Legal Statements – PDPL

As, we attach great importance to the security of your personal data. Your personal data is processed and stored following Law No. 6698 on the Protection of Personal Data (PDPL).

Providing Information in the Capacity of Data Controller

According to PDPL No. 6698 and by, whıch corporate details are published below, as Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties as permitted by the legislation, classified and processed in the ways listed in the PDPL.

Methods of Processing Personal Data

According to PDPL No. 6698, personal data you share with may be processed by us using automatic or, provided that it is part of a data recording system, non-automatic methods, through being fully or partially obtained recorded, stored, altered, reorganized, in short, subjected to any operation that is performed on personal data. Any operation performed on data within the scope of PDPL is defined as “processing of personal data.”

Purposes and Legal Reasons for Processing Personal Data

Personal data you share will be processed,

To fulfill the requirements of the services we provide to our customers, in accordance with the requirements of technology and our contracts, and to improve the products and services we offer,

To record the identity, address and other necessary information to identify the person making the transaction within the scope of Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, and, prepared on the basis of those regulations, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, and the Regulation on Distance Contracts published in the Official Gazette dated 27.11.2014 and numbered 29188, as well as other applicable legislation,

To prepare all records and documents that constitute the basis of payment systems, electronic contracts or paper transactions, which are mandatory in the field of Banking and Electronic Payment, and to comply with the obligations of information storage, reporting and notification stipulated by the legislation and other authorities,

To provide prosecutors, courts and relevant public officials with information on matters of public security and legal disputes, upon request and in accordance with the legislation,

To be able to offer our members a wide range of various opportunities or to share those opportunities within the legal framework with the people or institutions that can offer them,

in accordance with LPPD No. 6698 and applicable secondary regulations.


Regarding Third Parties or Organizations to Which Personal Data May Be Transferred

For purposes stated above, the personal data that you share with can be transferred to; main shareholders, shareholders, direct or indirect domestic/foreign subsidiaries; Member companies that use the infrastructure of, including but not limited to the individuals and organizations related to the service provided, and/or the program partner organizations that we cooperate with to carry out our activities and/or receive services in the capacity of Data Controller, domestic/foreign organizations and other third parties.

Methods of Collecting Personal Data

The ways in which your personal data can be collected and processed are laid out below.

Information such as name, surname, TR identity number, address, telephone, business or private e-mail address may be collected and processed through forms on the website and mobile applications; preferences, IP records of the transactions performed, cookie data collected by the browser, data on the duration and details of browsing, and location data may be collected on pages you log in with your username and password.

Personal data may be collected and processed in spoken, written or electronic form through our channels such as conferences, training and consultancy services, our sales and marketing department employees, written forms, business cards, digital marketing and call center.

Personal data shared by individuals with for purposes such as establishing a commercial relationship, applying for a job, and making offers, by sharing business cards, CVs and through other means; in a physical or virtual environment, face-to-face or remotely, verbally, in writing or electronically, may be collected and processed.

Additionally, data obtained indirectly from various channels, (micro) websites used for blogs, contests, surveys, games, campaigns and similar purposes, social media, e-newsletter reading habits or click activity, data from public databases, data from public profiles on social networking sites such as social media platforms (Facebook, Twitter, Google, Instagram, Snapchat, etc.) may be collected and processed.

Personal Data Collected Prior to the Enactment of PDPL

Personal data collected legally through memberships, consent to receive electronic communications, purchasing products/services or through other means prior to the enactment of PDPL on 7 April 2016, are processed and stored in line with the terms and conditions set out in this document.

Transfer of Personal Data

Personal data obtained by any of the methods listed above to be processed in Turkey or processed and stored outside Turkey may be transferred to service intermediaries located abroad (countries accredited by the Personal Data Protection Authority and with sufficient measures in place for the protection of personal data) within the scope of PDPL and following the purposes of the contract.

Personal data may be transferred to;

Our business partners, suppliers, banks, financial institutions, the BAT Risk Center and other real or legal persons we cooperate with and/or receiving services from for the presentation and promotion of products and services,

The competent authorities who will locate you in case of an emergency call,

Investors, incubation centers, accelerators and big organizations part of the ecosystem,

Your authorized proxies and representatives,

Regulatory and supervisory agencies and other official institutions such as courts and enforcement offices, and other public institutions or organizations authorized to request your personal data,

Legal entities that have a commercial relationship with and have your phone number,

Banks and financial institutions with information such as SIM card change and phone number with which you use mobile data, to ensure your transaction and information security and authentication during your banking and finance transactions made on your mobile lines,

Financial institutions, telecommunication institutions, investors, incubation centers, municipalities and similar legal entities that have your various details in order to provide you with critical information and to reach you for promotional and marketing purposes, with information such as your phone number and e-mail addresses if you have an approved account at


Storage and Protection of Personal Data

As per Article 12 of the PDPL, is obliged to prevent the unlawful processing of personal data and to prevent unauthorized access to the systems and databases in which your personal data is stored, and to take soft and physical security measures such as hash, encryption, transaction log, access management in order to protect your personal data. If personal data is obtained by others through unlawful methods, the Personal Data Protection Authority will be notified immediately, following the legal regulations and in writing.

Keeping Personal Data Up-To-Date and Accurate

Pursuant to Article 4 of PDPL, is obliged keep your personal data accurate and up-to-date. In this context, for to be able to fulfill its obligations arising from the current legislation, our Customers must share their accurate and up-to-date data or to update their data via the website/mobile application.

Rights of Personal Data Subject Pursuant to PDPL No. 6698

Article 11 of PDPL No. 6698 entered into force on 7 October 2016, and the rights of Personal Data Subject under this article as of this date are as follows:

Personal Data Subject has the right to contact (Data Controller) and;

Find out whether or not personal data are processed,

Request information if their personal data have been processed,

Find out the purpose of processing personal data and whether they are used appropriately for their purpose,

Be informed of the third parties at home or abroad to whom personal data are transferred,

Request correction of personal data in case of incomplete or incorrect processing,

Request the deletion or destruction of personal data under the conditions specified in Article 7 of the PDPL,

Request that third parties to whom personal data is transferred be notified of the correction, deletion or destruction of personal data,

Object to any results obtained to the detriment of themselves following analysis of the processed data exclusively through automated systems,

Demand compensation in case of loss due to unlawful processing of personal data.

Methods of Contact and Application

All services provided on our website,, belong to and are operated by our company, AL-KOR Makina Kalıp San. ve Tic. A.Ş., registered at Ömerli Mahallesi, İhsangazi Sokak No:26 Arnavutköy 34555 İstanbul, Türkiye. is the Data Controller within the scope of PDPL.

The Data Controller Representative to be appointed by shall be announced in the Data Controllers Registry and the web page this document is found on when the legal infrastructure is provided.

Personal Data Subjects may direct their questions, opinions or requests to any of the following communication channels:


Phone: +90 (212) 876 58 20 may give a positive/negative response to the submitted requests, in writing or digitally, provided that the response is justified and given within 30 days. It is essential that the transactions required by the requests are free of charge. However, if the transactions require an expense, reserves the right to request a fee. The fee is designated by the Personal Data Protection Authority in accordance with the tariff established on Article 13 of LPPD.

By sharing your personal data on our web page, applications and other channels, you hereby declare your explicit consent, which is of great importance in the PDPL, where it’s defined as “consent on a particular subject, based on the information and expressed with free will,” to our Policy on Personal Data, to the terms of processing, processing methods, data transfer, sale and other related matters in our policy, to the use of data shared with, a social media application, on the web page, applications and social media channels, to receiving notifications and suggestions, to the commercial transfer of data to third parties, provided that it is for the benefit of the members, to contacting before exercising your legal rights.