Last updated: 6 October 2026
DEKACRANE VİNÇ SİSTEMLERİ İMALATI SAN. VE TİC. LTD. ŞTİ. ("Deka Crane", "we", "us") respects your privacy and is committed to processing your personal data lawfully. This Privacy Policy provides the information required by Articles 13 and 14 of Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"). As a company established in Türkiye, we also process personal data in accordance with Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").
This policy applies to natural persons who visit our website at dekacrane.com (the "Site"), who contact us through the channels shown on the Site or directly, who request information or a quotation about our products and services, or who buy from or sell to us; to the employees and representatives of our customers, suppliers and business partners; to people who appear in the project photos published on the Site; and to candidates who send us their CV. Processing that concerns our own employees is outside the scope of this policy.
At a glance
The controller responsible for your personal data is:
You can use these contact details for any question about this policy or about your personal data.
We process personal data in line with the principles set out in Article 5 of the GDPR:
Depending on your relationship with us, we may process the following personal data:
| Category | Personal data | Whose data, and when |
|---|---|---|
| Technical and security data | IP address, date and time of the visit, address of the page requested, referring page, browser and operating system information. | Everyone who visits the Site; automatically during the visit. |
| Cookie choice | The cookie categories you allowed and the date of your choice (stored on your device only). | Visitors who make a choice in the cookie notice. |
| Analytics data | Cookie identifier, pages viewed, date and duration of the visit, traffic source, approximate location (country and city) derived from the IP address, device and browser information. | Only visitors who consent to analytics cookies. |
| Map data | IP address, device and browser information, Google cookie identifiers. | Only visitors who consent to functional cookies; when the map loads on the contact page. |
| Identity data | Name and surname; company and job title; for natural persons and sole traders we invoice, national identity or tax number. | People who contact us; representatives of our customers, suppliers and business partners. |
| Contact data | Phone number, e-mail address, business or delivery address; account name when you reach us through WhatsApp or social media. | People who contact us; representatives of our customers, suppliers and business partners. |
| Enquiry and transaction data | Requests for information and quotations, the content of requests, complaints and correspondence; quotation, order, contract, delivery, installation and service records; information about the facility and project concerned. | People who request information or a quotation; our customers. |
| Financial data | Invoice, payment and collection information; bank account details (IBAN). | Natural persons and sole traders who buy from or sell to us. |
| Legal data | Information contained in correspondence with judicial and administrative authorities and in court or enforcement files. | Where there is a dispute or a request from an authority. |
| Images | Images of people appearing in the project, installation and delivery photos and videos published on the Site and on our social media accounts. | People who appear in those images. |
| CV data | Identity, contact, education and work experience information contained in a CV. | Candidates who send us their CV on their own initiative. |
We do not ask for special categories of personal data (such as data about health, religion or biometric data) through the Site or our contact channels. Please do not send us such data.
We process personal data only for the purposes below and on the legal bases shown, as provided in Article 6(1) of the GDPR:
| Purpose | Categories of data | Legal basis |
|---|---|---|
| Delivering the Site and keeping it technically available; information security; preventing attacks and abuse. | Technical and security data | Art. 6(1)(f): legitimate interests |
| Remembering your cookie choice. | Cookie choice | Art. 6(1)(f): legitimate interests |
| Measuring visit statistics and improving the Site on that basis. | Analytics data | Art. 6(1)(a): consent |
| Showing our location on a map on the contact page. | Map data | Art. 6(1)(a): consent |
| Communicating with you; answering requests for information; following up requests and complaints. | Identity, contact, enquiry and transaction data | Art. 6(1)(f): legitimate interests; Art. 6(1)(b) where the enquiry concerns a quotation or a contract |
| Carrying out site surveys and preparing quotations; concluding contracts; selling goods and services (manufacturing, shipment, installation, delivery). | Identity, contact, enquiry and transaction data | Art. 6(1)(b): contract and pre-contractual steps |
| Providing after-sales support (maintenance, technical service, spare parts). | Identity, contact, enquiry and transaction data | Art. 6(1)(b): contract |
| Purchasing goods and services and managing our supply chain. | Identity and contact data of supplier and partner representatives | Art. 6(1)(b): contract; Art. 6(1)(f): legitimate interests |
| Accounting and finance (invoicing, payments, collections). | Identity, contact and financial data | Art. 6(1)(b): contract; Art. 6(1)(c): legal obligation |
| Complying with statutory record-keeping and reporting obligations; providing information to competent authorities. | The categories required by the obligation concerned | Art. 6(1)(c): legal obligation |
| Establishing, exercising or defending legal claims. | Identity, contact, enquiry and transaction, financial and legal data | Art. 6(1)(f): legitimate interests |
| Promoting our company by publishing completed projects on the Site and on our social media accounts. | Images | Art. 6(1)(a): consent |
| Assessing job applications. | CV data | Art. 6(1)(b): pre-contractual steps; Art. 6(1)(a): consent, for keeping a CV for future vacancies |
You are not required by law or by contract to provide personal data to us. However, we cannot answer an enquiry or prepare a quotation without your contact details, and we cannot conclude or perform a contract without the data needed for it.
Where processing is based on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
Where we rely on legitimate interests, those interests are: operating a secure and reliable website; keeping a record of your cookie choice; responding to people who contact us and maintaining our business relationships; and establishing, exercising or defending legal claims. We rely on this basis only where these interests are not overridden by your interests or fundamental rights and freedoms. You have the right to object to such processing at any time, as described in section 12.
Personal data may be shared with the following categories of recipients, only to the extent required by the purpose concerned:
| Recipients | Purpose |
|---|---|
| Service providers acting on our behalf: hosting and infrastructure, e-mail, IT and software support providers | Operating, maintaining and securing the Site and our information systems. |
| Partners we use for shipment, installation and service | Delivering and installing the product ordered and providing service. |
| Accountants, auditors and legal advisers | Accounting and finance, audits and legal matters. |
| Banks and payment institutions | Making and receiving payments. |
| Competent public authorities, courts and enforcement offices | Complying with legal obligations; providing information and documents requested under the law; resolving legal disputes. |
We do not sell or rent your personal data, and we do not share it with third parties for marketing purposes. Project images published on the Site are public and can be viewed by anyone who visits the Site.
We are established in Türkiye, so the personal data you share with us is processed in Türkiye. In addition, the following service providers may process personal data on servers located in other countries, including the United States:
| Recipient | Service | Data concerned | When the transfer takes place |
|---|---|---|---|
| Google (Google Ireland Limited for users in the European Economic Area and Switzerland; Google LLC, USA, for other users) | Google Analytics (visit statistics) | Analytics data | Only if you consent to analytics cookies. |
| Google (as above) | Google Maps (the map on the contact page) | Map data | Only if you consent to functional cookies. |
| Cloudflare, Inc. (USA) | Security and content delivery infrastructure | Technical and security data (IP address, request and device information) | Whenever the Site is visited. |
The countries concerned may not offer the same level of data protection as your country of residence. According to the terms published by these providers, they apply safeguards for international transfers, such as standard contractual clauses and participation in the EU–U.S. Data Privacy Framework. You can contact us for further information about these safeguards.
If you choose to contact us through WhatsApp, Instagram, Facebook or LinkedIn, the information you share is processed by the platform concerned on its own servers, which may be located outside your country. If you prefer not to use these channels, you can reach us by phone or e-mail.
We keep personal data only for as long as necessary for the purposes for which it is processed or as required by law:
| Personal data | Retention period | Basis |
|---|---|---|
| Site access (traffic) records | At least 1 year and at most 2 years | Turkish Law No. 5651 and related legislation |
| Cookie choice record and analytics cookies (on your device) | 180 days | Cookie Policy |
| User-level and event-level data held in Google Analytics | At most 14 months | Google Analytics data retention setting |
| Requests for information and quotations that do not lead to a contract, and related correspondence | 2 years after the request is closed | Period necessary for the purpose |
| Customer, order, contract, delivery, installation and service records | 10 years after the end of the legal relationship | Turkish Code of Obligations No. 6098, Art. 146; Turkish Commercial Code No. 6102, Art. 82 |
| Invoices and other financial and accounting records | 10 years from the end of the calendar year concerned | Turkish Commercial Code No. 6102, Art. 82; Tax Procedure Law No. 213, Art. 253 |
| Records about supplier and business partner representatives | 10 years after the end of the legal relationship | Turkish Code of Obligations No. 6098, Art. 146; Turkish Commercial Code No. 6102, Art. 82 |
| Records relating to legal disputes | 10 years after the dispute is finally resolved | Applicable limitation periods |
| Images of people in project photos | For as long as the image remains published; the image is removed if consent is withdrawn | Consent |
| CVs sent as part of a job application | 1 year after the application is closed | Period necessary for the purpose |
| Data protection requests and our replies | 10 years after the request is closed | Applicable limitation periods |
When the retention period ends, or the reasons for processing no longer exist, personal data is erased, destroyed or anonymised.
We take appropriate technical and organisational measures to protect personal data against unlawful processing, unauthorised access, loss and destruction. In particular:
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent authorities and, where required, you, as provided by the applicable law.
You have the right to:
If you appear in an image published on the Site or on our social media accounts, you can ask us at any time to remove the image or to make you unrecognisable in it.
To exercise your rights, write to us at the address in section 1 or send an e-mail to [email protected]. Please tell us which right you wish to exercise and give us enough information to identify you; we may ask for additional information to confirm your identity.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, where you work or where you believe an infringement took place. Contact details of the authorities in the European Economic Area are available on the website of the European Data Protection Board. In Türkiye, the competent authority is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
We do not use your personal data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
Detailed information about the cookies used on the Site, their purposes and their durations is available in our Cookie Policy. You can withdraw the consent you gave to analytics and functional cookies at any time.
The Site contains links to WhatsApp, Instagram, Facebook, LinkedIn and Google Maps. These are plain links; the Site contains no plug-ins, pixels or tracking code from those platforms. When you follow a link, the platform's own terms of use and its privacy and cookie policies apply, and we are not responsible for the way those platforms process personal data.
The Site and our services are intended for businesses that need industrial crane systems. We do not knowingly collect personal data from persons under the age of 18.
If you are located in Türkiye, your personal data is processed in accordance with Turkish Law No. 6698 on the Protection of Personal Data. The information notice required by that law, including your rights under its Article 11 and the procedure for applying to us, is available in Turkish in our KVKK Aydınlatma Metni.
We update this policy when our processing activities or the applicable rules change. The current version is published on this page; the date at the top shows when it was last revised.