PRIVACY POLICY

NOTICE ON THE PROTECTION OF PERSONAL DATA AND ARMA PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy explains how ARMA ELEKTRONİK METAL SAN. VE TİC. LTD. ŞTİ. (“ARMA”, “we”, “our” or “the Company”) collects, uses, stores and protects the personal data of users who access and use the LedProfil website (“Website”).

By accessing, using, or registering on the Website, you acknowledge that you have read and understood this Privacy Policy and that your personal data may be processed in accordance with the terms set forth herein and applicable legislation.

2. DATA CONTROLLER AND DATA COLLECTION

In accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), ARMA acts as the Data Controller with respect to the personal data processed through the Website.

Personal data may be collected through:

• Website registration and contact forms
• Order and delivery processes
• Newsletter subscriptions
• Cookies and similar technologies
• User interactions, logs, and analytics tools

ARMA may record, store, update, classify and process personal data for the purposes of providing, improving and managing the services offered via the Website.

3. CATEGORIES OF PERSONAL DATA PROCESSED

The personal data processed by ARMA may include, but is not limited to:

a) Data Provided Directly by Users

Personal data voluntarily shared by Users before or during the use of the Website, such as:

• Name and surname
• Contact details (address, e-mail, phone number)
• Company information
• Order and billing information

b) Data Collected Automatically

Data collected during the use of the Website through technical means such as cookies and analytics tools, including:

• IP address
• Browser and device information
• Website usage and navigation data
• Preferences and interaction history

4. PROCESSING OF PERSONAL DATA WITHOUT EXPLICIT CONSENT

Personal data may be processed without explicit consent in the following cases, as permitted by KVKK and relevant legislation:

• When processing is necessary for the formation or performance of a contract
• When processing is mandatory for compliance with a legal obligation
• When personal data has been made public by the data subject
• When processing is necessary for the establishment, exercise or protection of a legal right
• When processing is required for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the data subject

5. TRANSFER OF PERSONAL DATA TO THIRD PARTIES

Personal data may be shared, limited to the purposes stated above and in compliance with applicable laws, with:

• Authorized public institutions and organizations
• Logistics, shipping and delivery service providers
• Payment service providers
• IT service providers, hosting companies and infrastructure partners
• Business partners and suppliers from whom ARMA receives services

Personal data may be transferred domestically or abroad, in accordance with KVKK and related regulations.

6. PAYMENT AND BANKING DATA

Payment transactions are carried out through secure third-party payment service providers (e.g. Stripe or similar providers).

ARMA does not store or process sensitive banking data such as credit card numbers or bank account details. Such data is processed directly by the relevant payment service providers in accordance with their own privacy and security policies.

7. DATA RETENTION AND SECURITY

• Personal data is stored for the period required by applicable legislation or as necessary for the purposes for which it is processed.
• ARMA takes appropriate technical and administrative measures to protect personal data against unauthorized access, loss, misuse or alteration.
• Personal data may be stored on servers located in Türkiye or abroad, in compliance with legal requirements.

8. RIGHTS OF DATA SUBJECTS

Pursuant to Article 11 of KVKK, Users have the right to:

• Learn whether their personal data is being processed
• Request information regarding the processing of their personal data
• Learn the purpose of processing and whether data is used in accordance with that purpose
• Know the third parties to whom personal data is transferred, domestically or abroad
• Request correction of incomplete or inaccurate personal data
• Request deletion or anonymization of personal data under Article 7 of KVKK
• Request notification of transactions carried out with third parties
• Object to processing results that are detrimental to them
• Claim compensation for damages arising from unlawful processing

9. AMENDMENTS TO THIS POLICY

ARMA reserves the right to amend this Privacy Policy at any time.
Any changes shall become effective upon publication on the Website.

10. CONTACT

For questions regarding this Privacy Policy, personal data processing, or to exercise your rights under KVKK, please contact us:

Company: ARMA ELEKTRONİK METAL SAN. VE TİC. LTD. ŞTİ.
E-mail: muhasebe@arma.com
Address: Şerifali Mahallesi Başer Sokak No: 31-33, İç Kapı No: 1
34775 Ümraniye / İstanbul, Türkiye