Last Updated: August 12, 2026
* This is an English translation. In case of any difference in meaning between the original Turkish text and the English translation, the Turkish text shall apply.
STIL TRAFFIC SIGNS INDUSTRY AND TRADE INC.
INFORMATION TEXT UNDER LAW NO. 6698 ON THE PERSONAL DATA PROTECTION LAW
A. PURPOSE
STIL TRAFFIC SIGNS INDUSTRY AND TRADE INC. (“COMPANY”, “Company”), located at Kaptanpaşa Mah. Halit Ziya Türkkan Sokak No:19/13 Famas Plaza C Blok Şişli/İstanbul, has prepared this Information Text (“Information Text”) under Law No. 6698 on the Protection of Personal Data in order to fulfill the obligation stipulated by the KVKK, taking into account the importance we attach to fundamental human rights and the superior value of personal data. We hereby inform you that your personal data, which you have provided/will provide to our company and/or which our company has obtained externally through any means, will be processed by our company as the “Data Controller” in the following manner:
- Within the scope of the purpose requiring the processing of your personal data, and in a manner that is limited and proportionate to and connected with this purpose,
- Maintaining the accuracy and up-to-date nature of the personal data as you have provided or as it has been provided to our company,
- It will be recorded, stored, preserved, reorganized, shared with institutions legally authorized to request this personal data, and transferred, assigned, classified, and processed in other ways listed in the Personal Data Protection Law, and subjected to other processes listed in the Personal Data Protection Law, to domestic or foreign third parties under the conditions stipulated in the Personal Data Protection Law.
- With this Disclosure Statement, the company has adopted the principle of conducting and developing its activities in compliance with the principles set forth in the Personal Data Protection Law. In accordance with the KVKK (Turkish Personal Data Protection Law), the COMPANY, as the Data Controller, informs its employees, job applicants, supplier employees, customers, visitors, and third parties whose personal data will be processed as follows and provides clarification within the scope specified in Article 10 of the KVKK.
B. PERSONAL DATA WE PROCESS, COLLECTION METHODS, LEGAL GROUNDS, AND PURPOSES OF PROCESSING YOUR PERSONAL DATA
- Personal Data We Process
a) Identity Information: Your name, surname, Turkish Republic identity number, mother’s name, father’s name, place and date of birth, personnel registration number, and other information provided to the Company with your explicit consent.
b) Contact Information: Your residential address, business address, telephone number and email address, KEP address, and if applicable, the mobile phone number, fax number, or other communication channels you have provided with your consent for us to contact you.
c) Financial Information: Bank name and branch information, bank account number, and IBAN number obtained for the purpose of paying salaries and benefits, recovering excess and unjustified payments, making payments from revolving funds, and making payments for external assignments. d) Legal Transaction Data: Information regarding correspondence with authorized persons, institutions, and organizations, data regarding lawsuits and enforcement files, and information regarding legal information requests. e) Customer Transaction Data: Records related to the use of products and services, information such as customer instructions and requests necessary for the use of products and services, customer number, contract numbers, transaction date, account number, product information, customer satisfaction information, access to the directory for mobile applications, etc.
f) Customer Financial Data Content: Financial information kept related to the use of products and services (information such as bank name, bank account, etc.)
g) Visual/Audio Information: Visual and audio data processed for the purpose of campaigns, advertising, promotion, marketing, information, sales, after-sales services, access through social media accounts, and conducting surveys. In conferences, seminars, theater performances, exhibitions, debates and similar events organized by the Company; still or flowing images and/or sounds of the event location and participants for the purpose of promoting, announcing and disseminating the event, as well as visual/audio information provided by cameras installed to ensure security at the Company’s headquarters, branches and representative offices. The audio/visual information obtained during these events may be used on the Company’s website, social media platforms used by the Company, and in publications published by the Company, provided that it does not exceed the scope of the Company’s activities and is limited to the purpose of the event. Alternatively, it may be sent to third parties (printing houses, publishers, institutions, organizations, etc.) for printing/publication with the Company’s permission and under its control. This method of use does not include security camera footage, and participants will be informed separately and their explicit consent will be obtained before the relevant audio/visual personal data is used (for example, at the beginning of the event).
h) Your Work and Education Information: Your personal information, employment status, contact information, educational background (“University graduate, Master’s degree graduate, Physics department graduate,” etc.), information about courses/seminars attended, certificates, and national or international exam results are collected through application forms, registration documents, and/or job application forms sent to the Company’s official email address, or through other online or physical application methods provided by the Company.
i) Special Categories of Personal Data: In order to fulfill employment obligations arising from legislation within the company and within the scope of our legitimate interests, health data, disability status, and criminal record information of employees are processed.
While the Company has no other direct purposes for processing special categories of personal data besides those mentioned above, it may also process your religious, clothing, philosophical beliefs, political opinions, and health data (e.g., clothing, devices, and prostheses visible in photographs) that may be indirectly obtained from identity documents, photographs, or still/flowing images related to events that you have submitted to the Company, as well as other special categories of information that you have voluntarily indicated in a document provided by the Company.
- Methods of Collecting Your Personal Data
Your personal data is collected through any information, documents, and records you submit to our Company before, during, or after the establishment of a contractual relationship, as well as through information, documents, and records obtained from third parties, public institutions, and organizations for reasons stipulated by law; through physical or electronic means for reasons stipulated by law; through registration/application forms filled out over the internet; through receipts and expense documents; through video and audio recording devices used at events; through security camera recordings; and, in cases where personal data is sent to the Company’s official e-mail address, KEP address, or fax address at +90 (212) 293 85 15, through the aforementioned communication channels.
Personal data is also collected through the physical submission of documents, the physical completion of a document provided by the Company, and by calling the Company’s telephone numbers.
- Legal Basis for Personal Data Processing
The Personal Data Protection Law (KVKK) lists the conditions for processing personal data in Article 5, paragraph 2. If the purposes for processing personal data by a data controller can be evaluated within the framework of the personal data processing conditions listed in the KVKK, that data controller can process personal data lawfully. In this context, the Company also carries out personal data processing activities when the purposes pursued by the Company can be evaluated within the scope of the personal data processing conditions regulated in the KVKK. The Company does not engage in any personal data processing activity that does not fall within the scope of the personal data processing conditions.
The personal data processing conditions included in the PDPL(KVKK) are as follows;
- The explicit consent of the data subject,
- It is explicitly provided for in the laws,
- It is necessary for the protection of the life or physical integrity of the person who is unable to express their consent due to factual impossibility or whose consent is not legally valid, or of another person,
- It is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract,
- It is necessary for the data controller to fulfill its legal obligations,
- The data has been made public by the data subject themselves,
- Data processing is necessary for the establishment, exercise or protection of a right,
- Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
For sensitive personal data, the fundamental processing requirement is explicit consent, and the Company does not fundamentally aim to process sensitive personal data. However, sensitive personal data that we are required to process for the purposes of our operations or that you have explicitly consented to process are processed proportionately within the framework of the legislation.
The conditions for processing special categories of personal data, as stipulated in the KVKK (Law on Protection of Personal Data), are as follows:
- The explicit consent of the data subject.
- It must be explicitly provided for in the laws.
- It must be necessary for the protection of the life or physical integrity of the person who is unable to express their consent due to factual impossibility or whose consent is not legally valid, or for the protection of the life or physical integrity of another person.
- It must relate to the personal data that the data subject has made public and be in accordance with their intention to make it public.
- It must be necessary for the establishment, exercise, or protection of a right.
- It must be necessary for the protection of public health, preventive medicine, medical diagnosis, treatment and care services, and the planning, management, and financing of health services by persons or authorized institutions and organizations under an obligation of confidentiality.
- It must be necessary for the fulfillment of legal obligations in the fields of employment, occupational health and safety, social security, social services, and social assistance.
- It must be necessary for foundations, associations, and other non-profit organizations or formations established for political, philosophical, religious, or trade union purposes, provided that they comply with the legislation they are subject to and their purposes, are limited to their field of activity, and are not disclosed to third parties; It should be directed at current or former members and affiliates, or individuals who are regularly in contact with these organizations and entities.
With your explicit consent, your personal data is processed by our company for the following purposes:
- Special categories of personal data include health data, disability status, and criminal records.
- Processing Purposes
Your personal data will be used in accordance with the limits stipulated in the KVKK (Personal Data Protection Law) and in compliance with the legislation, to achieve the purposes stated in the COMPANY’s articles of association. The processing purposes are as follows;
- Fulfilling obligations related to activities and audits stipulated in the relevant legislation,
- Establishing rights within the scope of the relevant legislation,
- Carrying out the necessary work by the relevant units to enable you to benefit from the services offered by our company,
- Contacting you through the communication channels you have shared with us for the purpose of promoting our company and its activities,
- Providing personnel in areas needed by the company, fulfilling rights and obligations within the scope of legislation regulating working life, primarily the Labor Law No. 4857, the Occupational Health and Safety Law No. 6331 and the Social Insurance and General Health Insurance Law No. 5510,
- Enabling the payment of salaries, provision of per diem allowances, revolving fund payments, etc. related to personnel.
- Conducting activities, handling internal company correspondence,
- Providing information and documents to authorized public institutions and judicial authorities in cases specified by law,
- Ensuring the functionality of the organization and event management processes (seminars, conferences, meetings, training, symposiums, etc.) in the company and announcing them to the public, ensuring the continuity of the website and social media accounts with up-to-date data to ensure the company’s public awareness and maintain its currency, managing promotion and advertising processes,
- Maintaining archives in accordance with the procedures specified in the legislation for the purpose of carrying out storage and archiving activities and creating annual unit activity reports,
- Creating and tracking visitor records,
- Ensuring the security of the building, personnel and visitors,
- Anonymizing data and using it in statistical activities for research purposes,
- Receiving and responding to data subject applications within the scope of the Personal Data Protection Law (KVKK). (Creating customer records, following up on legal processes, collecting and analyzing sales and service data, collecting incoming calls and providing service to customers, tracking customer visits, etc.)
- Registering prospective customers in the system,
- Recording and tracking vehicle information,
- Using the customer relationship management system for reporting, sales, and after-sales activities,
- Creating invoices,
C. TRANSFER OF PERSONAL DATA
The procedures and principles to be applied in the transfer of personal data are regulated in Articles 8 and 9 of the Personal Data Protection Law (KVKK). Your personal data is shared with authorized public institutions and organizations, judicial authorities, enforcement authorities, law enforcement units, group companies, and suppliers from whom contracted products and/or services are obtained, for the purposes and through the means indicated in this Disclosure Statement.
The company does not transfer any data that is not related to its purposes. For example, even if we obtain your vehicle license plate information with your consent, it is not shared with any third party, including the individuals and institutions listed above. The exception to this is when the transfer of the data in question is mandated by legislation, is necessary for a criminal investigation, or is requested by an official authority based on legislation and with justification.
We may also share your personal data with the following recipients and/or recipient categories:
- Persons authorized by us to carry out the personal data processing described in this privacy notice (Our employees and business partners who have confidentiality obligations and are required to comply with the rules regarding the processing of your personal data)
- Our personal data processors (External companies to whom we have delegated some of the processing activities listed in this privacy notice. For example, security system providers, accounting and other consultants, data hosting providers, etc.)
- Law enforcement agencies or any other authority whose decisions are binding on us (This applies when we need to comply with a court order or law, or defend ourselves in legal proceedings.)
D. ENSURING THE SECURITY AND PRIVACY OF PERSONAL DATA
In accordance with Article 12 of the Personal Data Protection Law, our company takes all necessary technical and administrative measures to ensure an appropriate level of security to prevent the unlawful processing and unlawful access to personal data, and to ensure the preservation of personal data. You can access the technical and administrative measures taken by our company via the VERBİS “Registry Inquiry” link by entering “STİL TRAFİK İŞARETLERİ SANAYİ VE TİCARET ANONİM ŞİRKETİ” in the inquiry section. In the event that personal data processed is obtained by others through unlawful means, our company will notify the relevant data owner and the Board as soon as possible.
E. DELETION, DESTRUCTION AND ANONYMIZATION OF PERSONAL DATA
In accordance with Article 7 of the Personal Data Protection Law (KVKK), even if personal data has been processed in accordance with the relevant legislation, if the reasons requiring its processing cease to exist, our Company will delete, destroy, or anonymize the personal data automatically or upon the request of the data subject. The procedures and principles regarding this matter will be implemented in accordance with the “Personal Data Storage and Destruction Policy Document” that we have prepared based on the KVKK and the secondary legislation that will be created based on this Law.
F. RIGHTS OF THE DATA SUBJECT
Within the scope of the Personal Data Protection Law (KVKK);
- To learn whether your Personal Data is being processed,
- To request information regarding the processing of your Personal Data if it has been processed,
- To learn the purpose of the processing of your Personal Data and whether it is being used in accordance with its purpose,
- To know the third parties to whom your Personal Data has been transferred, domestically or internationally,
- To request the correction of your Personal Data if it is incomplete or inaccurate,
- To request the deletion or destruction of your Personal Data within the framework of the conditions stipulated in the KVKK legislation,
- To request that the actions taken within the scope of articles v and vi be notified to the third parties to whom your Personal Data has been transferred,
- To object to a result that is detrimental to you arising from the analysis of the processed data exclusively through automated systems,
- To request compensation for damages if you suffer damage due to the unlawful processing of your Personal Data.
You have rights.
How can you exercise your rights?
You can download the “application form” from www.stiltrafik.com, fill it out according to your request/complaint, and send it to us via info@stlboya.com, or you can fill out the form physically and send it by cargo/mail to the following address: “Kaptanpaşa Mah. Halit Ziya Türkkan Sokak No:19/13 Famas Plaza C Blok Şişli/İstanbul”. If you submit your request using one of the methods shown above, in accordance with Article 13/2 of the KVKK (Personal Data Protection Law), your request will be evaluated within 30 days at the latest, and you will be informed about the matter. If your request is accepted, the necessary actions will be taken immediately by the data controller COMPANY.
G. DATA CONTROLLER AND CONTACT PERSON
As stated in this Privacy Notice, the COMPANY is the data controller in accordance with the KVKK (Turkish Personal Data Protection Law).
1) Data Controller Information
Full Name: STIL TRAFFIC SIGNS INDUSTRY AND TRADE INC.
Address : Kaptanpasa Mh. Halit Ziya Turkkan Sk No:19/13 Famas Plaza C Blok Sisli /Istanbul
Web Site : www.stiltrafik.com
2) Contact Person
Name – Surname: Yakup Ölmez
E-mail : info@stlboya.com
Telefon : +90 (212) 491 01 44
