Privacy Notice

1. Controller

Steelan Works is a brand used by Omega Prefabrik Yapı Çelik Konstrüksiyon Müh. Mak. San. Tic. Ltd. Şti. The controller of personal data shared through steelanworks.com or the contact channels below is:

Company: Omega Prefabrik Yapı Çelik Konstrüksiyon Müh. Mak. San. Tic. Ltd. Şti.
Address: Keresteciler Sanayi Sitesi 1. Cadde No: 48, Kahramankazan, Ankara, Türkiye
Email: [email protected]
Website: https://steelanworks.com

This notice explains how we process the personal data of people who visit our website, contact us or request a quotation.

2. Personal data we process and how we collect it

Depending on how you contact us, we may process:

• Your name, job title and the company you represent.
• Your business email address, telephone number and any other contact details you share.
• Messages, quotation requests and correspondence sent through the contact form, by email or by phone.
• Personal data such as names, contact details or signatures contained in technical drawings and project documents you send.
• Technical records created to operate and secure the website: IP address, date and time of access, page viewed, browser and device information, and error logs.

This data is collected through the website, contact form, email and telephone, by fully or partly automated means, or by non-automated means where it forms part of a filing system.

Please do not send identity documents, health information or other special categories of personal data that are not needed for your request.

3. Purposes and legal bases under Turkish law

We process personal data under Türkiye's Personal Data Protection Law No. 6698 (“KVKK”) for the following purposes and legal bases:

Our legitimate interests are responding to business enquiries, managing commercial relationships, maintaining information security and protecting our rights. When processing for these purposes, we take into account whether the data is necessary and how it affects the people concerned.

Contacting us does not subscribe you to advertising or newsletters. If you do not provide the information needed to assess your request, we may not be able to respond or prepare a quotation.

4. Recipients

Where necessary for the purpose and subject to the applicable legal conditions, personal data may be shared with:

• Website hosting, email, IT and technical support providers.
• Accounting, financial advisory and legal advisory service providers.
• Logistics, customs and similar service providers, where needed to carry out the work.
• Public authorities, courts and other bodies legally entitled to request it.

Disclosures are limited to the data required for the relevant service or obligation.

International transfers: Our website is hosted in Türkiye. Because we use Google Workspace for email, messages, quotation requests and attachments you send through the contact form or by email, and the identity and contact details they contain, are processed and stored on Google’s servers outside Türkiye for the purpose of business communication. Such transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK.

5. Retention

We keep personal data for as long as the purposes require, taking applicable statutory retention obligations into account:

• Enquiries and correspondence that do not lead to an order or contract: 2 years from the last communication on the request.
• Commercial books, business documents and accounting records: 10 years from the end of the relevant calendar year under Article 82 of the Turkish Commercial Code; the periods in Article 253 of the Tax Procedure Law also apply to tax records.
• Customer, contract and order records and related correspondence: 10 years from the end of the contract (the general limitation period under Article 146 of the Turkish Code of Obligations).
• Website access and security logs: A maximum of 1 year from the date of the record.

Where there is a dispute or a legal retention requirement, the relevant records may be kept for as long as necessary. When the reason for retention ends, personal data is deleted, destroyed or anonymised in accordance with applicable law.

6. Cookies and external links

This website uses only technical cookies that are strictly necessary for it to work. No analytics, advertising or tracking cookies are used.

Our website may contain links to third-party websites. Their handling of personal data is governed by their own privacy notices.

7. Your rights under Turkish law and how to apply

Under Article 11 of the KVKK, you have the right to:

• learn whether your personal data is processed,
• request information about the processing,
• learn the purpose of processing and whether the data is used accordingly,
• know the third parties in Türkiye or abroad to whom the data is transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction of the data under the conditions of Article 7 of the KVKK,
• request that third parties who received the data be notified of any correction, deletion or destruction,
• object to an outcome against you arising solely from automated analysis of the data,
• claim compensation for damage caused by unlawful processing.

You can submit requests in writing to the company address above, together with the information and documents required by law. You may also apply to [email protected] from an email address you have previously provided to us and that is recorded in our systems, or by other methods permitted by law. We may ask for additional information to verify your identity.

Requests are concluded as soon as possible and within 30 days at the latest. They are free of charge as a rule; where an additional cost arises, a fee permitted by law may apply. If your request is rejected, the answer is insufficient or no answer is given in time, you may complain to Türkiye's Personal Data Protection Board within the statutory conditions and time limits.

8. Where the GDPR applies

Where the processing falls within the scope of the EU General Data Protection Regulation (“GDPR”), the following legal bases are used as appropriate to the activity:

• Legitimate interests — Article 6(1)(f) GDPR — for business communication, assessing quotation requests, information security and protecting legal rights.
• Contract — Article 6(1)(b) GDPR — for pre-contractual steps at your request and for performing a contract where you personally are the contracting party.
• Legal obligation — Article 6(1)(c) GDPR — where obligations under EU or Member State law apply.

Subject to the conditions of the GDPR, you may have the right to access your personal data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interests. You may also lodge a complaint with a competent data protection authority.

You can send requests to [email protected]. Requests are answered without undue delay and, as a rule, within one month of receipt. Where necessary because of the complexity or number of requests, this period may be extended by two further months; we will inform you of any extension and the reasons within the first month.

9. Confidentiality of technical drawings and project documents

Your technical drawings and project files are used to assess your request and to carry out the agreed work. If they need to be shared with external manufacturers or partners, we obtain your prior written authorisation, and sharing is limited to the agreed confidentiality terms.

This notice does not replace a separately signed confidentiality agreement. Before sending documents that require specific confidentiality or access restrictions, please contact us at [email protected].

10. Updates

This notice may be updated if our services or data processing practices change. The current version is published on this page with its last updated date.