations, dispute resolution needs, and service delivery requirements. Transfers are limited to legitimate, lawful purposes only.

6) Do We Transfer Your Personal Data Abroad?

Your personal data may be shared with our partners or suppliers abroad, provided that it complies with Article 9 of the KVKK and GDPR regulations.

7) How Can You Exercise Your Rights Regarding Your Personal Data?

Right to Rectification: You have the right to request the correction or completion of any incorrect or incomplete personal data.
Right of Access: You have the right to request a copy of your personal data. A reasonable fee may apply.
Right to Withdraw Consent: You may withdraw your consent at any time without affecting the lawfulness of prior processing.
Right to Erasure (Right to Be Forgotten): You may request the deletion of your personal data under certain circumstances.
Right to Data Portability: You may request the transfer of your personal data to another organization or directly to yourself.
Right to Restrict Processing: You may request the restriction of data processing under certain conditions.
Right to Object: You may object to the processing of your data in specific situations.
Right to Lodge a Complaint: You may file a complaint with the relevant supervisory authority if you believe your data protection rights have been violated.
You can submit your requests regarding these rights and Article 11 of the KVKK through the “Data Controller Application Form” available at http://www.kamsansandalye.com, prepared to facilitate your application process.

Data Controller: Kamsan Chair
Address: Yeniceköy Mah. Akıncılar Cad. No:6/1 Kalburt Mevkii İnegöl / Bursa / TÜRKİYE
Email: magaza@kamsansandalye.com