INFORMATION TEXT REGARDING THE PROCESSING OF PERSONAL DATA

Your personal data collected, stored, transferred or otherwise processed through this website by 2A Mühendislik Sanayi ve Ticaret A.Ş (hereinafter referred to as “2A” or “we”) is subject to and governed by this framework Privacy Policy.

We attach great importance to the confidentiality and security of your personal data. Your personal data is processed by 2A in accordance with the provisions of the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the “KVK Law”), the secondary legislation based on this law, the decisions of the Personal Data Protection Board (hereinafter referred to as the “KVK Board”), together referred to as the “Data Protection Legislation”, as well as all other applicable legislation.

Data That May Be Collected

Depending on your access to and actions performed on the 2A website, the following categories of personal data may be collected:

  • Your identification information, such as your name and Turkish ID number,
  • Personal data relating to e-commerce transactions processed via the infrastructure provider https://www.neticaret.com.tr/. Your personal data may be collected and/or shared within the provider’s infrastructure for the completion of your payment transactions. 2A reserves the right to change this provider at any time.
  • Your IP information,
  • Your contact information,
  • Your user transaction information,
  • Your transaction security information,
  • Your information relating to automotive transactions,
  • Your marketing and communication preferences, and other information that may qualify as personal data under the Data Protection Legislation.

Other information that may constitute personal data under the Data Protection Legislation and may be required for the performance of services offered to you through this website may also be collected and processed for the purposes expressly set out in the Information / Disclosure Notice on the Processing of Personal Data.

Where you share personal data relating to third parties (for example a family member or a customer), it is your responsibility to ensure the following:

  • That the relevant individual has been informed who 2A is and how their personal data will be used (as described in this Privacy Policy), and
  • That you have obtained the relevant individual’s consent for us to process their personal data (including special categories of personal data, where applicable) in the manner described in this Privacy Policy.

Use of Cookies

We use cookies (small data files placed on your device) to help you make the most efficient use of our website and to improve your user experience. If you do not wish cookies to be used, you may delete or block cookies in your browser settings. However, please note that this may affect your ability to use our website. Unless you change your cookie settings from your browser, we will assume that you accept the use of cookies on this site.

  • What Are Cookies and Why Are They Used?

Cookies are small text files that are stored on your device or network server via your browser by the websites you visit. For more detailed information on cookies, please visit http://www.aboutcookies.org/ and http://www.allaboutcookies.org/. The main purposes of using cookies on our Website are as follows:

— To improve the services offered to you by increasing the functionality and performance of the Website,

— To enhance the Website, introduce new features via the Website and personalize the features offered according to your preferences,

— To ensure the legal and commercial security of both the Website, you as the user, and our Company.

Our website uses Google Analytics, PHP, Laravel and mobile integrations. Google Adwords is used to display advertisements based on your interests.

Cookies used for these purposes:

  • record the user’s visit to the website,
  • determine which advertisement will be shown to which user and how frequently, and
  • analyze the effectiveness of advertisements and users’ reactions.

In this way, when you visit other websites, you may be shown advertisements for products that may potentially be of interest to you (based on data collected while using our website). These advertisements may appear in Google search result ad spaces or on other websites. For example, if you have not completed a purchase transaction for a product on our website, you may later see advertisements relating to this product or to us on different websites.

You can learn how to opt out of this option by visiting this link.

If you have chosen to receive direct marketing messages from us by e-mail, we may also use technologies such as pixel tags or tracking links in order to measure your usage and level of interest in direct marketing materials.

Purpose of Data Collection

2A may process the personal data collected through the website for the following purposes: to enable you to benefit from the website; to create your membership registration on the website; to improve the services we provide; to develop our services; to promote and inform you about new services; to provide you with the necessary information within this scope; to contact you when needed; and to fulfill our obligations arising from the nature of the services we provide.

Your personal data may be processed by 2A within the scope of reporting and business development activities and may be used, without revealing your identity, for various statistical evaluations, to create databases and for market research purposes.

In addition, under Articles 5 and 8 of the KVK Law and/or where the relevant legislation provides exceptions, 2A may process and share your personal data with third parties without obtaining your explicit consent. These exceptions include:

  • Where it is explicitly prescribed by law,
  • Where it is necessary to protect the life or bodily integrity of the person who is unable to express their consent due to actual impossibility or whose consent is not deemed legally valid, or of another person,
  • Where it is necessary to process personal data directly related to the conclusion or performance of a contract between you and 2A,
  • Where it is necessary for 2A to fulfill its legal obligations,
  • Where the personal data has been made public by the data subject,
  • Where data processing is necessary for the establishment, exercise or protection of a right,
  • Where data processing is necessary for the legitimate interests of 2A, provided that it does not harm the fundamental rights and freedoms of the data subject.

Where required by legislation, you will be provided with more specific information under the relevant service regarding for what purposes your data is collected and how it is used. Your data may be processed by and transferred to business partners that have a contractual relationship with 2A, are bound by confidentiality obligations and process data on behalf of 2A.

To fulfill our obligations arising from agreements between the parties, your personal data may be shared with our contracted dealers (https://www.brcnerede.com) and service providers (https://www.2a.com.tr/servisler). In such cases, the personal data shared is limited to what is necessary for the service to be provided.

2A may also share the personal data it collects with third parties providing products and services that may be of interest to you, in order to help us identify such products and services within the scope of direct marketing activities and in line with your preferences.

Your personal data may be used for research and statistical purposes, such as analyzing the use of the website and mobile applications, as well as your preferences and areas of interest.

Without the need for notification or explicit consent where required by law, we may use your personal data to prevent crime and fraud, and to audit and/or ensure 2A’s compliance with the legislation.

Without the need for notification or explicit consent where required by law, we may share your personal data with official authorities (such as the Republic of Turkey Prime Ministry Undersecretariat of Treasury).

Your personal data may be disclosed in the presence of any of the following situations:

  • Where required by legislation,
  • To ensure the safety of our employees, the public or 2A,
  • To comply with judicial processes, court orders or other legal processes.

In order to carry out our activities (for example, to receive support in areas such as information systems management and storage, data analysis, etc.), we may transfer your personal data to third-party service providers that are our business partners.

Furthermore, unless you opt out of receiving direct marketing messages, we may transfer your personal data to third-party service providers with confidentiality obligations from whom we receive services in relation to market research and marketing campaigns.

Security of Your Personal Data

We attach great importance to protecting the confidentiality and security of the personal data you provide to us. Accordingly, we take the necessary technical and administrative security measures to protect your personal data against unauthorized access, damage, loss or disclosure.

Please remember that communications conducted over the internet (such as e-mail), unless encrypted, may not be secure. Where the website contains links to other websites, please note that these other websites may have different data processing policies. Please carefully read the privacy policies of such websites before transmitting any of your personal data.

Commercial Electronic Messages

Where you have given your consent, and to the extent permitted by the Data Protection Legislation, we may send you updates and offers relating to 2A’s products and services via direct marketing methods (e.g. telephone, e-mail, SMS, social networks, post).

To determine and tailor our products and services to your requests and to group them together; to determine pricing and to help us offer discounts that may be of interest to you, we may use and process your other personal data provided to us, limited to your requests and preferences. Whenever you are contacted by e-mail, message or other direct marketing activities, you will always be offered an “opt-out” option. You may change your marketing preferences at any time by contacting us.

Rights Relating to Your Personal Data

It is important that the personal data we hold about you is accurate and up to date. Therefore, please inform us of any changes to your personal data. Pursuant to Article 11 of the KVK Law, any person whose personal data is processed may apply to 2A and make the following requests regarding themselves:

  • To learn whether their personal data is being processed,
  • If their personal data has been processed, to request information in this regard,
  • To learn the purpose of processing their personal data and whether they are used in line with this purpose,
  • To learn the third parties in Turkey or abroad to whom personal data is transferred,
  • If personal data has been processed incompletely or inaccurately, to request the correction of it and the notification of third parties to whom the data has been transferred,
  • If the reasons requiring the processing of personal data cease to exist, to request the deletion, destruction or anonymization of their personal data and the notification of third parties to whom the data has been transferred,
  • To object to a result arising against them through the analysis of processed data exclusively by automated systems,
  • If they suffer damage due to unlawful processing of personal data, to request compensation for the damage.

Any data subject whose data is processed by the data controller 2A in line with its instructions has the right to apply to the data controller pursuant to Article 13 of the KVK Law in order to exercise the rights under Article 11 of the KVK Law. The data controller 2A is obliged to accept the application or reject it with justification and respond within no later than 30 (thirty) days. However, in order for an application to be deemed duly made, it must meet all the elements stipulated in the Communiqué on the Procedures and Principles of Application to the Data Controller.

For any data subject’s application to be considered a valid application, it must be submitted:

  • By the data subject personally in Turkish and in writing, upon verification of their identity, or
  • Via registered electronic mail (KEP) address, secure electronic signature, mobile signature, or
  • By using the e-mail address previously notified to 2A by the data subject and registered in 2A’s systems, or
  • Through a software or application developed by 2A for application purposes.

In order for an application to be deemed duly made and evaluated, it must contain all of the following elements:

  • The data subject’s name, surname and, if in writing, their wet signature,
  • For Turkish citizens, T.R. identity number; for foreigners, nationality, passport number or identity number, if any,
  • Residential or workplace address for notifications,
  • E-mail address, telephone and fax number for notification, if any,
  • The subject of the request.

Therefore, in order to exercise the rights granted to you under Article 11 of the KVK Law, you may download and fill in the application form we have prepared in compliance with all the elements set out in the Communiqué on the Procedures and Principles of Application to the Data Controller and submit it to 2A by registered mail with return receipt, by applying in person, or by sending it via electronic mail using a secure electronic signature, using the contact information provided in the form.

Retention Period of Personal Data

2A will store the personal data provided by the User for as long as necessary to fulfill the obligations arising from the nature of the services provided.

In addition, in the event of any dispute that may arise between 2A and users of the website, personal data may be retained, limited to what is necessary for the conduct of the necessary defenses within the scope of the dispute and for the duration of the statute of limitations determined in the relevant legislation.

Amendments to the Privacy Policy

This Privacy Policy may be amended when deemed necessary. When updated, the revised Privacy Policy will be announced on our website.

Contact Us

If you have any questions or concerns regarding this Privacy Policy or our other data protection practices, or if you have an access request, you may contact us using the details below:

  • E-mail: [email protected]
  • Contact address: 2A İş Merkezi, Kağıthane Caddesi No: 2 Kağıthane / İstanbul / Turkey
  • Telephone number: +90 (212) 321 52 52
  • Fax number: +90 (212) 321 88 21
  • Mersis No: 0001055059700013