KVKK Information Notice
Last updated: September 21, 2026
As Hobiex Otomotiv A.Ş. (the “Company”), we provide this notice under the Turkish Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It covers personal data processed through our B2B portal at b2b.hobiex.com (the “Portal”). This is a translation. In case of any discrepancy, the Turkish version prevails. Our Privacy Policy additionally covers the GDPR.
1. Data controller
- Company
- Hobiex Otomotiv A.Ş.
- Address
- Ortaköy Mah. İlter Blv. No:25B, 34570 Silivri / İstanbul, Türkiye
- Tax office / Tax ID
- [TBD: Vergi Dairesi / Tax Office] / 4631056472
- Trade registry no.
- 444760
- MERSIS no.
- [TBD: MERSIS No]
- KEP (registered e-mail)
- [TBD: KEP adresi / KEP address]
- hobi@hobiex.com
- Privacy contact
- [TBD: e.g. kvkk@hobiex.com]
- Phone
- +90 212 734 37 31
2. Categories of personal data processed
| Category | Data |
|---|---|
| Identity | Name and surname of the contact person and users, user name |
| Contact | E-mail address, phone number, address, city, country, postal code |
| Customer transaction | Company name, tax number, customer number, cart, order, delivery, invoice, shipment and account statement data, uploaded bulk order documents, chat assistant messages |
| Transaction security | Password (one-way hashed), session data, IP address, browser and device information, sign-in and error logs, e-mail verification data |
| Marketing (only with your explicit consent) | Daily usage records of products viewed, searches made and items added to the cart; anonymised page-view statistics |
3. Purposes and legal grounds
| Purpose | Legal ground (Art. 5 of the Law) |
|---|---|
| Assessing registration applications, e-mail verification, creating and managing user accounts | Directly related to the establishment or performance of a contract (Art. 5/2-c) |
| Showing customer-specific prices, stock and conditions; handling orders, delivery, invoicing, shipment tracking and account statements | Performance of a contract (Art. 5/2-c) |
| Reading uploaded bulk order documents to fill in orders | Performance of a contract (Art. 5/2-c) |
| Answering questions through the chat assistant and improving its answers | Performance of a contract and legitimate interest (Art. 5/2-c, f) |
| Keeping commercial books, invoices and tax records; responding to requests from competent authorities | Expressly provided for by law and legal obligation (Art. 5/2-a, ç) |
| Ensuring information security, preventing abuse, keeping access and error logs | Legitimate interest (Art. 5/2-f) |
| Establishing, exercising or protecting rights in legal disputes | Establishment, exercise or protection of a right (Art. 5/2-e) |
| Measuring product views, searches and traffic to improve our range and the Portal | Explicit consent (Art. 5/1). You can withdraw it at any time via “Cookie settings” at the bottom of every page. |
4. Method of collection
Your personal data is collected electronically and partly by automated means, on the legal grounds above, through the Portal’s registration, account, order and bulk order forms, the chat assistant, cookies and similar technologies (see our Cookie Policy), e-mail and phone correspondence, and our ERP system in which your company is registered as our customer.
5. Transfers of personal data
Within Türkiye: to cargo and logistics companies delivering your orders, banks, independent auditors, our legal and financial advisers and, on request, competent public authorities and courts, limited to the purposes above and in line with Article 8 of the Law.
Abroad: to our service providers in the USA and the EU (Vercel, Neon, Railway, Resend, Google, OpenAI, bunny.net) for hosting the Portal, database services, sending e-mails, the chat assistant, reading bulk order documents and delivering product images. The full list is in our Privacy Policy. These transfers are carried out under Article 9 of the Law, on the basis of the standard contracts published by the Personal Data Protection Board and the other safeguards provided for in the Law.
6. Your rights under Article 11 of the Law
By applying to the Company, you have the right to:
- learn whether your personal data is processed;
- request information about the processing if it is;
- learn the purpose of the processing and whether the data is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom your data is transferred;
- request correction of incomplete or inaccurate data;
- request erasure or destruction of your data under the conditions in Article 7 of the Law;
- request that corrections, erasures and destructions be notified to the third parties who received your data;
- object to a result against you arising from analysis of your data exclusively by automated systems;
- claim compensation for damage suffered because of unlawful processing of your data.
7. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your application in writing in Turkish:
- as a wet-signed letter delivered in person, through a notary or by registered mail to our address above;
- from your registered electronic mail (KEP) address to [TBD: KEP adresi / KEP address];
- signed with a secure electronic or mobile signature, or from an e-mail address previously registered in our system, to [TBD: e.g. kvkk@hobiex.com].
Your application must include your name and surname; your signature if it is in writing; your Turkish ID number, or for foreign nationals your nationality and passport or ID number; your residential or business address for notifications; your e-mail address, phone or fax number if available; and the subject of your request.
We will conclude your application free of charge as soon as possible and within 30 days at the latest. If the request involves an additional cost, we may charge the fee set by the Personal Data Protection Board. If your application is rejected, you find our answer insufficient or we do not answer in time, you may file a complaint with the Personal Data Protection Board within 30 days of learning our answer, and in any case within 60 days of your application.