Personal Data Protection Notice

This notice has been prepared by HEM MOTOR SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“HEM Motor”), as data controller, under Article 10 of Personal Data Protection Law No. 6698 (“KVKK”) to inform you about how your personal data is processed.

Data Controller

HEM MOTOR SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Address: Karacaağaç Mahallesi Yol Üstü Mevkii Sokak No: 91, Buca / İzmir, Türkiye
Tax Office: Şirinyer · Tax No: 2741411339
MERSİS No: 0274141133900001
Email: [email protected] · Phone: +90 532 345 49 86
Web: https://hemmotor.com

Personal Data Processed

Identity: name, surname
Contact: email address, phone number, address
Customer transactions: quotation, order, invoice and correspondence details, company name
Transaction security: IP address, browser information, session and access logs
Marketing: cookie data and advertising interactions (only with your explicit consent)

Purposes of Processing

Managing quotation, sales, order and delivery processes
Receiving and answering requests and complaints
Providing after-sales technical support and warranty processes
Carrying out finance, accounting and invoicing
Ensuring information security and website security
Providing information required by law to authorised institutions
Website usage analysis and advertising, with your explicit consent

Collection Method and Legal Grounds

Your personal data is collected by automatic or partly automatic means through the contact form on our website, email, phone, WhatsApp, cookies and face-to-face meetings. It is processed on the following legal grounds under Article 5 of the KVKK:

Directly related to the establishment or performance of a contract (Art. 5/2-c)
Compliance with a legal obligation of the data controller (Art. 5/2-ç)
Establishment, exercise or protection of a right (Art. 5/2-e)
Legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f)
Explicit consent for analytics and marketing cookies (Art. 5/1)

Transfer of Personal Data

Limited to the purposes above, your personal data may be transferred to cargo and logistics companies, accounting and financial advisory service providers, IT and hosting providers, and, upon request, authorised public institutions. Because our website security and content delivery service (Cloudflare) and the consent-based Google Analytics and Google Ads services use servers located abroad, such transfers are carried out in accordance with Article 9 of the KVKK.

Retention Period

Your personal data is retained for as long as the purpose of processing requires and for the periods set out in the relevant legislation (Turkish Commercial Code, Tax Procedure Law, etc.), and is then deleted, destroyed or anonymised.

Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the following rights:

To learn whether your personal data is processed
To request information if it has been processed
To learn the purpose of processing and whether it is used accordingly
To know the third parties to whom it is transferred in Türkiye or abroad
To request correction if it is incomplete or inaccurate
To request deletion or destruction under Article 7 of the KVKK
To request that correction, deletion or destruction be notified to third parties to whom the data was transferred
To object to a result against you arising solely from automated analysis
To claim compensation for damage caused by unlawful processing

How to Apply

You may send requests regarding your rights in writing to our company address together with information identifying you, or by email to [email protected] from the email address previously notified to us and registered in our system. Requests are concluded free of charge within 30 days at the latest under the Communiqué on the Procedures and Principles of Application to the Data Controller; if the action requires an additional cost, the fee in the Personal Data Protection Board tariff may be charged.

Effective date: 28.09.2026