Personal Data Protection Notice
This notice has been prepared by Point Metal Anonim Şirketi (“Point Metal”), as data controller, under Article 10 of the Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
1. Data controller
| Registered name | Point Metal Anonim Şirketi |
| Address | Zafer Mah. İmalat 8. Sk. No: 24, 59850 Çorlu / Tekirdağ, Türkiye |
| MERSİS no. | 0730080529700001 |
| info@pointmetal.com.tr | |
| Telephone | +90 282 673 71 06 |
2. Personal data processed
- Identity: first name and surname.
- Contact: telephone number, e-mail address, company name, delivery and invoicing addresses.
- Customer transactions: the content of quote and order requests, correspondence, order and shipping details.
- Finance: invoice and payment details; Turkish identity number or tax identification number for invoicing (if an order is placed).
- Transaction security: IP address, browser and device information, server logs.
- Marketing: website usage information obtained through cookies, only if you have given your explicit consent.
3. Purposes of processing
Your personal data is processed for the following purposes:
- receiving, assessing and responding to quote and information requests;
- carrying out order, shipping, invoicing and payment collection processes;
- managing customer and supplier relationships;
- fulfilling obligations under tax, commercial and other legislation;
- keeping the website and information systems secure;
- if you have given your explicit consent, analysing website traffic, measuring advertising performance and carrying out remarketing.
4. Legal grounds
Your personal data is processed on the following legal grounds set out in Article 5 of the Law:
- processing is directly related to the conclusion or performance of a contract (quotation, order and delivery processes);
- processing is necessary for the data controller to fulfil its legal obligations (retention of invoices, commercial books and records);
- processing is necessary for the establishment, exercise or protection of a right;
- processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (information security and server logs);
- your explicit consent, for analytics and marketing cookies.
5. How personal data is collected
Your personal data is collected orally, in writing or electronically through the quote form on our website, WhatsApp, e-mail, telephone and face-to-face meetings. Information sent through the quote form reaches us by e-mail and is not stored in a database on the website server. Information on cookies is given in the Cookie Policy.
6. Transfer of personal data
Limited to the purposes above, your personal data may be transferred to courier and freight companies for shipping, to banks and payment institutions for payments, to the persons and organisations that provide our accounting and financial advisory services, to hosting and e-mail service providers and, upon their request, to the competent public authorities.
If you contact us on WhatsApp, your messages are transmitted through the WhatsApp service provider (Meta). If you consent to analytics and marketing cookies, website usage information is processed through the Google Analytics and Google Ads services (Google). The servers of these service providers may be located outside Türkiye; transfers abroad are carried out in accordance with the conditions in Article 9 of the Law.
7. Retention period
Your personal data is retained for as long as the purpose of processing requires and for the retention periods laid down in the relevant legislation; when that period ends, it is erased, destroyed or anonymised.
8. Job applicants
CVs and application details sent by e-mail for job applications (identity, contact, education and work experience information) are processed to carry out recruitment, on the legal ground that processing is directly related to the conclusion of a contract. This information is not shared with third parties and is retained for as long as the application process requires. We kindly ask applicants not to include special categories of personal data, such as data on health, religion or membership of associations, in their CVs.
9. Your rights under Article 11 of the Law
With regard to your personal data, you have the right to:
- learn whether your personal data is processed;
- request information about the processing if it has been processed;
- learn the purpose of processing and whether the data is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom your data has been transferred;
- request rectification if your data has been processed incompletely or inaccurately;
- request erasure or destruction of your data under the conditions in Article 7 of the Law;
- request that any rectification, erasure or destruction be notified to the third parties to whom your data has been transferred;
- object to a result against you arising from the analysis of the processed data exclusively by automated systems;
- claim compensation for damage suffered as a result of unlawful processing.
10. How to apply
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send requests concerning your rights in writing, together with information that identifies you, to Zafer Mah. İmalat 8. Sk. No: 24, 59850 Çorlu / Tekirdağ, Türkiye, or by e-mail to info@pointmetal.com.tr from an e-mail address that you have previously given us and that is registered in our system. Applications are concluded free of charge within thirty days at the latest, depending on the nature of the request; if the process involves an additional cost, the fee set by the Personal Data Protection Board may be charged.