Customer Privacy Notice

PRIVACY NOTICE UNDER LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

R.A.İ.L. TUR VAGON ENDÜSTRİSİ TAŞIMACILIK SANAYİ VE TİCARET ANONİM ŞİRKETİ (hereinafter referred to as the “Company”) respects and attaches importance to the privacy of personal life. For this reason, we would like to inform you about your rights concerning the use and protection of your personal data under Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the “KVKK” ).

1. Data Controller

R.A.İ.L. TUR VAGON ENDÜSTRİSİ TAŞIMACILIK SANAYİ VE TİCARET ANONİM ŞİRKETİ processes your personal data in its capacity as data controller under Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the “KVKK” ) and the other relevant legislation, and we hereby notify you accordingly.

1. For What Purposes Personal Data Will Be Processed

Your personal data is processed by us for the purposes of

• Conduct of Communication Activities
  • Conduct / Supervision of Business Activities
  • Conduct of After-Sales Support Services for Goods / Services
  • Conduct of Sales Processes for Goods / Services
  • Conduct of Production and Operation Processes for Goods / Services
  • Conduct of Contract Processes
  • Provision of Information to Authorised Persons, Institutions and Organisations
  • Conduct of Business Continuity Activities
  • Conduct of Customer Relationship Management Processes
  • Follow-up of Requests / Complaints
  • Conduct of Customer Satisfaction Activities
  • Conduct of Activities in Compliance with Legislation
  • Conduct of Finance and Accounting Affairs
  • Conduct of Storage and Archiving Activities

In this context, your personal data is processed on the basis of the following legal grounds;

• It is necessary to process personal data belonging to the parties to a contract, provided that it is directly related to the conclusion or performance of that contract
• Processing of data is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
• It is mandatory for the data controller to fulfil its legal obligation
• It is expressly provided for by law

and the following special categories of personal data;

• Health Information

are processed on the legal ground of your explicit consent being obtained.

1. Method of Collecting Personal Data

Your personal data is collected by automated and non-automated means in order to fulfil the purposes stated above.

1. To Whom and For What Purpose Processed Personal Data May Be Transferred

Your personal data is transferred to the following recipient groups: natural persons or private law legal entities in Turkey, and authorised public institutions and organisations, for the purposes of conducting activities in compliance with legislation, conducting sales processes for goods / services, conducting purchasing processes for goods / services, reporting, and conducting contract processes.

11. Your Rights Under Article 11 of the KVKK

Under Article 11 of the KVKK you have rights as a data subject. You may submit your requests concerning these rights by completing all the information specified in the Data Subject Application Form, in accordance with Article 11 and Article 13(1) of the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller :

“Under Article 11 of the KVKK you have rights as a data subject. You may submit your requests concerning these rights by completing all the information specified in the Data Subject Application Form, in accordance with Article 11 and Article 13(1) of the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller :

• Sivas Bulvarı No:218, 38030 Kayseri / Turkey - by coming in person to our Company at this address,
• in writing through a notary public or by registered mail with return receipt, so that we can verify your identity and avoid disclosing information to the wrong person,
• by using a secure electronic signature, a mobile signature or (if any) the e-mail address you have previously notified to our Company and which is registered in our systems, by sending an e-mail to info@railtur.com.

1. Retention Period of Personal Data

The Company deletes, destroys, disposes of or anonymises personal data once the purpose of processing has ceased to exist and the mandatory retention periods laid down by law and other relevant legislation have expired.

1. Changes and Updates

This privacy notice has been prepared under Law No. 6698 on the Protection of Personal Data and the other relevant legislation. The notice may be amended as necessary in line with changes in the relevant legislation and/or in the Company's personal data processing purposes and policies.

The most up-to-date version of the Privacy Notice will be available at https://…………………..

I have read and understood the information given above under Law No. 6698 on the Protection of Personal Data (“KVKK”).