KVKK Privacy Notice

Courtesy translation. In case of discrepancy, the Turkish text prevails.

This notice fulfils the disclosure obligation under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. DATA CONTROLLER

2. DATA PROCESSED AND HOW IT IS COLLECTED

Data is collected through forms on the website, the order and payment flow, and e-mail/phone communication, by automated and partly automated means.

No special categories of personal data (health, religion, biometrics, etc.) are collected or requested.

3. PURPOSES

Executing sales and order processes and performing the contract; processing payments, refunds and cancellations; delivering products and tracking shipments; forwarding retail orders to the selected authorised dealer and managing the dealer network; invoicing, accounting and tax compliance; answering questions and complaints and providing after-sales support; evaluating dealership applications; information security, fraud prevention and log-keeping; complying with legal obligations and exercising the right of defence; and — where you have given explicit consent — nearest-dealer lookup, commercial electronic messages and non-essential cookies.

4. LEGAL BASES (KVKK Art. 5)

• Necessary for the conclusion or performance of a contract (5/2-c): order, payment, delivery, return and support data.
• Compliance with a legal obligation (5/2-ç): invoicing, accounting, tax and retention obligations.
• Establishment, exercise or protection of a right (5/2-e): dispute records and transaction logs.
• Legitimate interest (5/2-f): site and payment security, fraud prevention, service quality.
• Explicit consent (5/1): location data for nearest-dealer lookup, commercial electronic messages, non-essential cookies.

5. TRANSFERS

International transfers: order and payment data is processed on servers located in Türkiye and, as a rule, not transferred abroad. Where cloud/CDN services cause technical log data to be processed abroad, the transfer complies with Article 9 of KVKK.

6. RETENTION PERIODS

At the end of the period, data is deleted, destroyed or anonymised.

7. YOUR RIGHTS (KVKK Art. 11)

To learn whether your data is processed; to request information about it; to learn the purpose and whether it is used accordingly; to know the third parties it is transferred to domestically or abroad; to request correction of incomplete or incorrect data; to request erasure or destruction; to request that such actions be notified to third parties; to object to results arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.

8. HOW TO APPLY

Use the Data Subject Application Form on this site and submit it in person (with ID) or by notary to Pelitli Mah. Şantiye Cad. No: 10/1, 41400 Gebze / KOCAELİ, or by e-mail from an address registered in our systems to info@burtech.com.tr. Please write "Personal Data Protection Law — Data Subject Request" on the envelope or in the subject line.

Applications are concluded free of charge within 30 days at the latest. If the request requires additional cost, the tariff set by the Personal Data Protection Board may apply. If your application is rejected, the answer is insufficient, or no answer is given in time, you may complain to the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of your application.

9. DATA SECURITY

Data is transmitted over SSL/TLS; passwords are stored as irreversible hashes; role-based access controls are enforced; the payment page runs on a PCI-DSS compliant payment-institution infrastructure so card data never enters our systems; risk analyses, penetration tests and backups are performed regularly; and in the event of a breach, notifications are made to the Board and the affected individuals as soon as possible under Article 12/5 of KVKK.

10. UPDATES

BURTECH reserves the right to update this notice in line with changes in legislation. The current text is always published on this page.

Last updated: 23.08.2026