Loading

PRIVACY POLICY

1. Purpose and Scope

The purpose of this Privacy Policy is to provide information on the general principles regarding the protection of personal data and website security during the use of the www.schmid-pekintas.com website (the “Site”) operated by Schmid Pekintaş Güneş Enerji Sistemleri Sanayi ve Ticaret A.Ş. (“Schmid Pekintaş” or the “Company”).

Schmid Pekintaş attaches importance to the protection of personal data and conducts its personal data processing activities in accordance with the relevant legislation, particularly Law No. 6698 on the Protection of Personal Data (“KVKK”).

This Privacy Policy is a general information text. It does not replace the obligation to provide information that must be fulfilled when personal data are obtained under Article 10 of the KVKK or, where necessary, the obtaining of explicit consent.

Detailed information on specific personal data processing activities carried out within the scope of the Site is provided in the privacy notices relating to the relevant processing activity.

2. Personal Data That May Be Processed within the Scope of the Site

Depending on how you use the Site and the services you use, the following categories of personal data may be processed:

  • Identity Information: information such as name and surname where submitted through contact or other forms on the Site,
  • Contact Information: e-mail address, telephone number and other contact information provided by you,
  • Request and Complaint Information: messages, requests, suggestions, complaints submitted to the Company and information relating to their resolution,
  • Transaction Security Information: IP address, connection and access records and technical records created to ensure the security of the website and information systems,
  • Marketing and Communication Preferences: records relating to newsletter, promotional or commercial communication preferences depending on the preference of the data subject,
  • Information Obtained through Cookies and Similar Technologies: online identifiers, device and usage information depending on the nature of the cookie used.

Unless the Company requests the submission of special categories of personal data through the Site, users are advised not to share unnecessary special categories of personal data through contact forms or other free-text fields.

3. Purposes of Processing Personal Data

Personal data obtained within the scope of the Site may, depending on the specific processing activity, be processed for the purposes of:

  • ensuring that the Site operates securely and effectively,
  • ensuring information and system security,
  • detecting and preventing unlawful or unauthorised use,
  • receiving, evaluating and concluding information, product, service, quotation, communication and similar requests submitted through the Site,
  • managing suggestions, requests and complaints submitted by users,
  • conducting communication processes relating to products and services,
  • fulfilling legal obligations,
  • establishing, exercising or protecting a right,
  • conducting newsletter, product and service promotion and marketing activities where the necessary legal conditions are met.

Detailed information on the purpose and legal ground on which personal data are processed is provided in the privacy notice presented at the relevant data collection point.

4. Legal Grounds for Processing Personal Data

Personal data processing activities carried out within the scope of the Site are performed, depending on the nature of the specific activity, on the basis of the relevant condition set out in Article 5 of the KVKK, including:

  • being expressly provided for by law,
  • being necessary to process personal data belonging to the parties to a contract, provided that the processing is directly related to the establishment or performance of the contract,
  • being mandatory for the data controller to fulfil its legal obligation,
  • having been made public by the data subject and processing in accordance with the intention of disclosure,
  • being necessary for the establishment, exercise or protection of a right,
  • being necessary for the legitimate interests of the Company, provided that such processing does not prejudice the fundamental rights and freedoms of the data subject,
  • the explicit consent of the data subject where necessary.

Where another personal data processing condition exists, explicit consent is not used as a general or fallback legal ground.

For personal data processing activities based on explicit consent, the information obligation and the obtaining of explicit consent are carried out separately.

5. Transfer of Personal Data

Personal data processed within the scope of the Site may be transferred to third parties only where transfer is necessary, limited to specified and legitimate purposes and subject to the conditions set out in Article 8 of the KVKK.

In this context, personal data may, depending on the specific processing activity, be transferred to:

  • information technology, software, system, security, maintenance and technical support service providers,
  • server and hosting service providers,
  • authorised suppliers and business partners from which the Company receives services,
  • legal advisers and lawyers,
  • public institutions and organisations authorised by law,
  • judicial and administrative authorities.

The purpose of the transfer, the categories of data transferred and the relevant recipient groups are additionally specified in the privacy notice relating to the processing activity through which the personal data are collected.

6. Transfer of Personal Data Abroad

Where personal data may be transferred abroad due to servers, hosting, electronic mail, cloud services, software, analytics tools or other technological services used by the Company, the transfer is carried out in accordance with Article 9 of the KVKK and the relevant secondary legislation.

Transfers abroad may be carried out on the basis of whichever of the following is applicable to the specific transfer:

  • the existence of an adequacy decision issued by the Personal Data Protection Board,
  • where no adequacy decision exists, the provision of one of the appropriate safeguards prescribed by law,
  • where no appropriate safeguard can be provided, only where one of the occasional transfer conditions regulated by law exists.

Where a standard contract is used, the notification obligations prescribed by legislation are fulfilled.

Whether the technological services actually used by the Company result in a transfer of personal data is assessed on a service-provider and data-flow basis.

7. Retention of Personal Data

Personal data are retained for the period specifically prescribed by the relevant legislation, if any, and where no specific period exists, for the period necessary for the purpose for which they are processed.

Where personal data are the subject of a legal dispute or are necessary for the establishment, exercise or protection of a right, the data may be retained for the required period taking into account the limitation and forfeiture periods under the relevant legislation.

When all reasons requiring the processing of personal data cease to exist, the data are deleted, destroyed or anonymised in accordance with the KVKK and the relevant legislation.

8. Data Security

Within the scope of Article 12 of the KVKK, Schmid Pekintaş takes the necessary technical and administrative measures to ensure an appropriate level of security in order to:

  • prevent unlawful processing of personal data,
  • prevent unlawful access to personal data,
  • ensure the secure retention of personal data.

Access to personal data is restricted in line with job and authorisation requirements and appropriate security measures are applied to prevent unauthorised access.

The Site may contain links to websites belonging to third parties. The personal data processing activities of those websites are the responsibility of the relevant third parties. However, Schmid Pekintaş’s obligations arising from the KVKK in respect of personal data transfers to third parties remain reserved.

9. Cookies and Similar Technologies

The Site may use essential cookies for the operation and security of the website and, depending on the user’s preference, functional, performance-analytics or advertising/marketing cookies.

For cookies that are not strictly necessary for the operation of the Site, where there is no appropriate personal data processing condition under the KVKK other than explicit consent, such cookies are not activated without the user’s explicit consent.

Cookies within this scope are kept disabled by default and users are given the opportunity to set cookie preferences, refuse consent or later withdraw consent already given.

Detailed information on the name, purpose, provider, type, retention period, legal ground and, where applicable, transfer abroad of the cookies used is explained in the Cookie Policy.

Users may change their cookie preferences at any time through the “Cookie Preferences” area provided on the Site.

10. RIGHTS UNDER THE KVKK

Data subjects whose personal data are processed have the rights set out in Article 11 of the KVKK.

Applications for the exercise of these rights may be submitted to the Company in accordance with the procedures and methods specified in Schmid Pekintaş’s Personal Data Protection and Processing Policy and the Data Subject Application Form.

General e-mail addresses published by Schmid Pekintaş on the website have not been designated as special application channels for requests under Article 11 of the KVKK.

The Company may apply necessary and proportionate identity verification measures in order to reliably establish that an application belongs to the data subject and to prevent personal data from being disclosed to unauthorised persons.

11. Other Websites

The Site may contain links directing users to websites belonging to third parties.

Personal data processing activities carried out by third parties on their own websites are subject to the privacy and personal data processing policies of the relevant third parties.

Users are advised to separately review the privacy and personal data protection texts relating to the third-party websites to which they are directed.

12. Updating the Privacy Policy

This Privacy Policy may be updated in line with changes in legislation, decisions of the Personal Data Protection Board, the Company’s activities or changes to the technical infrastructure of the Site.

The current Privacy Policy takes effect from the date it is published on the Site.

Last Update Date: [ 24/08/2026 ]