Privacy Notice (Personal Data Protection)

1. Data Controller

Your personal data is processed by RSR International as data controller. Our contact details are listed at the end of this page.

2. Personal Data We Process and How We Collect It

Our website has no contact form, user accounts, analytics, advertising or social-media tracking tools. Personal data is processed only in the following cases:

• When you visit the site: transaction-security data such as IP address, date and time of the visit, page visited and browser/device information is automatically recorded as technical logs by the servers hosting the site.
• When you contact us by email, phone or fax: identity, contact and professional details you provide (name, email address, phone number, company and job title) and the content of your request, collected partly by automated means (email) and partly by non-automated means (phone, fax).
• The B2B Portal and CRM application linked from the site are separate systems; any data processing there is explained separately on those platforms.

3. Purposes of Processing

• Receiving, evaluating and responding to sourcing, production and partnership enquiries;
• Preparing quotations and establishing and managing a potential business relationship;
• Operating the website securely and reliably and preventing misuse and cyber-attacks;
• Complying with legal obligations and responding to requests from competent authorities;
• Establishing, exercising and defending the Company’s legal rights in potential disputes.

4. Legal Bases

Your personal data is processed on the following legal grounds set out in Article 5(2) of the KVKK; your explicit consent is therefore not required:

• (c) processing is necessary for the conclusion or performance of a contract with you;
• (ç) processing is necessary for compliance with a legal obligation of the data controller;
• (e) processing is necessary for the establishment, exercise or protection of a right;
• (f) processing is necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms (e.g. site security, responding to enquiries).

5. Transfers of Personal Data

Limited to the purposes above and in line with Articles 8 and 9 of the KVKK, your personal data may be shared with legally authorised public authorities, our legal and financial advisers, and the hosting and email service providers that process data on our behalf as data processors.

Our website is hosted on the infrastructure of Vercel Inc. (USA). Technical logs generated when you visit the site (IP address, browser information, etc.) may therefore be processed on servers located outside Türkiye. Under Article 9 of the KVKK, this transfer takes place solely to deliver and secure the website, within the safeguards set out in the provider’s data processing agreement. We do not sell your personal data or share it with third parties for marketing purposes.

6. Retention

Personal data is retained for as long as required by the purpose of processing and the statutory limitation periods. After that it is deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data. Server logs are kept for a limited period for security purposes and then deleted.

7. Data Security

In accordance with Article 12 of the KVKK we take appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls and security headers, to prevent unlawful processing of and access to your personal data and to ensure its safekeeping.

8. Your Rights (KVKK Article 11)

By applying to us, you may:

• learn whether your personal data is processed;
• request information about the processing if it has been processed;
• learn the purpose of processing and whether data is used in line with that purpose;
• know the third parties in Türkiye or abroad to whom your data is transferred;
• request rectification of incomplete or inaccurate data;
• request erasure or destruction of your data under the conditions of Article 7 of the KVKK;
• request that rectification, erasure or destruction be notified to third parties to whom the data was transferred;
• object to a result against you arising from analysis of your data exclusively by automated systems;
• claim compensation for damage arising from unlawful processing of your data.

9. How to Apply

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests concerning your rights in writing with a wet signature and information identifying you, in person or through a notary, to Krizantem Sokak No: 24-1 Levent / İstanbul, Türkiye; via registered electronic mail (KEP), secure electronic signature or mobile signature; or from an email address you have previously notified to us and that is registered in our systems, to info@rsr.com.tr.

Your request will be concluded free of charge as soon as possible and within thirty (30) days at the latest. If the action requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your request is rejected, the response is insufficient or no response is given in time, you may lodge a complaint with the Personal Data Protection Board under Article 14 of the KVKK.

10. Changes

This notice may be updated in line with changes in legislation or in our processing activities. The current version is always published on this page.