GPDR
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
Under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by Printer Ofset Matbaacılık San ve Tic A.Ş. (“Printer Ofset” or the “Company”) as data controller, within the scope set out below. This notice is issued pursuant to Article 10 of the Law and the related Communiqué on the Procedures and Principles for Fulfilling the Disclosure Obligation. This is an informative translation; in case of any discrepancy the Turkish version of this notice prevails.
- 1. Identity of the Data Controller
Legal name: Printer Ofset Matbaacılık San ve Tic A.Ş.
Head office: 865 Sokak No: 23 Kemeraltı, Konak / İzmir
Production plant: Sanat Caddesi 5627 Sokak No: 8 Çamdibi, Bornova / İzmir
Phone: +90 (232) 425 06 36
E-mail: [email protected]
Website: printerofset.com.tr - 2. Categories of Personal Data Processed
Identity: name and surname; national identification or tax number to the extent required for invoicing.
Contact: e-mail address, phone number, delivery and billing address.
Customer transactions: quotation and order records, print job history, invoice and payment details, requests and complaints.
Print files supplied by the customer: personal data contained in artwork and print-ready files (for example the name, title and contact details printed on a business card or an invitation).
Transaction security: IP address, server and access logs, cookie records.
Marketing: newsletter and commercial electronic message preferences, where explicit consent has been given.
Physical premises security: CCTV footage and visitor records if you visit our facilities.
Job applicants: education and professional experience data included in your CV, if you apply for a position. - 3. Purposes of Processing
Your personal data is processed in order to manage quotation and order processes; produce, quality-check and ship print jobs; establish and perform the contract; carry out invoicing, accounting and finance operations; respond to your requests, questions and complaints; fulfil statutory retention and reporting obligations; ensure the security of our website and improve user experience; send promotional and commercial electronic messages where you have given explicit consent; and evaluate your job application.
- 4. Legal Grounds for Processing
Your personal data is processed on the following legal grounds set out in Articles 5 and 6 of the KVKK:
• Art. 5/2-a — expressly provided for by law (record-keeping and retention duties under tax and commercial legislation),
• Art. 5/2-c — directly related to the conclusion or performance of a contract (quotation, order and delivery processes),
• Art. 5/2-ç — necessary for the Company to fulfil its legal obligations,
• Art. 5/2-e — necessary for the establishment, exercise or protection of a right,
• Art. 5/2-f — necessary for the legitimate interests of the Company, provided that your fundamental rights and freedoms are not harmed (information, visitor and site security),
• Art. 5/1 — your explicit consent (commercial electronic messages and non-essential analytics and marketing cookies). - 5. Method of Collection
Your personal data is collected by partly automated and non-automated means through the contact and quotation forms on our website, e-mail and telephone correspondence, face-to-face meetings, the print files you send us, contracts and order documents, shipping and logistics processes, and the cookies used on our website. Detailed information about cookies is available in our Cookie Policy.
- 6. Transfer of Personal Data
In accordance with Articles 8 and 9 of the KVKK, and only to the extent required by the purposes above, your personal data may be transferred to public authorities legally entitled to request it, to our financial advisors, independent auditors and legal counsel, to shipping and logistics companies, to the subcontractors and supplier partners we work with where the nature of the job requires it, and to our hosting and IT service providers.
Transfers abroad: cookie and usage data collected through the Google Analytics, Yandex Metrica and Microsoft Clarity services on our website is transferred to these providers, whose servers are located outside Türkiye. Such transfer takes place only if you give explicit consent in the cookie notice; until you do, these tools write no cookies to your device and no data is transferred abroad. You may withdraw your consent at any time. - 7. Retention Period
Your personal data is retained for as long as necessary for the purposes for which it is processed and for the minimum periods required by applicable legislation (in particular ten years for commercial books, records and invoices). Once the retention period expires or the purpose of processing ceases to exist, your personal data is deleted, destroyed or anonymised in accordance with the Company's retention and destruction policy.
- 8. Your Rights as a Data Subject
Under Article 11 of the KVKK you have the right to apply to the Company and:
a) learn whether your personal data is being processed,
b) request information if it has been processed,
c) learn the purpose of processing and whether the data is used in accordance with that purpose,
ç) know the third parties in Türkiye or abroad to whom your personal data has been transferred,
d) request rectification if the data is incomplete or incorrect,
e) request erasure or destruction under the conditions set out in Article 7 of the Law,
f) request that any action taken under points (d) and (e) be notified to the third parties to whom the data was transferred,
g) object to a result to your detriment arising from the analysis of the processed data solely by automated systems,
ğ) claim compensation if you suffer damage due to unlawful processing of your personal data. - 9. How to Apply
Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests concerning the rights above:
• by a signed written petition delivered in person or through a notary public to 865 Sokak No: 23 Kemeraltı, Konak / İzmir, or
• by e-mail sent to [email protected] from the e-mail address already registered in our systems.
Your application must clearly state your name and surname, your national identification number (nationality and passport number for foreign nationals), your address or e-mail address for notification, and the subject of your request; written applications must also bear your signature. Your request will be concluded free of charge as soon as possible and within thirty days at the latest. If the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, you find the response insufficient, or no response is given within the statutory period, you retain the right to file a complaint with the Personal Data Protection Board under Article 14 of the Law. - 10. Changes to This Notice
Printer Ofset reserves the right to amend this privacy notice in line with legislative changes and updates to its business processes. The current version is always published on this page, so we recommend reviewing it periodically.
Last updated: 21 August 2026