Privacy Policy
Privacy Notice on the Protection and Processing of Personal Data
1. Data Controller
As DİNAMİK RAF SİSTEMLERİ SANAYİ VE TİCARET ANONİM ŞİRKETİ (“Dinamik Raf”), we would like to inform you, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, about the personal data we process in the course of our activities of manufacturing, selling, shipping and installing warehouse racking systems, supermarket and store shelving systems, and counter and display products.
| Company Name | DİNAMİK RAF SİSTEMLERİ SANAYİ VE TİCARET ANONİM ŞİRKETİ |
| MERSIS No. | 0297101415300001 |
| Head Office | İstoç Toptancılar Çarşısı 2445 Sokak 182-184, 34218 Bağcılar / İstanbul, Türkiye |
| Factory | Keçecioğlu O.S.B. Mah. 2 Nolu Cadde No: 9, Çaycuma / Zonguldak, Türkiye |
| Phone | +90 212 659 81 70 / 444 5 771 |
| [email protected] | |
| Registered Electronic Mail (KEP) | [email protected] |
| Website | www.dinamikraf.com |
This notice applies to visitors to our website; persons who contact us or request a quote; our customers and customer representatives; dealer and supplier representatives; visitors to our facilities; delivery drivers; and job applicants. Our employees are informed separately. For cookies used on our website, please see our Cookie Policy.
2. Our Core Principles for the Protection of Personal Data
Dinamik Raf processes personal data in accordance with the principles set out in Article 4 of the Law:
- processing lawfully and fairly,
- keeping data accurate and, where necessary, up to date,
- processing for specified, explicit and legitimate purposes,
- being relevant, limited and proportionate to the purposes for which data is processed,
- retaining data only for the period required by the relevant legislation or by the purpose of processing.
Your personal data is not processed unless one of the legal grounds set out below applies. Explicit consent is requested, through a separate consent form, only where none of the other legal grounds listed in the Law applies; no service or contract is made conditional on giving explicit consent. As a rule, special categories of personal data listed in Article 6 of the Law (health data, biometric data, etc.) are not processed for the groups of persons covered by this notice.
3. Personal Data Processed, Purposes, Legal Grounds and Collection Methods
Legal grounds are indicated by the sub-paragraphs of Article 5(2) of the Law: (a) expressly provided for by law; (c) directly related to the establishment or performance of a contract; (ç) necessary for the data controller to fulfil its legal obligation; (e) necessary for the establishment, exercise or protection of a right; (f) our legitimate interest, provided that it does not harm your fundamental rights and freedoms.
| Group of Persons | Personal Data Processed | Purposes of Processing | Legal Ground | Collection Method |
|---|---|---|---|---|
| Website visitors | IP address, browser and device information, date and time of visit | Ensuring the security and operation of the website, detecting attacks | (f), (ç) | Automatically, through the website |
| Persons submitting a contact form, a quote request or a free site survey request | Name and surname, company and job title, phone, email, address, content of the request, measurements, plans and photos of the area to be surveyed | Responding to requests, preparing quotes, carrying out site surveys and 3D modelling | (c), (f) | Contact form, email, phone, face-to-face meetings |
| Customers, customer representatives and employees | Name and surname, Turkish ID or tax number, title, signature, phone, email, billing, delivery and installation address, order and payment information, photos of the installation taken during assembly, requests and complaints | Establishing and performing the contract, production planning, invoicing, shipping, installation, warranty and after-sales services, accounting and financial operations, protecting our rights in disputes | (c), (ç), (e), (f) | Contract, order form, email, phone, on-site survey and installation |
| Dealer and supplier representatives and employees | Name and surname, title, phone, email, signature and signature circular information, contract and payment information | Managing dealership and supply relationships, purchasing, payments and collections, contract management | (c), (ç), (f) | Contract, email, phone, face-to-face meetings |
| Callers to the 444 5 771 line and switchboard | Phone number, name and surname, content of the request | Routing and responding to requests, monitoring service quality | (c), (f) | Phone call |
| Visitors to the factory, warehouse and store | Name and surname, company, entry and exit times, camera footage | Physical security of premises, occupational health and safety, keeping visitor records | (ç), (f) | Visitor log, security cameras |
| Shipping and delivery drivers | Name and surname, Turkish ID number, vehicle and trailer plate numbers, phone, camera footage | Issuing delivery notes, ensuring safe loading and unloading | (a), (ç), (c), (f) | Delivery notes and transport documents, security cameras |
| Job applicants | Name and surname, contact details, CV, education and work experience, references, interview notes | Carrying out recruitment processes and evaluating the applicant | (c), (f) | Job application, email, career websites, face-to-face interviews |
Cameras are located only in areas where they are necessary for security and occupational health and safety, such as entrances and exits, warehouses, shipping areas and the production floor; there are no cameras in toilets, changing rooms, rest areas or prayer areas. Areas under camera surveillance are indicated by warning signs at their entrances.
4. Transfer of Personal Data
Your personal data may be transferred to the recipients below, limited to the purposes stated above and in accordance with Article 8 of the Law:
| Recipient Group | Purpose of Transfer |
|---|---|
| Authorised public institutions and organisations (tax offices, Social Security Institution, courts, enforcement offices, law enforcement, etc.) | Fulfilling legal obligations and responding to official requests |
| Our dealers | Providing sales, delivery, installation and after-sales services in your region |
| Cargo, transport and installation service providers we work with | Delivery and installation of products |
| Banks and payment institutions | Payment and collection transactions |
| Financial advisors, auditors, lawyers and consultants | Obtaining financial, legal and audit services |
| Information technology, hosting, email and software service providers | Operating our systems, storing and backing up data securely |
5. Retention Periods and Destruction
Your personal data is retained for the period required by the relevant legislation or by the purpose of processing. When this period ends, it is deleted, destroyed or anonymised in accordance with our Personal Data Retention and Destruction Policy, in periodic destruction cycles of no more than 6 months. The main retention periods are as follows:
| Data | Retention Period |
|---|---|
| Contracts, invoices, delivery notes and commercial correspondence | 10 years from the end of the relevant financial period (Turkish Commercial Code, Article 82) |
| Quote and contact requests that do not result in a contract | 2 years from the conclusion of the request |
| Security camera recordings | 30 days; in the event of an incident, only the relevant recording is kept for the duration of the legal process |
| Website security logs | 1 year |
| Applications of candidates who are not hired | 1 year from the conclusion of the application |
6. Security of Personal Data
In accordance with Article 12 of the Law, Dinamik Raf takes the necessary technical and administrative measures to prevent unlawful processing of and access to personal data and to ensure its safekeeping. These measures include access restricted by an authorisation matrix, firewall and antivirus software, regular backups, keeping access logs, confidentiality obligations and training for employees, and data protection clauses in contracts with data processors. If personal data is obtained by others through unlawful means, the data subjects concerned will be notified as soon as possible and the Personal Data Protection Board within 72 hours at the latest.
7. Commercial Electronic Messages
Commercial electronic messages containing campaigns, new products and promotional announcements (SMS, email, calls) are sent only with your separate consent, in accordance with Law No. 6563. You may withdraw your consent free of charge at any time via the Message Management System (İYS) or the opt-out link in the messages. Information about quotes, orders, deliveries and installations within the scope of our existing commercial relationship does not count as commercial electronic messages.
8. Your Rights Under Article 11 of the Law
By applying to Dinamik Raf, you have the right to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether it is used in line with that purpose,
- know the third parties in Türkiye or abroad to whom it has been transferred,
- request correction if it has been processed incompletely or inaccurately,
- request its erasure or destruction under the conditions set out in Article 7 of the Law,
- request that the actions taken under items 5 and 6 be notified to the third parties to whom the data has been transferred,
- object to any outcome to your detriment arising from the analysis of the processed data exclusively by automated systems,
- claim compensation if you suffer damage due to unlawful processing.
9. How to Apply
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests:
- in person or through a notary public, with a wet-signed petition sent to our head office address, or
- from the email address you previously provided to Dinamik Raf and that is registered in our system, to [email protected].
Your application must include your name, surname, your signature for written applications, your Turkish ID number (for foreign nationals, nationality and passport or ID number), your address for notifications, your email, phone and fax number if any, and the subject of your request. You may use the Application Form on our website. Additional information may be requested from you to verify your identity.
Your application will be concluded free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, if you find the response insufficient, or if no response is given in time, you may file a complaint with the Personal Data Protection Board within 30 days of learning of the response and, in any case, within 60 days of the application date.
10. Effective Date
This Privacy Notice was published on 13 October 2026. It will be updated if our personal data processing activities or the applicable legislation change; the current version is always published at www.dinamikraf.com.
Last updated: 13 October 2026