Data Protection Notice

As Portsan Mermer A.Ş., we demonstrate utmost sensitivity regarding the security of your personal data. With this awareness, we attach great importance to the processing and preservation of personal data of natural persons receiving services within our Company, in compliance with the Law on the Protection of Personal Data No. 6698 (“Law”), the secondary regulations (regulations, communiqués, circulars) enacted or to be enacted under the Law, and the binding decisions taken or to be taken by the Personal Data Protection Board. Fully aware of this responsibility, we process your personal data, in the capacity of “Data Controller” as defined by the Law, within the scope of carrying out your transactions and within the limits mandated by the legislation, as explained below.

Information Regarding the Data Controller

In accordance with the Law, Portsan Mermer A.Ş., located at Çamlıca Mah. Alpaslan Türkeş Bulvarı No.463/1 Bucak/Burdur, is the Data Controller.

Personal Data Being Processed

Your personal data processed for the purpose of utilizing the services of Portsan Mermer A.Ş. includes:

  • Your name, surname, gender, date of birth, Turkish ID number and/or tax ID number, photograph, company logo, company title

  • Delivery address, company address, phone number, fax number, email address

  • Social media accounts, website

  • IBAN number

  • Customer transaction information: order, return and request information, invoice information, delivery transaction information

  • Historical transaction information: number of page views, number of clicks on the save button, average session duration, language preference

  • Security and technical information: username and password, IP information, device information, browser information, user and session cookie data

  • Application login/logout status

  • Voice recordings (with prior notification) during calls with customer representatives

  • Survey results

  • Requests, suggestions, complaints, and comments

Purposes of Processing Personal Data

Your personal data is processed by Portsan Mermer A.Ş. for the following purposes:

  • To fulfill our obligations specified in the Law on the Protection of Personal Data No. 6698 and related secondary regulations

  • To establish and execute contracts and to confirm that contracts are signed by authorized persons

  • To carry out finance and accounting processes

  • To provide required information to relevant public institutions and organizations, judicial or administrative authorities, and law enforcement agencies when necessary

  • To provide information to authorized persons, institutions, and organizations

  • To share your business card information entered for product use with third parties when you scan your business card

  • To create a user profile on our website

  • To carry out advertising activities upon your request

  • To update your personal information when necessary

  • To carry out logistics and cargo processes for delivery

  • To manage and supervise business activities of the company

  • To manage and supervise invoicing processes

  • To inform you about updates and enhancements with your explicit consent

  • To develop our marketing and advertising policies with your explicit consent

  • To increase customer satisfaction and better understand your needs

  • To conduct strategic analysis studies

  • To carry out all communication activities

  • To use your company as a reference for our company with your consent

  • To provide after-sales support

  • To ensure and maintain information security

  • To process survey results and evaluate your requests, suggestions, and complaints

  • In the case of using Portsan Mermer A.Ş. as an employee of another company, to allow the admin of your company to process and update your data when necessary

Your personal data will be processed within the limits stipulated by the Law, in a lawful, fair, relevant, limited, and proportionate manner for the purposes outlined above.

Transfer of Personal Data

Your personal data may be transferred in accordance with the conditions specified in Article 8/2-a and Article 9 of the Law, for the purposes listed above, to:

  • Employees and managers of Portsan Mermer A.Ş.

  • AWS, located in the Ireland region, for information security purposes

  • Third-party companies involved in product preparation

  • Cargo companies and private couriers for delivery

  • Consulting firms handling complaint management and risk analysis for quality control

  • Our business partners, financial advisors, certified public accountants, independent audit firms, customs companies, and their employees for invoicing processes

  • Legal advisors, attorneys, and their staff and interns for legal dispute processes

  • Authorized real and legal persons permitted under the legislation

  • Other authorized public institutions and organizations

  • Judicial and administrative authorities

Methods and Legal Grounds for Collecting Personal Data

Your personal data is collected by Portsan Mermer A.Ş. via email, phone, website, mobile application, paper forms, and other verbal, written, or electronic means, through automated or non-automated methods.

Processing is based on the legal grounds specified in Article 5/2 (a, c, ç, f) of the Law, including explicit stipulations in the law, necessity for the establishment or performance of a contract, and necessity for the data controller to fulfill its legal obligations.

Data Retention and Disposal Process

Your personal data, as described in this notice, will continue to be recorded, processed, and transferred as long as our customer relationship continues and to the recipients specified in Article 3 of this notice.

Your personal data is protected using an algorithm containing MD5, SHA1, and CRC32 and is stored in a converted text format. In addition, regular penetration tests are conducted.

Your personal data will be retained, stored, and transferred for the period specified by the applicable legal retention periods, and upon the expiration of these periods, it will be deleted, destroyed, or anonymized in accordance with the relevant legislation.

Rights of Data Subjects Under the Law

You may apply to Portsan Mermer A.Ş. at any time to:

  • Learn whether your personal data is being processed

  • Request information if your personal data has been processed

  • Learn the purpose of processing your personal data and whether it is used in accordance with its purpose

  • Know the third parties to whom your personal data is transferred domestically or abroad

  • Request the correction of your personal data if it is incomplete or incorrectly processed

  • Request the deletion or destruction of your personal data under the conditions set forth in Article 7 of the Law

  • Request notification of the actions taken pursuant to subparagraphs (d) and (e) of Article 11 of the Law to third parties to whom your personal data has been transferred

  • Object to the occurrence of a result against you through the exclusive analysis of your processed data by automated systems

  • Request compensation if you suffer damage due to the unlawful processing of your personal data

To exercise your rights and for matters related to the application of the Law, you may fill out the application form available at www.portsan.com and send it with a wet signature via notary or registered mail to:

Çamlıca Mah. Alpaslan Türkeş Bulvarı No.463/1 Bucak/Burdur

Alternatively, you may submit your requests via the contact section at https://portsan.com/iletisim/, by calling +90 248 317 13 00, or by emailing portsan@portsan.com. Additionally, if you delete your user ID through our application, all your data will be deleted by us.

Portsan Mermer A.Ş. will respond to such requests in writing free of charge for up to ten pages; for requests exceeding ten pages, a processing fee of 1 Turkish Lira per additional page will be charged. If the response is provided on a recording medium such as a CD or flash drive, the fee will not exceed the cost of the recording medium.

To exercise your rights, your application must clearly and understandably state your request, relate to your personal data, and if acting on behalf of another person, you must provide a notarized power of attorney. Applications must include your name-surname, signature, Turkish ID number, residential or workplace address, email address, phone and fax number, and the subject of your request, in accordance with the “Communiqué on the Principles and Procedures for Application to the Data Controller.” Applications lacking these elements will be rejected by Portsan Mermer A.Ş.

Start typing to see projects you are looking for.