TREN
— KVKK · 6698

Personal Data Protection Privacy Notice.

Under the Personal Data Protection Law No. 6698 (the "KVKK"), this notice sets out the methods relating to the processing of your personal data by BLD Construction İnşaat Taahhüt San. ve Tic. Ltd. Şti. in its capacity as data controller, together with your rights.

1 · Data controller

This Privacy Notice has been prepared by BLD Construction İnşaat Taahhüt San. ve Tic. Ltd. Şti. ("BLD Construction" or the "Company") in its capacity as data controller, within the scope of Article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

The purpose of this notice is to inform data subjects (prospective clients, customers, job candidates, suppliers, subcontractors, visitors, etc.) about the personal data processing activities carried out by the Company.

2 · Personal data processed

BLD Construction may process the following categories of personal data, in a manner connected, limited and proportionate to its field of activity:

  • Identity Data — Name, surname, Turkish ID number (where necessary, for a contracting party or employee), date of birth.
  • Contact Data — Email address, telephone number, address, institution/company information.
  • Customer/Client Transaction Data — The service you request, meeting notes, proposal records, contract and progress-payment information.
  • Job Candidate Data — Résumé, education and work experience information, references.
  • Legal Transaction Data — Rights arising from contracts, records relating to formal notices and litigation processes.
  • Technical Data — IP address, cookie records and browser type collected automatically when visiting the website.
  • Visual/Audio Records — Site photographs (including situations in which employees and visitors appear), telephone call recordings (only where written notice has been given).

3 · Purposes of processing

Your personal data is processed for the following purposes, in accordance with the conditions set out in Articles 5 and 6 of the KVKK:

  • Providing the requested construction contracting, project management and technical consultancy services
  • Conducting contract processes and carrying out progress-payment and invoicing transactions
  • Managing client and customer relations and responding to meeting requests
  • Conducting supplier and subcontractor processes
  • Managing employee and job candidate processes
  • Fulfilling legal obligations (tax, social security, OHS, environment, etc.)
  • Protecting the Company's legal interests and, where necessary, representing it before the courts
  • Ensuring the security of the website and keeping usage statistics
  • Taking and auditing occupational health and safety measures at construction sites

4 · Legal grounds

Your personal data is processed on the basis of the following legal grounds set out in Article 5 of the KVKK:

  • Being expressly provided for in the laws
  • Being directly related to the establishment or performance of a contract
  • Being mandatory for the data controller to fulfil its legal obligation
  • Being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
  • Being mandatory for the establishment, exercise or protection of a right
  • The existence of the data subject's explicit consent (in cases where none of the above conditions applies)

5 · Transfer

Your personal data may be shared, in accordance with Articles 8 and 9 of the KVKK, only within the framework of the purposes and legal grounds set out below:

  • Authorized public institutions and organizations — to satisfy legal requests from tax, social security, municipal, environmental, labour inspection authorities, the courts, etc.
  • Service providers — business partners from whom we receive support services such as accounting, legal advice, independent audit, IT/hosting and courier services
  • Subcontractors and suppliers — to the extent mandatory for the execution of the project
  • Client and customer — as a contracting party, where necessary in the project processes

As a rule, your personal data is not transferred abroad. In the event that a situation requiring transfer abroad arises, the necessary steps are taken under Article 9 of the KVKK and, where necessary, explicit consent is obtained.

6 · Collection methods

Your personal data is collected through the following channels:

  • Direct communication — Information you provide via face-to-face meetings, telephone, email, or courier/post
  • Website — Forms you submit via bldconstruction.com.tr and technical data collected automatically (IP, cookies)
  • Contractual processes — Documents obtained within the scope of client, customer, supplier and subcontractor contracts
  • Site environment — OHS records, photographic documentation, visitor logs
  • Publicly available sources — Trade registry records, publicly available company information

7 · Retention period

Your personal data is retained for the period specified in the relevant legislation or required by the purpose of processing, observing the principles set out in Article 7 of the KVKK. Upon expiry of the period prescribed in the relevant legislation or the elimination of the purpose of processing, your personal data is deleted, destroyed or anonymized.

Periodic destruction processes are carried out within the framework of the Personal Data Retention and Destruction Policy maintained within the Company.

8 · Rights of the data subject

Pursuant to Article 11 of the KVKK, you may exercise the following rights by applying to our Company:

  • To learn whether your personal data is being processed
  • To request information regarding such processing, if any
  • To learn the purpose of processing and whether the data is used in accordance with that purpose
  • To know the third parties to whom the data is transferred domestically or abroad
  • To request the correction of data that has been processed incompletely or incorrectly
  • To request its deletion or destruction within the framework of the conditions set out in Article 7 of the KVKK
  • To request that correction, deletion or destruction operations be notified to the third parties to whom the data has been transferred
  • To object to a result arising against you as a result of analysis carried out exclusively by automated systems
  • To request compensation for damages you incur due to unlawful processing

9 · How to apply

To exercise the rights above, you must submit a request setting out your demand, together with documents establishing your identity, to our Company through the following channels:

Your applications will be concluded within at most 30 (thirty) days pursuant to Article 13/2 of the KVKK.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the application is free of charge; however, if the transaction requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

Information to Be Included in the Application Name, surname and signature (for a written application); Turkish ID number or, for foreigners, identity number; place of residence or business address for the purpose of notification; if any, the email address, telephone and fax number for the purpose of notification; and the subject of the request. Attaching information and documents relating to the matter to your application is helpful for the prompt conclusion of your request.

10 · Updates

This Privacy Notice may be updated in line with changes in legislation and developments in our Company's internal processes. The current text is always published on this page; in the event of significant changes, it is also announced separately on our website.

Effective: 2026 · Version: v1.0 · Data Controller: BLD Construction İnşaat Taahhüt San. ve Tic. Ltd. Şti.