As Nuriş Teknoloji ve Makine A.Ş. (“Nuriş” or “the Company”), we care about the security of your personal data. This privacy notice has been prepared pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“the Law”) and the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform, in order to explain which personal data we process as data controller, for which purposes and on which legal grounds, to whom we may transfer them, and your rights under the Law.
1. Data Controller
| Company | Nuriş Teknoloji ve Makine A.Ş. |
|---|---|
| Address | Ahi Evran OSB Mah. Babürşah Cad. No: 2, 06935 Sincan / Ankara, Türkiye |
| Phone | +90 312 267 58 60 |
| info@nuris.com.tr |
2. Personal Data We Process, Purposes and Legal Grounds
We process your personal data only for the purposes stated below, in a manner that is relevant, limited and proportionate to those purposes. Legal grounds are indicated by reference to the relevant sub-paragraphs of Article 5(2) of the Law.
2.1. Contact via the contact form, e-mail and WhatsApp
| Data processed | Name and surname, phone number, e-mail address, content of your message; if you write to us via WhatsApp, also your WhatsApp profile name |
|---|---|
| Purpose | Receiving and evaluating your questions, requests and suggestions and responding to you |
| Legal ground | Your request being directly related to the establishment of a contract (Art. 5(2)(c)); our legitimate interest in responding to your requests and questions (Art. 5(2)(f)) |
| Collection method | Electronically, via the contact form on our website, e-mail and WhatsApp |
2.2. Quotation requests
| Data processed | Name and surname, job title, company, e-mail address, landline, work and mobile phone numbers, region, products of interest and quantity, content of your message |
|---|---|
| Purpose | Preparing a quotation, forwarding your request to the relevant regional sales manager and contacting you |
| Legal ground | Being directly related to the establishment of a contract (Art. 5(2)(c)) |
| Collection method | Via the quotation form on our website, phone and e-mail |
2.3. Warranty registration and after-sales services
| Data processed | Name and surname, department, phone number and e-mail address of the company representative; company contact details; product, serial number, invoice and installation dates, seller and service information; image of the invoice |
|---|---|
| Purpose | Creating and approving the warranty registration, carrying out warranty and after-sales services, and contacting you in this regard |
| Legal ground | Being directly related to the performance of a contract (Art. 5(2)(c)); fulfilment of obligations arising from the relevant legislation (Art. 5(2)(ç)) |
| Collection method | Electronically, via the warranty form on our website |
2.4. Job applications
| Data processed | Name and surname, phone number, e-mail address, address and city, department applied for, and the education, work experience and competence information contained in your CV and message |
|---|---|
| Purpose | Carrying out recruitment processes, evaluating your application for open positions and contacting you |
| Legal ground | Being directly related to the establishment of an employment contract (Art. 5(2)(c)); our legitimate interest in identifying suitable candidates (Art. 5(2)(f)) |
| Collection method | Electronically, via the application form on our website and e-mail |
Please do not include special categories of personal data such as health, religion or association membership in your CV. Such data are not used in the evaluation.
2.5. Phone calls and call recordings
After-sales service calls made via our Company’s telephone line +90 312 267 58 60 are recorded, provided that you are informed about the recording at the beginning of the call and referred to this privacy notice.
| Personal data processed | Phone number, the date, time and duration of the call, the audio recording of the call, the name, surname, company and contact details shared during the call, and information on products, faults, service requests, complaints, approvals and instructions. |
|---|---|
| Purposes and legal grounds | For the purpose of documenting service requests, customer approvals and instructions, as well as the solutions and commitments communicated during the call, and of determining whether the service has been duly performed, we rely on the legal ground that the processing is necessary for the legitimate interests of our Company, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5(2)(f) of the Law). For the processing of recordings that are necessary for the establishment, exercise or protection of the legal rights of our Company, our employees or our customers, we rely on Art. 5(2)(e) of the Law. The recording of calls and the use of the recordings are limited to what is necessary and proportionate for achieving the stated purposes. |
| Collection method | Personal data are obtained automatically, in electronic form, through the corporate telephone and switchboard infrastructure. |
2.6. Use of our website
| Data processed | IP address, browser and device information, date and time of visit, server access logs; technical data used for bot detection in form submissions; with your explicit consent, website usage data obtained through analytics and marketing cookies |
|---|---|
| Purpose | Operating the website securely and without interruption, preventing misuse and automated (bot) form submissions; with your explicit consent, analysing website usage and measuring advertising activities |
| Legal ground | Our legitimate interest in ensuring information security (Art. 5(2)(f)); fulfilment of obligations arising from legislation (Art. 5(2)(ç)); your explicit consent for analytics and marketing cookies (Art. 5(1)) |
| Collection method | Automatically, via the website, server logs and cookies |
Detailed information on the cookies used on our website is available in our Cookie Use Policy.
3. Transfer of Personal Data
3.1. Transfers within Türkiye
Your personal data may be transferred, limited to the purposes above and in accordance with Article 8 of the Law, to the following groups of recipients:
- Legally authorised public institutions and organisations and judicial authorities, upon request and for the fulfilment of our legal obligations
- Our authorised service providers, for carrying out warranty and after-sales services
- Our legal, financial advisory and audit consultants, for the protection of our legal rights and the fulfilment of our legal obligations
- Our suppliers of website hosting, information technology and switchboard services, for the provision of these services and to the extent required by them
- Telephone call recordings, limited to the stated purposes and to the extent necessary: to telephone and information technology service providers, for the provision of recording, maintenance and technical support services
3.2. Transfers abroad
As the servers of some of our service providers are located abroad, your personal data are transferred abroad in the following cases:
- Our website is hosted, through our service provider, on servers in a data centre located in Germany. The information you submit through our website is processed on these servers.
- Our corporate e-mail service is provided via Microsoft 365. The information you send via forms and e-mail is processed on Microsoft’s servers.
- Google reCAPTCHA is used in our forms to prevent automated (bot) submissions; in this context, your IP address and browser information are sent to Google.
- The map on our contact page is displayed using Google Maps; when the map loads, your IP address and browser information are sent to Google.
- If you contact us via WhatsApp, your messages are transmitted through the WhatsApp (Meta) infrastructure.
- With your explicit consent, data obtained through analytics and marketing cookies are sent to Google and Meta. When a YouTube video embedded on our pages is played, the related data are processed by YouTube (Google).
Transfers abroad are carried out in accordance with the conditions and safeguards set out in Article 9 of the Law and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad.
4. Retention Period
We retain your personal data for the periods stipulated in the relevant legislation or, where no such period is stipulated, for as long as required by the purpose of processing. When these periods expire, your personal data are erased, destroyed or anonymised in accordance with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.
Audio recordings of telephone calls are retained for 6 months from the date of recording. At the end of the retention period, the recordings are erased or destroyed unless there is another legal ground requiring their processing.
5. Your Rights under Article 11 of the Law
By applying to our Company, you have the right to:
- learn whether your personal data are processed,
- request information if your personal data have been processed,
- learn the purpose of processing and whether your data are used in accordance with that purpose,
- know the third parties in Türkiye or abroad to whom your personal data are transferred,
- request the rectification of your personal data if they are incomplete or inaccurate,
- request the erasure or destruction of your personal data within the framework of the conditions set out in Article 7 of the Law,
- request that rectification, erasure or destruction be notified to the third parties to whom your personal data have been transferred,
- object to a result arising against you from the analysis of your data exclusively by automated systems,
- claim compensation for damages if you suffer damage due to the unlawful processing of your personal data.
6. How to Apply
In accordance with the Communiqué on the Principles and Procedures for Applications to the Data Controller, you may submit your requests regarding your rights by one of the following means:
- In person or through a notary, with a wet-signed petition: Ahi Evran OSB Mah. Babürşah Cad. No: 2, 06935 Sincan / Ankara, Türkiye
- Signed with a secure electronic signature or mobile signature, or from an e-mail address you have previously provided to our Company and that is registered in our system: info@nuris.com.tr
Your application must include your name and surname and, if submitted in writing, your signature; your Turkish ID number (for foreign nationals, nationality and passport number or, if any, ID number); your residential or business address for notifications; if any, your e-mail address, phone and fax number for notifications; and the subject of your request.
Your application will be concluded free of charge within thirty days at the latest, depending on the nature of the request. If the procedure requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board. If your application is rejected, you find the response insufficient, or no response is given in due time, you may file a complaint with the Personal Data Protection Board within thirty days of learning of the response and, in any case, within sixty days of the application date, pursuant to Article 14 of the Law.
You may also submit your requests for information on and access to your telephone call recordings to our Company by the application methods set out above. To help identify the relevant recording, please state the approximate date and time of the call and the phone number used for the call. Applications are assessed after taking the measures necessary to verify your identity and to protect the rights of third parties.
7. Changes
This privacy notice may be updated in line with changes in legislation and in our personal data processing activities. The current version is always published on this page.
