KVKK Information Notice

1. Controller

VARS SU ÜRÜNLERİ İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“VARS”, the “Company”, “we” or “us”) is the controller for Midvex. Address: İsmet Kaptan Mah., Şair Eşref Blv. No:6 D:304/B, Konak, İzmir, 35210, Türkiye. Email: [email protected]. Telephone: +90 232 290 57 56.

2. Categories of personal data

• Identity and contact data: name, email and telephone
• Customer and professional data: company, role, service needs, proposals and contracts
• Transaction security data: IP, session, device/browser, access and error logs
• Request content: form messages, budget, timing, project preferences and uploaded files
• Legal and financial data where a legal relationship exists: invoices, payment and dispute records

3. Purposes and legal grounds

We process data to receive and answer requests, run proposal and contract processes, provide accounts and digital services, maintain information security, comply with law, and protect legal rights.

Legal grounds are contract formation or performance (Art. 5/2-c), legal obligation (5/2-ç), establishment, exercise or protection of a right (5/2-e), and legitimate interests that do not prejudice fundamental rights (5/2-f). Non-essential marketing or similar processing relies on explicit consent under Art. 5/1 where required.

4. Collection method

Data is collected automatically, partly automatically, or non-automatically as part of a filing system through web forms, the project planner, account/session activity, email, telephone, online meetings and technical logs.

5. Recipients

Data may be transferred as necessary to IT, cloud, hosting, database, authentication, email, file-storage and security vendors; financial and legal advisers; business partners; and legally competent public authorities. International transfers follow Article 9 conditions and safeguards.

6. Your Article 11 rights

• Learn whether data is processed and request information
• Learn its purpose and whether it is used accordingly
• Know recipients in Türkiye or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction where the legal conditions apply and notification to recipients
• Object to an adverse result produced solely by automated analysis
• Claim compensation for damage caused by unlawful processing

7. Applying to the controller

Send a request with enough information to verify your identity and request, using “KVKK Data Subject Request” as the subject, to [email protected] or in writing to İsmet Kaptan Mah., Şair Eşref Blv. No:6 D:304/B, Konak, İzmir, 35210, Türkiye. Secure e-signature, mobile signature, registered electronic mail and other legally accepted methods may also be used.

We respond as soon as possible and within 30 days at the latest. A fee under the regulator's tariff may apply if responding creates an additional cost.