Privacy Notice (KVKK)

Privacy Notice (KVKK) | Kalkan Endüstri

Since 2020, Kalkan Endüstri has been active in the defence industry, robotic technologies, automation, and machinery and equipment supply.

PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA

This translation is provided for information purposes only. In case of any discrepancy, the Turkish version shall prevail.

As Kalkan Savunma Sanayi ve Teknolojileri A.Ş. (the “Company”), we process the personal data of persons who visit the www.kalkanendustri.com website (the “Site”), use the forms on the Site, submit job applications or contact us, in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”) and the related legislation. This notice has been prepared, in our capacity as data controller, to inform you pursuant to Article 10 of the KVKK and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.

1. Data Controller

• Trade Name: Kalkan Savunma Sanayi ve Teknolojileri Anonim Şirketi
• MERSİS No: 0272108877800001
• Trade Registry No: Antalya / 122335
• Address: Etiler Mah. Evliya Çelebi Cad. No: 23, Unit 106, Muratpaşa, Antalya, Türkiye
• E-mail: info@kalkanendustri.com
• Telephone: +90 242 745 01 08

www.kalkanendustri.com is the website relating to the activities carried out by our Company under the “Kalkan Endüstri” brand.

2. Personal Data Processed, Purposes and Legal Grounds

Data subject / process	Data processed	Purposes of processing	Legal ground (KVKK Art. 5(2))
Contact, information request and quotation forms	Name and surname, e-mail address, telephone number, subject and message content	Receiving and responding to your requests, preparing quotations, providing information about products and services, establishing a commercial relationship	Processing being directly related to the establishment or performance of a contract (c); legitimate interest of the Company (f)
Job application (Human Resources form)	Name and surname, Turkish ID number, gender, place and date of birth, nationality, marital status, address, home and mobile telephone, e-mail, military service status and deferment date, educational information, previous work experience (company, position, length of employment, reason for leaving), other information shared by the applicant	Evaluating the job application, communicating with the candidate, determining a suitable position, conducting the recruitment process	Processing being directly related to the establishment of a contract (c); legal obligation (ç); legitimate interest (f). Retention of your application in the candidate pool after the relevant process is based solely on your explicit consent (Art. 5(1))
Guestbook / comment form	Name and surname, telephone number, comment content	Obtaining opinions and feedback, improving service quality, publishing approved comments on the Site	Legitimate interest (f); publication of the comment on the Site is based on your explicit consent (Art. 5(1))
All Site visitors	IP address, browser and device information, date and time of visit, language preference, session information (by means of cookies)	Operation and security of the Site, prevention of bot/unsolicited submissions (spam) in forms, remembering the language preference, fulfilment of legal obligations	Legal obligation (ç) — Law No. 5651; legitimate interest (f)

Special categories of personal data listed in Article 6 of the KVKK (health, criminal records, religion, biometric data, etc.) are not requested through the Site. Please do not enter data of this nature in the form fields.

3. Method of Collecting Personal Data

Your personal data are collected in electronic form, by partially or fully automated means, through the forms on the Site, through applications you make by e-mail, telephone and WhatsApp, and by means of cookies and server logs during the use of the Site.

4. Transfer of Personal Data

Domestic transfer: Your personal data may be transferred, limited to the purposes above and in accordance with Article 8 of the KVKK, to our hosting and e-mail service provider established in Türkiye, to our legal and financial advisors, and, upon request, to authorised public institutions and organisations and judicial authorities.

Transfer abroad: The following third-party services used on the Site, by their nature of operation, transmit the visitor’s IP address and browser information to servers located abroad:

• Google Maps: displaying the location map only if you choose to view the map on the contact page.

These transfers are carried out within the framework of the conditions set out in Article 9 of the KVKK. Information on how Google processes personal data is available in the Google Privacy Policy.

5. Retention Periods

• Contact, information request and quotation correspondence: for the period required by the commercial relationship and for the retention and limitation periods under Turkish Commercial Code No. 6102 and Turkish Code of Obligations No. 6098 (maximum 10 years),
• Job applications: maximum 2 years from the conclusion of the application; if explicit consent has been given for retention in the candidate pool, until the consent is withdrawn,
• Guestbook entries and comments: until you request their removal from publication, or for a maximum of 3 years,
• Server and access logs: for the period prescribed by Law No. 5651 and the related regulations,
• Cookies: for the periods specified in the Cookie Policy.

Personal data whose retention period has expired are erased, destroyed or anonymised in accordance with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.

6. Your Rights as a Data Subject (KVKK Art. 11)

By applying to our Company, you have the right to:

• learn whether your personal data are processed,
• request information in this regard if they have been processed,
• learn the purpose of processing and whether they are used in accordance with their purpose,
• know the third parties to whom they are transferred domestically or abroad,
• request their rectification if they have been processed incompletely or inaccurately,
• request their erasure or destruction within the framework of the conditions set out in Article 7 of the KVKK,
• request that the rectification, erasure or destruction operations be notified to the third parties to whom the data have been transferred,
• object to the occurrence of a result against you by means of the analysis of the processed data exclusively through automated systems,
• request compensation for the damage in the event that you suffer damage due to unlawful processing.

You may withdraw your consent at any time with respect to processing based on explicit consent.

7. Application Method

You may submit your requests concerning your rights, in Turkish pursuant to the Communiqué on the Procedures and Principles for Applications to the Data Controller, including information identifying you (name and surname, Turkish ID number or, for foreign nationals, nationality and passport/identity number), your address for notification, your e-mail address and telephone number, if any, and the subject of your request:

• in person or through a notary public, by a petition bearing your wet signature, to our address above,
• to our Company’s registered electronic mail (KEP) address, with a secure electronic signature or mobile signature,
• to info@kalkanendustri.com, from your e-mail address previously notified to our Company and registered in our system.

Your application will be concluded free of charge, depending on its nature, within 30 days at the latest; if the operation additionally requires a cost, the fee in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, if you find the response inadequate, or if no response is given in due time, you may file a complaint with the Personal Data Protection Board pursuant to Article 14 of the KVKK.

Last updated: 30.09.2026