Privacy Policy

Nature of this notice: This text is the privacy notice for the contact form under Article 10 of Türkiye's Personal Data Protection Law No. 6698 (“KVKK”); it is not a contract or a consent form.

1. Data controller

The data controller is ELEGANCE GRUP TURİZM VE OTOMOTİV TİCARET LİMİTED ŞİRKETİ.

  • Address: İkitelli OSB Mah. Demirciler C5 Blok Sk., Demirciler Sanayi Sitesi C5 Blok No: 241/B, Başakşehir / İstanbul / Türkiye
  • Telephone: +90 212 671 52 97
  • Email: info@elggassprings.com
  • MERSİS No: 0331167788400001

2. Data processed, purposes and legal grounds

  • Name: Processed to identify the person sending the request and respond correctly.
  • Email: Processed to reply to the request and conduct necessary communications.
  • Message content: Processed to review, handle and respond to a communication, product, quotation or order request.

For a product, quotation or order request, the legal ground is that processing is directly related and necessary for entering into or performing a contract (Article 5/2-c KVKK). For a general enquiry, the Company relies on its legitimate interest in responding, provided that the data subject's fundamental rights and freedoms are not harmed (Article 5/2-f KVKK). Records necessary for the establishment, exercise or protection of a right may be processed strictly for that purpose under Article 5/2-e KVKK.

The message field should not contain special categories of personal data or information about third parties that is unnecessary for the request. If the data is to be used for marketing, a separate legal ground, separate approval where required and separate information are necessary.

Names, purposes and legal grounds of the two additional required text fields in the current form code, or removal of those fields from the form — to be completed

3. Collection method

Name, email and message are collected electronically and by partially automated means when the data subject enters them directly in the website contact form.

Scope, purposes and legal grounds of any IP address, date/time, device/browser and security logs technically recorded when the form is submitted — to be completed

4. Transfers

Technical operation of the form may require hosting, network, form-processing and email infrastructure. Personal data may be transferred to service providers only to the extent necessary for the stated purpose and in accordance with Articles 8 and 9 KVKK; and to authorised public bodies and judicial authorities where legally required or necessary for the establishment, exercise or protection of a right.

  • Service provider/recipient groups that actually receive data and the purpose of each transfer — to be completed
  • Whether data is transferred abroad and, if so, the country, recipient and transfer mechanism under Article 9 KVKK — to be completed

5. Retention and disposal

Data is retained for the period necessary for the relevant purpose and any applicable statutory period. When the reason for processing ends, it is erased, destroyed or anonymised under Article 7 KVKK. Unsuccessful general enquiries and records that develop into a quotation, order or dispute are assessed under separate, purpose-based periods.

Maximum purpose-based retention periods for contact-form records — to be completed

6. Rights of the data subject

Under Article 11 KVKK, the data subject has the right to:

  • learn whether personal data is processed,
  • request information if it has been processed,
  • learn the purpose of processing and whether it is used in line with that purpose,
  • know the third parties in Türkiye or abroad to whom it is transferred,
  • request correction of incomplete or inaccurate data,
  • request erasure or destruction under the conditions of Article 7 KVKK,
  • request that correction, erasure or destruction be notified to third parties to whom the data was transferred,
  • object to a result against the person arising exclusively from analysis by automated systems, and
  • claim compensation for damage caused by unlawful processing.

7. Application

Under Article 13 KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller, applications may be submitted in writing to the Company's address above or by another method permitted by the Communiqué. The Company resolves an application as soon as possible and no later than thirty days.

8. Security and effective date

The Company takes appropriate technical and administrative measures under Article 12 KVKK to prevent unlawful processing and access and to ensure secure storage of personal data.

Effective and last updated date: business owner's approval and publication date — to be completed