Data Privacy and Security (GDPR)

Special Offers For You

Contact Form Fill it out.

Fill The Form Now

Join Hundreds

of Satisfied People.

Data Privacy and Security (GDPR)

As ENCO, the Personal Data Protection Law No. 6698 (KVKK) contains information for activities arising from legislation and legal regulations.

As ENCO, within the scope of activities arising from the Personal Data Protection Law No. 6698 (KVKK) and related legislation and legal regulations, our clarification text, explicit consent forms, and cookie policy regarding the processing, storage, and transfer of your personal data are provided below to inform data subjects.

KVKK CLARIFICATION TEXT

ENCO LOGISTICS AND TRADE INC. CLARIFICATION TEXT REGARDING THE PROCESSING OF PERSONAL DATA WITHIN THE SCOPE OF LAW NO. 6698

Personal Data Protection Clarification Text

ENCO LOGISTICS AND TRADE INC. (ENCO) respects your privacy and values your personal data security. With this awareness, as ENCO; it is our priority to process and carefully preserve all kinds of personal data belonging to all individuals associated with ENCO, including those benefiting from our products and services, in the best possible way. With full awareness of this responsibility, as the Data Controller within the scope of the Personal Data Protection Law No. 6698 ("Law") and related legislation, we process your personal data as explained below and within the limits prescribed by the legislation. In this context, this text has been prepared to inform and enlighten you within the scope of the Personal Data Protection Law No. 6698 ("Law") and other relevant legislation. Information The Law was adopted to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data, and to regulate the obligations and procedures and principles to be followed by real and legal persons processing personal data. Therefore, with this text, we explain our obligation to inform arising from the Law and present the "Personal Data Protection and Personal Data Sharing Consent" to the information of individuals. Personal Data: Refers to any information relating to an identified or identifiable real person. In the justification, it is defined as making a person identifiable by associating existing data with a real person in any way.

Name, Surname,
Turkish ID Number,
Passport Number
Address,
Phone,
System Login-Logout Times,
Areas/products they visit and transactions they perform,
Locations they are in and digital data kept in related databases or files,
Documents such as job applications/resumes, order records where information about individuals is stored by HR/sales or other units,
Place/Date of Birth,
Vehicle Plate Number,
Email Address / IP Address,
Image and Audio Recordings,
All similar data identifying the person,

Special Categories: Special categories of personal data are data that, if learned, may cause discrimination or victimization of the relevant person. Therefore, they need to be protected much more strictly than other personal data. Special categories of personal data can be processed with the explicit consent of the relevant person or in limited cases specified in the Law.

Race,
Ethnic Origin,
Political Opinion,
Philosophical Belief,
Religion, Sect or Other Beliefs,
Clothing and Attire,
Membership in Associations, Foundations or Trade Unions,
Health,
Sexual Life,
Criminal Conviction/Ownership Data,
Data Related to Security Measures,
Biometric and Genetic Data

Collection and Processing of Your Personal Data The processing of your personal data may vary depending on the service provided or the commercial activity carried out by ENCO; provided that it is part of any data recording system, it refers to all kinds of operations performed on data such as the complete or partial collection, recording, storage, retention, modification, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use of your personal data through automatic or non-automatic means. Your personal data collected through these methods are created and updated by ENCO throughout the duration of cooperation with suppliers, during the service period with customers, and throughout the duration of the employment contract with employees, within the framework of your explicit consent and the processing conditions of personal and special categories of personal data under the KVKK. In addition, in accordance with legal legislation and for ENCO’s commercial interests, personal data are retained and protected for the duration of the data retention period. Your general and special categories of personal data are processed for the following purposes including but not limited to the purposes listed below.

Your name, surname, Turkish ID number, photo, passport number or temporary Turkish ID number, place and date of birth, marital status, gender, registration number, criminal record, driver’s license, SRC certificate, psychotechnical and other identification data we may use to identify you,
Professional qualification certificates,
Your address, phone number, email address, and other contact information,
Data related to your financial background, your bank account number, IBAN number, credit card information, billing details, and other financial data,
Data obtained through our sales and rental services,
Professional data obtained within the scope of the performance of the contract such as certificates of activity, chamber of commerce registration, and if necessary, signature circulars and your signature data,
Your personal data obtained during your communication with us via audio calls recorded for facility security standards, email, mail, or other means,
Your audio and video recordings when you visit our facilities and offices,
Your vehicle plate information if you use the parking lot,
Your personal data including CVs obtained if you apply for a job at ENCO, and in case you are an ENCO employee or a related employee, data required for the creation of a personnel file including your union membership data, employment contract, and information regarding your suitability for the job, education status and certifications,
Data such as your health information and military service status obtained to determine whether you are capable of continuously fulfilling the job requirements,
Your data related to private health insurance and financing, Social Security Institution (SGK) data, blood test results, etc. required for registering with the Private Pension System (BES) insurance company, and necessary documents such as a letter of beneficiary for legal heirs,
Your data regarding entry and exit times collected through systems to monitor ENCO business operations for legitimate interest; your fuel and vehicle usage data tracked via tracking devices placed in company vehicles and obtained from suppliers, for ensuring workplace safety and fulfilling legal obligations,
Your data collected via cameras placed in the workplace building and around our facility to ensure workplace security due to ENCO’s legal obligations and legitimate interests,

Reasons for Processing Your Data Your personal data may be processed for the following purposes:

Provision of the products and services offered by our company to you,
Execution of operational activities,
Recommending products and services tailored to your consumption and purchasing motivations,
Carrying out necessary work with relevant departments and business partners,
Ensuring the management of human resources by our company and the protection of the rights of real persons,
Taking necessary steps for making, implementing, and realizing commercial decisions by our company,
Ensuring the legal security of the real persons with whom we have business relationships and our company arising from these relationships, and similar purposes within the scope of Articles 5 and 6 of Law No. 6698 on the Protection of Personal Data.

Your Personal Data may be processed by ENCO, in its capacity as Data Controller, without your explicit consent under the following circumstances:

Where it is necessary for the protection of the life or physical integrity of the person or another individual, who is unable to express their consent due to actual impossibility or whose consent is not legally valid,
Where it is necessary to process the personal data of the parties to a contract, provided that it is directly related to the execution or performance of the contract,
Where it is necessary for the data controller to fulfill its legal obligations,
Where the relevant data is made public by the individual themselves,
Where it is necessary for the establishment, exercise, or protection of a right,
Where processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, your data may be used for the purposes stated below based on any of these conditions.

Your personal data may be processed for the following purposes:

To communicate with you and others as part of the work process,
To carry out and maintain our commercial and operational activities,
To send you important information about changes to our terms of service or changes in our electronic services and other administrative information,
To improve quality, training, and security (e.g., recorded or monitored phone calls to our contact numbers),
To resolve complaints and process requests for data access or correction,
To comply with applicable laws and regulatory obligations (including those outside your country of residence), including laws related to the fight against terrorism, and to respond to requests from official and governmental authorities (including those outside your country of residence),
To manage and oversee our infrastructure and business operations, and to comply with internal policies and procedures including those related to audit, finance and accounting, billing and collections, IT systems, data and website hosting, business continuity, and records, document and print management,
To identify and defend legal rights; to protect our operations or those of our business partners, our rights, privacy, safety or property, and/or those of you or others; and to pursue available remedies or limit our damages,
To conduct market research and analysis, including customer satisfaction surveys,
To facilitate social media sharing functions,
To personalize your experience with our electronic services by providing content and advertisements tailored to your interests.

Parties to Whom Personal Data May Be Transferred and the Purpose of the Transfer

Your collected personal data may be transferred to ensure the legal and commercial security of our Company and individuals in business relationship with our Company,
To enable our business units to perform the necessary work to allow you to benefit from the products and services offered by our Company,
To recommend products and services offered by our Company that are customized to your preferences, usage habits, and needs,
To our business partners, legally authorized public institutions, and private individuals for the purposes of determining and implementing our Company’s commercial and business strategies and ensuring the execution of our Company’s human resources policies, within the scope of the conditions and purposes of personal data processing as stated in Articles 8 and 9 of the Personal Data Protection Law.

Domestic Institutions and Organizations with Which Data May Be Shared: Police Department, Ministry of Trade of Turkey, Customs Directorate, TOBB, SGK, Mediator, Expert, Insurance Agency, Banks, Court Files, Legal Advisor, Port Operators, Notaries, Customers, Supplier Companies, Ministry of Transportation, Judicial Authorities, Administrative Authorities, ERP (Enterprise Resource Planning), Warehouses, Airline Operators, Air and Sea Freight Agencies, Mediation Office. International Institutions and Organizations with Which Data May Be Shared: Consulates, Customers, Business Partners, Insurance Agencies, Foreign Police, Foreign Customs, Foreign Customs Agencies, Mail cloud solutions, Federal Data Protection Authority of Germany. Method and Legal Basis for Collecting Personal Data: Your personal data is collected by our Company based on different legal grounds in order to carry out our commercial activities through various institutions and organizations. The personal data collected on the basis of these legal grounds may also be processed and transferred for the purposes specified in sections (b) and (c) of this text, within the conditions and purposes of personal data processing stated in Articles 5 and 6 of the Law.

The Rights of the Data Subject as per Article 11 of the Law on the Protection of Personal Data: If you submit your requests regarding your rights to our Company by the methods outlined below in this Clarification Text, our Company will finalize the request free of charge as soon as possible and within no later than thirty (30) days, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this context, data subjects have the right to:

Learn whether personal data is being processed,
Request information if personal data has been processed,
Learn the purpose of processing personal data and whether they are used in accordance with that purpose,
Know the third parties to whom personal data has been transferred domestically or abroad,
Request correction of personal data if it is incomplete or incorrectly processed, and request that the correction be notified to third parties to whom the data was transferred,
Request the deletion or destruction of personal data if the reasons requiring processing no longer exist, despite being processed in accordance with the law and other relevant laws, and request that this be notified to third parties to whom the data was transferred,
Object to a result against oneself that arises from the exclusive analysis of the processed data by automated systems,
Demand compensation for damages if they suffer damage due to the unlawful processing of personal data.

Pursuant to Article 13, Paragraph 1 of the Personal Data Protection Law No. 6698, you may submit your request to exercise the rights specified above to our Company in writing or by other methods determined by the Personal Data Protection Board. Within this framework, the channels and methods for submitting your written requests to our Company under Article 11 of the Law are explained below. Data Security: ENCO protects your personal data in full compliance with all technical and administrative security measures within the framework of information security standards and procedures. These security measures are provided at a level appropriate to possible risks, taking technological capabilities into account. A. Administrative Measures: ENCO ensures data security through the following administrative measures while processing personal data:

The security of our facilities is ensured 24/7 by a private security company authorized by the governorship,
Access to all office areas is granted only through authorization,
A personal data processing inventory has been prepared,
All policies, procedures, and instructions related to information and data security have been published,
Confidentiality undertakings have been obtained from relevant parties,
Risk analyses have been carried out and necessary measures have been taken,
Periodic and random audits are conducted through internal auditing,
Employment contracts and the ENCO Code of Ethics have been signed by relevant parties. (ANNEX-2 ETHICAL RULES AGREEMENT)
The disciplinary regulation has been notified to relevant parties. (ANNEX-3 DISCIPLINARY REGULATION)
A corporate communication document has been prepared and put into effect,
All ENCO employees have received relevant training,
Awareness-raising activities are continuously maintained.

B. Technical Measures ENCO ensures data security while processing your personal data through the following technical measures:

A firewall is used for protection against internal and external threats.
An up-to-date and licensed antivirus program is used for protection against malicious software.
Access to personal data stored electronically at ENCO is restricted through an Authorization Matrix that ensures only authorized personnel can access and process the data.
Periodic access checks are performed by privileged account administrators.
User accounts are managed in Active Directory with encryption.
IP and MAC identification is used to monitor network activities and prevent unauthorized device access to the network at ENCO.
A guest access control application is used on wireless networks to ensure security.
A penetration test is conducted once a year.
A DDOS-featured FIREWALL is used to detect and prevent internal and external attacks.
In compliance with Law No. 5651, log records and SIEM solutions that alert the data controller in case of any activity while processing personal data are used to ensure traceability of all data.
Data classification and data loss prevention software are used for personal data.
Daily backups of important data are automatically performed using software tools.
Data that needs to be deleted or destroyed is wiped using the WIPE method.

Data Controller

Data Controller   | ENCO LOJİSTİK VE TİCARET ANONİM ŞİRKETİ
Address       | Basın Ekspres Yolu, Yenibosna Merkez Mah. Cemal Ulusoy Cad. ENCO Facilities No:57 Yenibosna/Bahçelievler/Istanbul
Phone Number   | +90 212 473 54 00 – F.: +90 212 696 02 53
E-Mail Address   | kvkk@enco.com.tr

Exercising Rights, Application and Contact

The Law on the Protection of Personal Data No. 6698 (“KVKK”) grants personal data owners the right to make certain requests regarding the processing of their personal data, as set forth in Article 11 of the Law. In this context, ENCO LOJİSTİK VE TİCARET ANONİM ŞİRKETİ (“ENCO”) is obliged to respond to such requests in accordance with the Communiqué on Application Procedures and Principles to the Data Controller numbered 30356.
Pursuant to Article 13, Paragraph 1 of the KVK Law, applications to be made to our company as the data controller regarding these rights must be submitted in writing or through one of the methods determined by the Personal Data Protection Board (“Board”) as listed below.

Application Method | Description
In-Person Application | In case of personal applications, the application is accepted if identity verification is completed. The ENCO employee receiving the application checks the identity and indicates this verification on the form. (The envelope should state “Information Request under the Personal Data Protection Law”)
Application via E-Signature or Mobile Signature | The relevant person submits an application to ENCO via [kvkk@enco.com.tr] with an electronic or mobile signature. The signature on the submitted form is verified using a secure electronic signature application, and the application is accepted after identity confirmation. If the signature cannot be verified or if a mobile signature was used, the individual is directed to written application channels. (The subject of the email should be “Information Request under the Personal Data Protection Law”)
Application via Notary | Applications delivered to ENCO’s registered address through a notary are received by the General Directorate Customer Relations Department. (The notification envelope should state “Information Request under the Personal Data Protection Law”)

Applications submitted to us will be answered within 30 days at the latest from the date we receive the request, depending on the nature of the request, pursuant to Article 13/2 of the PDPL. Our responses will be delivered in writing or electronically in accordance with Article 13 of the Law.

CLARIFICATION AND EXPLICIT CONSENT FORM FOR VISITORS

I acknowledge that I have read this Clarification Text and hereby accept, declare, and undertake that I grant prior permission for the collection, recording, processing, and storage of my personal data by ENCO LOJİSTİK VE TİCARET ANONİM ŞİRKETİ (ENCO) in accordance with the principles of Law No. 6698 on the Protection of Personal Data. Pursuant to the “Law on the Protection of Personal Data” and the “Regulation on the Processing and Protection of Privacy of Personal Health Data,” I consent to the processing and, when required, sharing of all types of personal data—both general and sensitive—given by me verbally/written and/or electronically to ENCO, with other persons and institutions where sharing is necessary under the relevant legislation.

My full name, ID number, passport number or temporary ID number, place and date of birth, marital status, gender, personnel number, driver’s license, signature, and other identity data,
My address, phone number, email address, and other contact information,
Audio and video recordings if I visit your facilities and offices,
My license plate information if I use the parking area — I consent to the processing, storage, and domestic transfer of this information as stated in the clarification notice I have read and understood. I hereby give my consent for ENCO to share my above-mentioned personal data with relevant institutions and organizations in order to ensure the continuity of its commercial operations and legal obligations.
I AGREE AND GIVE MY CONSENT (to be written in own handwriting).
FULL NAME
Signature
I DO NOT AGREE AND DO NOT GIVE MY CONSENT (to be written in own handwriting).
FULL NAME
Signature

CLARIFICATION AND EXPLICIT CONSENT FORM FOR JOB APPLICANTS

My full name, ID number, passport number or temporary ID number, place and date of birth, marital status, gender, personnel number, driver’s license, signature, and other identity data,
My professional qualification documents and information,
My address, phone number, email address, and other contact information,
Audio and video recordings if I visit your facilities and offices,
All personal data collected during my job application including my CV and, in case I become an ENCO employee or affiliated worker, data required to create a personnel file such as union memberships, contract information, job suitability, education and certifications,
Health information and military service status data acquired to determine my eligibility for continuous employment,
My license plate information if I use the parking area — I consent to the processing, storage, and domestic transfer of this information as stated in the clarification notice I have read and understood.
I hereby give my consent for ENCO to share my above-mentioned personal data with relevant institutions and organizations in order to ensure the continuity of its commercial operations and legal obligations.

I AGREE AND GIVE MY CONSENT (to be written in own handwriting).
FULL NAME
Signature

I DO NOT AGREE AND DO NOT GIVE MY CONSENT (to be written in own handwriting).
FULL NAME
Signature

CLARIFICATION AND EXPLICIT CONSENT FORM FOR CUSTOMERS

My full name, ID number, passport number or temporary ID number, place and date of birth, marital status, gender, personnel number, criminal record, driver's license, SRC certificate, psychotechnical report, and other identity data,
My activity certificate, chamber registration, and when necessary, signature circulars and signature information, obtained within the scope of contract execution,
My professional qualification documents,
My address, phone number, email address, and other contact information,
Financial background information, including bank account numbers, IBAN numbers, credit card details, invoicing information, etc.,
Data obtained through your sales and rental services,
Audio call recordings and other personal data obtained via email, letters, or other communication methods for security compliance,
Audio and video recordings if I visit your facilities and offices,
My license plate information if I use the parking area,
Data collected through cameras placed in and around ENCO’s workplace for ensuring workplace security, legal obligations, and legitimate interests — I consent to the processing, storage, and transfer to both domestic and international institutions and organizations as specified in the clarification notice I have read and understood.
I hereby give my consent for ENCO to share my above-mentioned personal data with relevant institutions and organizations in order to ensure the continuity of its commercial operations and legal obligations.

I AGREE AND GIVE MY CONSENT (to be written in own handwriting).
FULL NAME
Signature

I DO NOT AGREE AND DO NOT GIVE MY CONSENT (to be written in own handwriting).
FULL NAME
Signature

EXPLICIT CONSENT FORM FOR SUPPLIER COMPANIES

I acknowledge that I have read this Information Notice and, within the scope of the Personal Data Protection Law No. 6698, I accept, declare, and undertake that I give prior permission for the collection, recording, processing, and storage of my personal data by ENCO LOJİSTİK VE TİCARET ANONİM ŞİRKETİ (ENCO) in accordance with the provisions of the law. Pursuant to the “Personal Data Protection Law” and the “Regulation on the Processing and Protection of Privacy of Personal Health Data”, I give my explicit consent for the processing by ENCO of my general and sensitive personal data, including all types of personal data I have provided verbally/written and/or electronically that identify or help identify me, and for their sharing with other persons and institutions as required by the relevant legislation, in the scope defined in the aforementioned law and regulation.

My full name, ID number, passport number or temporary ID number, place and date of birth, marital status, gender, personnel number, criminal record, driver’s license, SRC certificate, psychotechnical report, and other identity data that can be used to identify me,
My activity certificate, chamber of commerce registration, and other professional data acquired within the scope of the contract execution, as well as my signature circular and signature data if necessary,
My professional qualification certificates,
My address, phone number, email address, and other contact data,
My financial background data, including my bank account numbers, IBAN number, credit card information, invoicing details, etc.,
Data acquired through your sales and rental services,
Audio call recordings retained in accordance with facility security standards and personal data obtained through communications with your company via email, letters, or other means,
Audio and video recordings if I visit your facilities and offices,
My license plate data if I use the parking area,
I acknowledge, declare, and undertake that I give my consent to the processing, storage, and domestic/international transfer of my data collected via security cameras placed inside and around the company premises for the purpose of fulfilling ENCO’s legal obligations and legitimate interests in ensuring workplace security.
I hereby give my explicit consent for ENCO to share the above-mentioned personal data with institutions and organizations to ensure the continuity of its commercial operations and fulfill legal obligations.

I AGREE AND GIVE MY CONSENT (to be written in own handwriting).
FULL NAME
Signature

I DO NOT AGREE AND DO NOT GIVE MY CONSENT (to be written in own handwriting).
FULL NAME
Signature

COOKIE POLICY

We value your privacy. Protecting your privacy and security rights is one of our core principles. To ensure the safety and confidentiality of your personal data, our company has established a highly secure internet infrastructure and has taken all necessary precautions. You are not required to provide any personal information to browse our website or obtain information about our products and services. Cookies are used to collect information regarding your website usage during visits in order to facilitate your browsing experience and improve our service. Our website uses both temporary and persistent cookies to differentiate you from other users and to tailor the website according to your interests and preferences. Most internet browsers are pre-configured to automatically accept cookies. You can manage or delete cookies as you wish. Cookie management varies depending on the browser, so please refer to your browser’s help section for more information.
What is a cookie?
A cookie is a small file stored on your computer or mobile device when you visit a website. Cookies are widely used to ensure a website functions properly, to improve its performance, or to provide information to the website owners.
Types of Cookies
In general, there are two types of cookies based on their duration: Session Cookies and Persistent Cookies. Session cookies are created during your visit and are valid only until you close your browser. Persistent cookies are created during your visit and remain until you delete them or they expire. These cookies are used to provide a personalized experience aligned with your settings.
How do we use cookies?
Cookies installed on your computer or data collected from them are used for usage analysis or to ensure effective security measures. Cookies do not collect any of your personal data.
How can you control cookies?
You can manage or delete cookies as you wish. You can delete existing cookies and block new ones from being stored in most internet browsers.
How to manage cookies in your internet browser?
In most internet browsers, you can:

Block all cookies
Block cookies from specific sites
View saved cookies and delete those you choose
Delete all cookies when closing the browser
Block third-party cookies

If you choose to delete cookies, your preferences on the relevant website will be deleted. Also, blocking cookies entirely may result in many websites not functioning properly.

Cookies Used

Advertising

Advertising cookies are used to provide relevant ads and marketing campaigns to visitors. These cookies track visitors across websites and collect information to deliver customized advertisements.

Analytics

Analytics cookies are used to understand how visitors interact with the website. These cookies help provide metrics such as the number of visitors, bounce rate, traffic source, etc.

Functional

Functional cookies help perform specific functions such as sharing website content on social media platforms, collecting feedback, and enabling other third-party features.

Necessary

Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website anonymously.

Other

Other uncategorized cookies are those that are being analyzed and have not been classified into a category yet.

Performance

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for visitors.