Privacy Notice (KVKK) — Saroz Marine Engineering

Draft. This is an informational English translation; the Turkish version prevails. It must pass legal review before publishing, and the fields in square brackets [ ] must be completed with the company's actual details.

1. Data Controller

This Privacy Notice has been prepared by Saroz Denizcilik Mühendislik [full legal title] (“Saroz” or the “Company”), as data controller, pursuant to Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”) and related legislation.

Address: Yayla, Dua Sk. No:3, 34944 Tuzla/İstanbul
Email: info@sarozengineering.com
Phone: +90 531 081 28 18
MERSİS / Trade Registry No.: [to be completed]

2. Personal Data Processed

The following personal data may be processed via the contact form and other channels:

Identity: first name, last name
Contact: email address, phone number, company/organization information
Request / transaction content: vessel-project type, the scope of your request, and the content of any technical drawing/file you send us
Transaction security: technical records related to the form submission (e.g. time of submission)

3. Purposes of Processing

Evaluating and responding to quote and information requests
Conducting communication regarding our services (ship maintenance & repair, new-build outfitting, on-site machining)
Managing pre-contractual discussions and the establishment of a business relationship
Fulfilling legal obligations and establishing rights in potential disputes

4. Legal Grounds for Processing

Your personal data is processed on the following legal grounds under Article 5 of the KVKK:

Being directly related to the conclusion or performance of a contract (Art. 5/2-c)
The data controller fulfilling its legal obligation (Art. 5/2-ç)
Legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f)
Where the above conditions are absent, obtaining your explicit consent (Art. 5/1)

5. Transfer of Personal Data

Your personal data may be transferred — only for the purposes above and in accordance with Articles 8–9 of the KVKK — to authorized public institutions, legal advisors, and the suppliers that support the delivery of the service (e.g. email/infrastructure providers). No transfer is made to third parties for marketing purposes.

6. Method of Collection

Your personal data is collected through channels such as the website contact form, email, telephone and direct meetings, in electronic and/or physical media, by automated and non-automated means.

7. Retention Period

Your personal data is retained for as long as the purposes of processing require, subject to the statutory limitation periods set out in the relevant legislation; at the end of that period it is erased, destroyed or anonymized.

8. Your Rights as a Data Subject

Pursuant to Article 11 of the KVKK, by applying to the data controller you have the right to:

Learn whether your personal data is being processed and, if so, request information about it
Learn the purpose of processing and whether the data is used in line with that purpose
Know the third parties to whom the data is transferred, domestically or abroad
Request correction of incomplete or inaccurately processed data
Request erasure or destruction of the data in accordance with the legislation
Request that correction, erasure and destruction be notified to the third parties to whom the data was transferred
Object to an adverse outcome arising from analysis solely by automated systems
Claim compensation if you suffer damage due to unlawful processing

9. How to Apply

You may submit requests regarding your rights in writing to the address above, or via info@sarozengineering.com, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your applications are concluded free of charge within thirty (30) days at the latest, depending on the nature of the request; where the process incurs an additional cost, the fee set in the tariff determined by the Board may be charged.

Last updated: June 2026