Personal Data Protection Notice

Last updated: 02/09/2026

Website: ktmgrup.com

• 1. Identity and Contact Information of the Data Controller

  • 1.1. Responsible person: KTM GROUP
  • 1.2. Contact address: Nenehatun Cad. Şairler Sk. No:10/3 06700 GOP Çankaya/Ankara, Turkey
  • 1.3. Email address: info@ktmgrup.com

• 2. Purpose of Processing Personal Data

  • 2.1. This clarification text covers the personal data of the relevant persons who visit ktmgrup.com and benefit from its services.
  • 2.2. Your personal data is processed through ktmgrup.com for the following purposes:
    • 2.2.1. Communicating with members, providing information and services.
    • 2.2.2. Realization of purchasing and reservation transactions and follow-up of details.
    • 2.2.3. E-bulletin subscription and sharing current information.
    • 2.2.4. Receiving, processing and resolving requests and complaints.
    • 2.2.5. Realization of product promotion and sales activities.
    • 2.2.6. Collecting and analyzing user feedback.
    • 2.2.7. Conducting market research and surveys.
    • 2.2.8. Communication of special offers and promotions.
    • 2.2.9. Conducting user satisfaction surveys to improve service quality.
    • 2.2.10. Compilation and analysis of statistics on website usage.
    • 2.2.11. Presentation of targeted advertisements and evaluation of advertising effectiveness.
    • 2.2.12. Promotion of membership benefits and presentation of user-specific offers.
    • 2.2.13. Announcement and promotion of new products and services.
    • 2.2.14. Organization of user events and campaigns.
    • 2.2.15. Personalization of website content to enhance user experience.
    • 2.2.16. Management of customer satisfaction and loyalty programs.
    • 2.2.17. User security and fraud prevention activities.
    • 2.2.18. Fulfillment of legal requirements and fulfillment of legal obligations.
    • 2.2.19. Communication and management of business relations with business partners and third parties.
    • 2.2.20. General service provision, transaction processing and customer relationship management activities.

• 3. With Whom And For What Purpose Personal Data May Be Shared

  • 3.1. The confidentiality and security of personal data is our priority and is meticulously protected. However, it may be necessary to disclose or share your personal data in the following cases:
    • 3.1.1. Service Providers and Business Partners: Personal data may be shared with business partners or service providers for the purpose of providing services or performing transactions.
    • 3.1.2. Legal Requirements: Personal data may be shared with public authorities (e.g., judicial authorities or regulatory bodies) as a legal obligation or due process of law.
    • 3.1.3. Transaction Security and Fraud Prevention: Personal data may be shared with authorized institutions or security service providers for security measures necessary for the security of users and the platform or for fraud detection and prevention purposes.
    • 3.1.4. Collaborating Third Parties: Personal data may be shared with cooperating third parties for the performance of certain transactions or the provision of certain services in accordance with the consent of the users.
  • 3.2. The purpose of these posts is to support various legal, commercial and business purposes, such as enhancing users' experience on the platform, providing services, fulfilling legal requirements and ensuring users' safety.

• 4. Personal Data Collection Method And Legal Basis

  • 4.1. Your data may be collected, stored or processed using the following methods.
    • 4.1.1. Filling out web forms: Users share their personal data by filling out various forms available on websites. These forms are usually used for membership, contact, registration or purchase transactions.
    • 4.1.2. Cookies: Websites collect information by placing cookies, which are small text files, in users' browsers. These cookies are used to track and store data such as visited pages, preferences, session information.
    • 4.1.3. Tracking tools: Website owners use various tracking tools to monitor and analyze the behavior of visitors. These tools collect data such as which pages visitors visit, how long they stay, which links they click on, etc.
    • 4.1.4. Direct communication: Website owners may collect personal data by communicating directly with users. This method of communication can take different forms, such as phone calls, e-mail messages, live chat support services.

• 5. Legal Grounds For Processing Data

  • 5.1. Circumstances Explicitly Provided for by Law: The processing of personal data may be carried out in cases expressly provided for by Turkish law and subject to certain conditions. For example, there may be situations such as public security, public order, crime prevention or investigation.
  • 5.2. Contractual Relationship: The processing of personal data may be a legal reason if it is directly related to the establishment or performance of a contract and in this context, the processing of personal data of the parties to the contract is necessary. For example, the processing of information necessary for the purchase and delivery of a product or service may be based on a contractual relationship.
  • 5.3. Fulfillment of Legal Obligations: The processing of personal data may be mandatory for the data controller to fulfill its legal obligations determined by Turkish law or relevant regulatory bodies. In this context, legal requirements such as making tax declarations or keeping accounting records in accordance with tax laws may be among the legal reasons.

• 6. Rights Of The Personal Data Subject

  • 6.1. Personal data subjects have the right to learn the purpose of processing their personal data, the duration of processing, for what purposes and on what legal grounds it is processed.
  • 6.2. In addition, personal data subjects may request access to their personal data and have the right to learn whether such data is being processed, and if so, for what purposes, and whether it has been transferred to third parties.
  • 6.3. Data subjects may request correction of their personal data if it is incomplete or incorrectly processed. In addition, personal data subjects may request the deletion or destruction of their personal data in the event that the reasons requiring the processing of their personal data disappear or when other conditions stipulated by law are met.
  • 6.4. Personal data subjects may request information regarding the processing of their personal data, learn for what purpose and on what legal grounds the processed data are processed, to whom and for what purposes these data are transferred.
  • 6.5. In order to exercise the above-mentioned rights, data subjects can always apply to the above-mentioned contact e-mail address in accordance with the Law No. 6698 on the Protection of Personal Data.
  • 6.6. Pursuant to paragraph 1 of Article 13 of the PDPL, as personal data owners, you can submit your requests regarding your rights in writing or by other methods determined by the Personal Data Protection Board. You can obtain the application information text and application form on the website, where the channels and procedures to submit your application are explained.
  • 6.7. In the event that the personal data owner duly submits his/her request regarding the rights to us, we will finalize the relevant request free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board. In cases where the application is rejected, the response is found insufficient or the application is not responded to in due time; You can file a complaint to the Personal Data Protection Board within thirty days from the date you learn our response and in any case within sixty days from the date of application.

• 7. Enforcement And Dispute Resolution

  • 7.1. Any changes made to this agreement shall enter into force as soon as they are published on the site or any publicly accessible platform.
  • 7.2. For the settlement of any dispute arising out of the application or interpretation of this Agreement, the laws of the Republic of Turkey shall apply and the Courts and Enforcement Offices of Ankara Courthouse shall be competent.