Personal Data Protection and Privacy Notice

Last Updated: 05.10.2026

At Serna Makina San. ve Tic. Ltd. Şti., we value the privacy and security of your personal data.

This Personal Data Protection and Privacy Notice has been prepared in accordance with the Personal Data Protection Law No. 6698 (“Personal Data Protection”) to inform individuals who visit our website, use our contact or quotation request forms, or communicate with us by phone or email about the processing of their personal data.

1. Data Controller

Within the scope of the KVKK, your personal data is processed by the following entity acting as the data controller:

Serna Makina San. ve Tic. Ltd. Şti.

may be processed by.

Address: 5. O.S.B. 83575 No’lu Cad. No: 33 Şehitkamil / Gaziantep
Phone: +90 342 235 28 48
Email: sales@sernamakina.com

2. Personal Data Processed

Depending on the nature of your relationship with Serna Makina and the communication channel you use, the following personal data may be processed:

Identity Information

• First Name
• Last Name

Contact Information

• Phone Number
• Email Address
• Contact Address

Customer and Transaction Information

• Company or Organization Information
• Requested Product or Service Information
• Quotation Requests
• Request and Message Contents
• Customer Communication History

Transaction Security and Technical Data

• IP Address
• Website Access Logs
• Browser Information
• Device Information
• Session and Security Logs

Marketing and Website Usage Information

Depending on the preferences of the data subject and the services used;

• Cookie Records,
• Website Usage Data,
• Page View and Interaction Data

may be processed.

3. Purposes of Processing Personal Data

Your collected personal data may be processed for the following purposes:

• Receiving and responding to your inquiries,
• Preparation and evaluation of quotation requests,
• Providing information about products and services,
• Evaluation of production line and machinery requests,
• Identifying technical needs and customer expectations,
• Management of sales processes,
• Provision of after-sales support services,
• Management of customer and prospective customer relationships,
• Conducting commercial activities,
• Planning and development of business processes,
• Conducting communication activities,
• Evaluation of requests, suggestions, and complaints,
• Management of contractual processes,
• Management of information security processes,
• Ensuring website and system security,
• Detection of unauthorized access and misuse attempts,
• Improving website performance,
• Fulfillment of legal and regulatory obligations,
• Responding to lawful requests from authorized public institutions and authorities,
• Monitoring legal disputes and protecting the company's rights.

Your personal data is processed for specific, explicit, and legitimate purposes, in a manner that is relevant, limited, and proportionate to the purposes for which it is processed.

4. Methods of Collecting Personal Data

Your personal data may be collected through the following channels:

• Serna Makina website,
• Contact Forms,
• Quotation Request Forms,
• Email Communication,
• Telephone Conversations,
• In-person Meetings,
• Trade Fairs, Events, and Business Meetings,
• Website Server Logs,
• Cookies and Similar Technologies.

Your personal data may be collected in electronic or physical environments through automated, partially automated, or non-automated methods, provided that such non-automated processing forms part of a data filing system.

5. Legal Bases for Processing Personal Data

Your personal data is processed on the basis of the applicable legal grounds for processing personal data set out in Article 5 of the KVKK.

In this context, your personal data may be processed:

• Explicitly provided for by law,
• The processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract,
• Being necessary for the data controller to fulfill its legal obligations,
• The processing of personal data being necessary for the establishment, exercise, or protection of a right,
• The processing of personal data being necessary for the legitimate interests of the data controller, provided that it does not violate the fundamental rights and freedoms of the data subject,

may be processed on the basis of these legal grounds.

In cases where none of the other legal grounds for data processing stipulated by law apply, your personal data may be processed based on your explicit consent.

Where personal data processing is based on explicit consent, such consent is obtained separately from this privacy notice.

6. Transfer of Personal Data

Your personal data may be transferred to the following persons and organizations to the extent necessary for the purposes of processing and in accordance with the conditions stipulated under the KVKK:

• Authorized Company Employees and Departments,
• Business Partners,
• Suppliers,
• Information Technology Service Providers,
• Hosting and Server Service Providers,
• Email and Communication Infrastructure Service Providers,
• Software and Technical Support Service Providers,
• Legal Advisors,
• Financial Accountants and Financial Advisors,
• Independent Audit and Consulting Organizations,
• Authorized Public Institutions and Authorities,
• Courts, Enforcement Offices, and Other Judicial Authorities,
• Natural or Legal Persons Legally Authorized to Obtain Information.

Data transfers are carried out only to the extent necessary for the provision of the relevant service or the fulfillment of legal obligations.

7. Transfer of Personal Data Abroad

If the email, hosting, cloud services, analytics tools, security services, or other technological infrastructures used by Serna Makina utilize servers located abroad, the transfer of personal data to countries outside Türkiye may occur.

Such transfers are carried out in accordance with the provisions of Personal Data Protection Law No. 6698 (KVKK) regarding the transfer of personal data abroad and other applicable legislation in force.

8. Website and Cookies

Cookies and similar technologies may be used on the Serna Makina website to ensure its secure and efficient operation.

In cases where non-essential analytics, performance, advertising, or marketing cookies are used, users’ preferences and explicit consent are taken into account where required by applicable legislation.

Detailed information regarding the use of cookies is available in the Cookie Policy can be reviewed through.

9. Retention Period of Personal Data

Your personal data;

• For the period required by the relevant processing purpose,
• For the duration of the contractual relationship,
• Statutory limitation and retention periods prescribed by applicable legislation,
• For the period required to fulfill legal obligations,

may be retained for the specified periods.

When the reasons requiring the processing of personal data no longer exist and the statutory retention obligations have expired, personal data is deleted, destroyed, or anonymized in accordance with applicable legislation.

10. Personal Data Security

Serna Makina takes care to implement the necessary technical and administrative measures to ensure the security of the personal data it processes.

In this context;

• Prevention of Unauthorized Access,
• Restricting Access to Personal Data,
• Ensuring System and Server Security,
• Prevention of Unlawful Alteration or Disclosure of Data,
• Regular Assessment of Data Security,

Appropriate security measures may be implemented for these purposes.

11. Rights of the Data Subject Under the KVKK

As a data subject, pursuant to Article 11 of the KVKK, you have the right to:

• To learn whether your personal data is being processed,
• To request information regarding the processing of your personal data, if it has been processed,
• To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
• To know the third parties to whom your personal data has been transferred, whether domestically or abroad,
• To request the correction of your personal data if it has been processed incompletely or inaccurately,
• To request the deletion or destruction of your personal data under the conditions stipulated by the KVKK,
• To request that the correction, deletion, or destruction of your personal data be communicated to third parties to whom the data has been transferred,
• To object to any outcome that is detrimental to you resulting from the analysis of your processed personal data exclusively through automated systems,
• To request compensation for damages suffered as a result of the unlawful processing of your personal data

You have the aforementioned rights.

12. Application Procedure

You may submit your requests under the KVKK to Serna Makina in writing or through other application methods permitted by applicable legislation.

You may submit your applications using the contact information provided below:

Serna Makina San. ve Tic. Ltd. Şti.

Address: 5. O.S.B. 83575 No’lu Cad. No: 33 Şehitkamil / Gaziantep
Phone: +90 342 235 28 48
Email: sales@sernamakina.com

In the application;

• First and Last Name,
• Subject of the Application,
• Clear and comprehensible explanation of the request,
• Supporting Information and Documents Related to the Request, If Any

must be included.

Depending on the nature of the application, additional information or documents may be requested to verify your identity.

Applications are reviewed and processed in accordance with the procedures and time limits specified under the KVKK and relevant legislation.

13. Updates to the Privacy Notice

Serna Makina may update this Personal Data Protection and Privacy Notice in accordance with changes that may occur in its personal data processing activities, website infrastructure, or applicable legislation.

The latest version of the notice is published on the website.

Last Updated Date: 05.10.2026