Privacy Policy

1. Introduction and Purpose

This Privacy Policy explains our commitments and principles regarding the protection of personal data collected and processed by ONS ALUMINYUM (hereinafter referred to as the "Company") through all websites, mobile applications, and other digital platforms operated by it.

Our Company places the utmost importance on the privacy and security of the personal data of its customers, prospective customers, business partners, and employees. This policy has been prepared in compliance with all relevant legislation, primarily the Law on Protection of Personal Data No. 6698 (KVKK).

2. Data Controller and Scope

Data Controller	ONS ALUMINIUM
Address	Barbaros, Begonya Sk. Nida Kule Batı Ataşehir No:1/1, 34746 Ataşehir/İstanbul
Email	info@onsaluminyum.com
Phone	(+90) 542 258 03 82

This policy covers personal data processing activities in all digital platforms and physical business processes of our Company.

3. Types of Personal Data Collected

The Company may collect various personal data, including the following, for the purpose of carrying out its activities and providing services:

Identity and Contact Information: Name, surname, title, company name, email address, phone number.
Transaction Security Information: IP address, site traffic information, browser type, visit history, data collected through cookies.
Financial Information: (Where necessary) Bank account information, invoicing information.
Request and Complaint Information: Written or verbal requests, complaints, and suggestions conveyed to our Company.

4. Purposes and Legal Basis for Processing Personal Data

Your personal data is processed in accordance with the legal bases specified in Articles 5 and 6 of the KVKK, for the following purposes:

Processing Purpose	Legal Basis
Contract Performance: Providing quotations, executing sales contracts, fulfilling orders.	Being directly related to the establishment or performance of a contract (KVKK Art. 5/2-c).
Communication and Support: Answering customer questions, providing technical support, and managing requests.	It is mandatory for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed (KVKK Art. 5/2-f).
Marketing and Promotion: Informing about new products and services, campaign announcements (with explicit consent).	Having the explicit consent of the data subject (KVKK Art. 5/1).
Legal Obligations: Fulfilling official authority requests, performing invoicing and tax obligations.	It is explicitly provided for by law and is mandatory for the data controller to fulfill its legal obligation (KVKK Art. 5/2-a and ç).

5. Transfer of Personal Data

Our Company transfers your personal data only for the purposes specified in this policy and in accordance with the conditions specified in Articles 8 and 9 of the KVKK:

Business Partners and Suppliers: To domestic/international solution partners from whom we receive technical and logistical support to fulfill our contractual obligations.
Authorized Public Institutions and Organizations: To relevant public institutions and judicial authorities in case of a legal obligation or necessity.
Group Companies: To group companies for management, operational cooperation, and coordination purposes.

6. Data Security and Retention Period

Data Security

Our Company takes all necessary administrative and technical measures to prevent the unlawful processing, access, and loss of personal data. These measures include data encryption, access authorization mechanisms, network security measures, and regular penetration tests.

Data Retention

Personal data is retained for the periods prescribed by the relevant laws and regulations or for the duration required by the processing purpose. When the processing purpose ceases to exist or the legal retention period expires, the data is deleted, destroyed, or anonymized.

7. Data Subject (User) Rights (KVKK Article 11)

Everyone whose personal data is processed has the following rights by applying to our Company:

To learn whether personal data is processed.
To request information if personal data has been processed.
To learn the purpose of processing personal data and whether they are used appropriately for their purpose.
To know the third parties to whom personal data is transferred domestically or abroad.
To request the rectification of personal data if it is incomplete or incorrectly processed.
To request the erasure or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK.
To request notification of the operations carried out pursuant to subparagraphs (d) and (e) above to third parties to whom the personal data has been transferred.
To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems.
To demand compensation for damages in case of suffering damage due to the unlawful processing of personal data.

You can submit your applications to our Company in writing or by other methods determined by the Personal Data Protection Board to exercise these rights.

8. Cookie Usage

Our website uses cookies to improve user experience, measure site performance, and offer advertisements tailored to interests. Detailed information about cookies can be found at the cookie policy address.

9. Policy Changes

Our Company may always update and change the provisions of this Privacy Policy in line with legislative changes and our Company's practices. The updated policy takes effect on the date it is published.