Legal
Privacy notice on the protection of personal data
This notice is drawn up under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data and the related Communiqué. For visitors located in the European Union it also satisfies Articles 13 and 14 of the GDPR.
Last updated: 11 September 2026
1. Identity of the data controller
The data controller for the purposes of the Law is the following legal person:
EMEA Technology Endüstriyel Otomasyon A.Ş.
NİLTİM Alaaddin Bey Mah. 631. Sok. No:8
Nilüfer — Bursa / Türkiye
MERSIS no: 0333192519000001
Tax office / number: 3331925190
Registered e-mail (KEP): emeateknoloji@hs01.kep.tr
VERBIS registration: [VERBIS number — to be supplied by the client]
E-mail:
info@emea.com.tr
Telephone:
0 850 532 36 32
The marked fields above must be completed before publication: the data controller’s full registered name and contact details are mandatory elements of a privacy notice.
2. What data, for what purpose, on what legal ground
The table below shows every category of data we process, together with its purpose, legal ground and retention period. We do not process any category that is not listed here.
| Category of data | Purpose | Legal ground | Retention |
|---|---|---|---|
| Identity and contact data (name, surname, company, e-mail, telephone) | Preparing quotations, conducting contract negotiations, responding to your request | Art. 5(2)(c) — necessary for the conclusion or performance of a contract GDPR 6(1)(b) |
10 years from the end of the relationship (limitation period) |
| Content of your request (machine, project and application information) | Making a technical assessment, proposing the right solution, opening a support record | Art. 5(2)(c) and 5(2)(f) — contract and legitimate interest GDPR 6(1)(b), 6(1)(f) |
10 years from the end of the relationship |
| Transaction security data (IP address, browser information, access time) | Keeping the server secure, detecting misuse and attacks | Art. 5(2)(ç) and 5(2)(f) — legal obligation and legitimate interest GDPR 6(1)(c), 6(1)(f) |
At most 12 months in server logs |
| Consent record (consent id, date, version, categories, hashed IP) | Demonstrating that consent was obtained | Art. 5(2)(ç) — legal obligation of the data controller GDPR 7(1), 5(2) |
Validity of the consent + 3 years |
| Commercial electronic message permission (e-mail, record of consent) | Sending newsletters, event and training announcements | Art. 5(1) — explicit consent GDPR 6(1)(a) |
Until you opt out; then 3 years as evidence |
3. How the data is collected
Personal data is collected through the contact and training request forms on this website, e-mails you send us directly, telephone conversations, business cards handed over at trade fairs and events, and documents exchanged during contract processes — partly by automated and partly by non-automated means.
The site carries no advertising network, social media tracker or analytics code. Every cookie in use is listed individually in the cookie policy.
4. Who the data is shared with
We do not sell, rent or transfer your personal data to third parties for marketing. Transfers are limited to the following:
- Hosting and infrastructure providers: The companies providing our server and e-mail services, only to the extent the service requires and in the capacity of data processor.
- Form infrastructure (Zoho): If you complete the training pre-registration form, the form data is processed on Zoho’s infrastructure. The form is never added to the page without your functional cookie permission.
- Competent public authorities: Where we are legally obliged to provide information, limited to the scope of the request.
- Legal and financial advisers: Where a dispute or statutory obligation arises, only so far as necessary.
5. Transfer abroad
The servers of some services we use may be located outside Türkiye. Any such transfer is made under Article 9 of the Law: to countries with adequate protection, or where standard contractual clauses or an undertaking exist between the parties. Where none of these apply, your explicit consent is obtained. Under the GDPR, transfers rest on Articles 44–49.
6. Security of the data
Under Article 12 of the Law we take technical and organisational measures appropriate to the risk: site traffic is encrypted end to end (HTTPS), administrative access is restricted by authorisation, IP addresses are not stored in raw form in consent records, server logs are deleted on a schedule, and staff with access to personal data are bound by confidentiality.
7. Retention and destruction
Personal data is deleted, destroyed or anonymised at the end of the periods set out in the table above, or when the purpose of processing ceases to exist. Destruction is carried out periodically.
8. Your rights
Under Article 11 of the Law you have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose of processing and whether the data is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction where it is incomplete or inaccurate; to request erasure or destruction; to request that such action be notified to the third parties to whom the data was transferred; to object to a result against you arising from analysis solely by automated systems; and to claim compensation if you suffer damage because of unlawful processing.
If you are located in the European Union you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection under Articles 15–22 of the GDPR, together with the right to lodge a complaint with the supervisory authority of your country.
How to exercise these rights, what your request must contain and the response deadlines are set out in detail on the data subject request page.
9. Changes to this notice
If this notice changes, the current version is published on this page and the update date above is revised. If the cookie categories change, your consent is requested again separately.