Personal Data Protection Information Notice
Informational Statement in Accordance with the Personal Data Protection Law No. 6698
1. Purpose and Identity of the Data Controller
In accordance with the Personal Data Protection Law No. 6698 ("the Law"), your personal data shall be processed by SF Metrology Calibration and Geological Services ("the Company") acting as the Data Controller, strictly within the scope detailed below and in compliance with the principles stipulated in the legislation.
Company Contact Information
For all matters relating to the processing of your personal data, our Company acts as the Data Controller:
SF Metroloji Kalibrasyon ve Jeoloji Hizmetleri
Address: Orta Mahallesi, 1162. Sokak No:14, Serik / Antalya, Turkey
Email: sf@sfmet.com
Phone: +90 506 112 92 91
2. Purposes of Processing Personal Data
The collected personal data is processed strictly within the data processing conditions set forth in Articles 5 and 6 of the Law, specifically for the following purposes:
- •Submission of technical quotations and execution of commercial processes regarding our calibration, proficiency testing, validation, and engineering services,
- •Management of contractual processes, facilitation of service delivery, and issuance of technical reporting,
- •Planning corporate appointment procedures and scheduling operational services,
- •Fulfillment of legal notification obligations to authorized government bodies and accreditation agencies (e.g., TURKAK),
- •Administration of customer relationship management and corporate communications,
- •Ensuring the integrity of internal audits, quality assurance systems, and data security frameworks.
3. Methods and Legal Grounds for Collecting Personal Data
Your personal data is gathered through the following operational channels throughout your legal association with the Company. These operations are predicated upon the legal justification that processing is obligatory for the execution of a contract, and for the Data Controller to execute its legal obligations explicitly outlined in Article 5 of the Law:
- •Inquiry and official contact forms submitted via the corporate website,
- •Correspondences facilitated via our official electronic mail systems,
- •Verbal interactions conducted over our institutional telephony networks,
- •Service agreements, confidentiality undertakings, and other formal technical documentation.
4. Processed Categories of Personal Data
Identity Information
Name, surname, and, where mandated by official legislation, verification indices such as identity or passport numbers.
Contact Information
Electronic mail addresses, telephone coordinates, and registered notification addresses.
Professional Transaction Data
Affiliated institutional entities, corporate titles, designated departments, and authorization credentials.
Technical and Transactional Security Data
Apparatus specifications, instrumental metrics, requested calibration scopes, IP addressing, and system access logs.
5. Dissemination and Transfer of Personal Data
Your personal attributes may be transferred, purely confined to legitimate operational purposes and congruent with the prerequisites stipulated in Articles 8 and 9 of the Law, to the subsequent entities:
- •Designated public institutions and accreditation authorities (arising from audit scopes or obligatory legal procedures),
- •Indispensable operational subcontractors and affiliated partners solely for the facilitation of the respective technical service,
- •Independent consultancy structures and autonomous audit bodies employed fundamentally for the maintenance of our legal, financial, and technical infrastructure.
6. Rights of the Data Subject (Article 11)
Pursuant to Article 11 of the Law, you reserve the right to convey direct requisitions to the Company. Principal rights are outlined as follows:
- ✓Ascertaining whether personal data is being processed, and requisitioning related factual data if processed,
- ✓Petitioning for the rectification of inadequately or erroneously processed information,
- ✓Demanding the erasure or destruction of the data amidst conditions prescribed by pertinent laws,
- ✓Contesting substantive outcomes arising detrimentally against you explicitly ensuing from automated analytical systems,
- ✓Requesting notifications surrounding correction or destruction undertakings to be conveyed to third-party entities receiving the data,
- ✓Filing assertions for prejudice redresses induced directly by the illicit manipulation of personal verifications.
Execution of Right of Application:
Email: sf@sfmet.com
Address: Address: Orta Mahallesi, 1162. Sokak No:14, Serik / Antalya, Turkey
Formal demands concerning the preceding rights shall be finalized fundamentally at no expenditure within a definitive window not exceeding 30 (thirty) days.
7. Stipulated Security Frameworks and Preventative Measures
The Company implements requisite administrative and technical defenses at optimal thresholds to nullify any unregulated processing, illegitimate access, and to assure the uncompromising preservation of your data:
- •Utilization of cryptologic mechanisms encompassing stringent firewalls and SSL certifications,
- •Confinement of digital administrative privilege governed exclusively by a tiered operational hierarchy,
- •Enactment of regimented structural backup schematics securely insulated against systematic anomalies,
- •Periodic implementation of technical verifications and robust preservation of system log entries.
8. Policy of Data Retention and Eradication
Sourced data elements are securely retained throughout definitively mandated statutory limitation durations; thereafter, they are irreversibly destroyed, erased, or effectively anonymized per corresponding organizational destruction policies.
This informational decree remains subject to revisions intrinsically linked with prospective legislative alterations or systemic advancements characterizing corporate security policies.
Effective Framework Validation: March 2026