KVKK Privacy Notice
Draft for review
21 October 2026. This text has been made available for review based on the website's current form workflow. Safeguards for international transfers and the company's internal retention practices have not yet been verified. Publishing this draft does not mean that these steps have been completed.
This notice informs people who contact Testeresan through testeresan.com, request a callback or a quotation for a product or used machine, or apply for a job, under Türkiye's Personal Data Protection Law No. 6698. This notice is neither an explicit consent statement nor a contract.
Data controller and contact details
The data controller is Testeresan Sanayi Testere ve Bıçakları Ltd. Şti. Contact address: İkitelli OSB Metal İş Sanayi Sitesi 19. Blok No: 37, 34490 Başakşehir / İstanbul. Email: info@testeresan.com. Telephone: 0212 671 37 27.
What information is collected?
Depending on the form you use, we collect your name, email address, telephone or mobile number, company name, product and quantity details, the relevant product or page, and your requests and comments. Job applications also include your place of residence, the position you are applying for, information entered in the references field, an optional CV attachment and your introduction. Required fields are requested to assess the relevant enquiry.
For transaction security, your IP address and a technical hash derived from it, the request time, submission reference, processing result and service logs may also be processed. Do not include identity documents or special categories of personal data, such as health, criminal conviction, religion or trade union information, in your CV or comments unless necessary for the application. Share other people's information only to the extent necessary and after informing them.
Purposes and legal grounds for processing
- Identity, contact and request information necessary to prepare quotations for products, services and used machines and to fulfil your request is processed under Article 5/2-c of the Law, insofar as it directly relates to entering into or performing a contract.
- Information necessary to answer general enquiries, respond to callback requests and maintain communication is processed under Article 5/2-f on the basis of the company's legitimate interests, provided that your fundamental rights and freedoms are not harmed.
- Candidate information necessary to assess your application for the position and contact you is processed under Article 5/2-c as part of the steps towards entering into an employment contract. This draft does not grant permission to retain applications indefinitely for other or future positions.
- Technical records necessary to prevent spam, misuse and duplicate submissions are processed under Article 5/2-f on the basis of the legitimate interest in operating the service securely.
In the event of a legal dispute or a binding request from an authority, the necessary part of the relevant records may be processed under Article 5/2-e to exercise or protect a right, or under Article 5/2-ç to fulfil an applicable legal obligation. Other purposes must be assessed separately.
Collection method and recipients
Information is collected electronically through the details you enter in web forms and the files you upload. The form message is sent through Cloudflare's email service to info@testeresan.com. Google provides the email infrastructure for this address. The data is made accessible to company staff responsible for assessing the request.
Cloudflare participates in processing through web hosting, connection security and email delivery; Google participates through the recipient mailbox and email storage services. Data may be disclosed to authorised public bodies or courts only where there is an applicable legal obligation or a duly made request.
International transfers
Using Cloudflare's and Google's international infrastructure may involve processing form information, CV attachments and technical records abroad or accessing them from abroad. This process is subject to the current transfer conditions in Article 9 of the Law.
Subject to review: The applicable adequacy decision or appropriate safeguard for these providers on behalf of Testeresan, the relevant contracting parties and the status of required notifications have not been verified in this draft. No claim is made that a standard contract has been signed, that the Authority has been notified or that authorisation has been obtained. Regular cloud and email transfers do not acquire a legal basis merely because this notice is read or a form checkbox is selected.
Retention and deletion
Submitted form information and CV attachments are held in the recipient mailbox. The form application does not save CVs in the website's public file area or in a separate CV database. The technical duplicate-prevention record is scheduled for deletion after 24 hours, and the rate-limit counter after approximately two minutes. These periods are not the deletion periods for mailbox messages or service logs.
Actual retention periods for emails, applications, backups and service logs will be clarified during review together with the company's procedures and service settings; this draft does not state an unverified period in months or years. Records must be kept only for as long as required by applicable legislation and the processing purpose. When the reason for processing ceases to exist, data must be deleted, destroyed or anonymised in accordance with Article 7 of the Law.
Your rights and how to apply
Under Article 11 of the Law, you may obtain information about the processing of your data, its purpose and its recipients; request correction of inaccurate or incomplete data, deletion or destruction when the conditions are met, and notification of these actions to recipients. You also have the right to object to an adverse result arising solely from automated analysis and to seek compensation for damage caused by unlawful processing.
You may submit a written request to the address above, stating your identity and request. You may also apply from an email address previously provided to the company and registered in its system by writing to info@testeresan.com. Other methods are governed by the Communiqué on the Principles and Procedures for the Request to the Data Controller. Requests must be concluded within 30 days at the latest; fees may be charged only where permitted by legislation.
The information checkbox on the form acknowledges that the notice has been read. It is not treated as marketing permission, consent to international transfers or blanket consent for all processing activities.
