Personal Data Protection


Personal Data Protection Notice


As Cesa Makina İnşaat Taahhüt Sanayi ve Ticaret Limited Şirketi ("Cesa Makina"), we process your personal data as the data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") within the scope described below.


1. Data Controller


Cesa Makina İnşaat Taahhüt Sanayi ve Ticaret Limited Şirketi
Köseköy Mah. Serincan Sk. No:42/A-B 41080 Kartepe / Kocaeli, Turkey
Phone: +90 262 335 10 07 · E-mail: [email protected]


2. Personal Data We Process



  • Identity and contact details: name, surname, company name, job title, e-mail address, phone number.

  • Request and correspondence details: messages, quotation requests, technical drawings and documents you send us through the contact and quotation forms, by e-mail or by phone.

  • Customer and supplier transaction details: quotation, order, contract, invoice and delivery details.

  • Transaction security data: server logs created when you visit our website, such as IP address, browser information, date and time.

  • CV details: the information in your CV if you send it to us for a job application.


3. Purposes of Processing



  • Responding to your questions, requests and quotation requests,

  • Carrying out quotation, order and contract processes and providing products and services,

  • Maintaining communication with customers, suppliers and business partners,

  • Carrying out finance, accounting and invoicing processes,

  • Ensuring information security and operating the website securely,

  • Evaluating job applications,

  • Fulfilling legal obligations and responding to requests from authorised public bodies.


4. Collection Method and Legal Grounds


Your personal data is collected by automated or non-automated means through the forms on our website, e-mail, phone, trade fairs and meetings, contracts and server logs. It is processed on the legal grounds set out in Article 5 of the KVKK: it is directly related to the conclusion or performance of a contract, it is necessary for compliance with a legal obligation of the data controller, it is necessary for the establishment, exercise or protection of a right, and it is necessary for the legitimate interests of the data controller, provided that this does not harm your fundamental rights and freedoms. Where none of these grounds applies, your explicit consent is obtained.


5. Transfer of Personal Data


Limited to the purposes above, your personal data may be transferred in accordance with Articles 8 and 9 of the KVKK to authorised public bodies, to our advisers such as financial and legal advisers, to banks, to cargo and logistics companies, and to the suppliers from whom we obtain website hosting, e-mail and information technology services.


6. Cookies


Our website uses cookies that are necessary for the site to work securely. The map on the contact page is provided by Google Maps, which may use its own cookies. You can delete or block cookies in your browser settings.


7. Retention Period


Your personal data is kept for as long as necessary for the purpose for which it is processed and for the period required by the relevant legislation; at the end of this period it is deleted, destroyed or anonymised.


8. Your Rights


Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether it is used accordingly, to know the third parties in Turkey or abroad to whom it is transferred, to request its correction if it is incomplete or inaccurate, to request its deletion or destruction under the conditions of Article 7 of the KVKK, to request that these operations be notified to the third parties to whom the data has been transferred, to object to a result against you arising from analysis exclusively by automated systems, and to claim compensation if you suffer damage due to unlawful processing.


9. Applications


You can send your requests in writing to our address above, together with information identifying you, or by e-mail to [email protected], in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application will be answered free of charge within 30 days at the latest; if the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged.


Last updated: October 2026