Contracts

KVKK law text

Legal text published by Acarkon Entegre Ağaç San. ve Tic. A.Ş. in its capacity as data controller.

05

KVKK law text

KVKK law text — overview

This page provides an English overview of Law No. 6698 on the Protection of Personal Data (“KVKK”) as it relates to the processing activities of Acarkon Entegre Ağaç San. ve Tic. A.Ş. and the Silva Stone brand. It is an informative summary and does not replace the official Turkish text of the Law published in the Official Gazette or guidance issued by the Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu).

1. Purpose of the Law

The KVKK aims to protect the fundamental rights and freedoms of individuals, particularly the right to privacy, with regard to the processing of personal data, and to set out the obligations of natural and legal persons who process personal data as well as the procedures and principles to be followed.

2. Key definitions (summary)

  • Personal data: any information relating to an identified or identifiable natural person
  • Special categories of personal data: data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data
  • Processing: any operation performed on personal data, whether or not by automated means
  • Data controller: the natural or legal person who determines the purposes and means of processing and is responsible for the data filing system
  • Data processor: the natural or legal person who processes personal data on behalf of the data controller

3. General principles (Art. 4)

Personal data must be processed in accordance with the law and good faith; be accurate and, where necessary, kept up to date; be processed for specified, explicit and legitimate purposes; be relevant, limited and proportionate; and be retained for the period stipulated in legislation or required for the purpose of processing.

4. Conditions for processing (Arts. 5–6)

As a rule, personal data may not be processed without the explicit consent of the data subject. The Law also sets out exceptions (for example performance of a contract, legal obligation, establishment or protection of a right, and legitimate interests of the data controller provided that fundamental rights are not harmed). Special categories of personal data are subject to stricter conditions.

5. Obligation to inform (Art. 10)

When collecting personal data, the data controller must inform the data subject about the identity of the controller, the purposes of processing, to whom and for what purposes data may be transferred, the method and legal basis of collection, and the rights under Article 11. See our Privacy notice.

6. Rights of the data subject (Art. 11)

Data subjects may learn whether their data are processed; request information; learn the purpose and whether use is compatible with that purpose; know the third parties to whom data are transferred; request correction; request deletion or destruction under the conditions in the Law; request notification of such operations to recipients; object to results against them arising from exclusively automated analysis; and claim compensation for damage arising from unlawful processing.

7. Transfer abroad (Art. 9)

Transfer of personal data abroad is subject to the conditions set out in the KVKK, including adequacy decisions, appropriate safeguards or explicit consent where required. Acarkon applies these rules when using cross-border service providers.

8. Relationship to Acarkon / Silva Stone

Acarkon Entegre Ağaç San. ve Tic. A.Ş. acts as data controller for personal data processed through the Silva Stone website, showroom network and related customer channels. Detailed practices are described in the Privacy policy, Cookie policy, Security policy and Personal data protection pages.

9. Disclaimer

This English page is provided for convenience for international visitors. In case of conflict, the official Turkish text of Law No. 6698 and decisions of the Personal Data Protection Authority prevail.