Data Controller: Rainwater Dış Ticaret Sanayi ve Ticaret Anonim Şirketi
MERSIS No: 0734207079400001
Address: Çınar İş Merkezi, Sanayi Caddesi 7. Km No: 2, Osmangazi / Bursa
Email: [email protected]
Website: rainwater.com.tr
In this text, the term “Website” refers to the website whose details are given above; the terms “Rainwater”, “we” and “Data Controller” refer to the company whose details are given above.
In accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”, the Turkish Personal Data Protection Law), we process your personal data, in our capacity as Data Controller, within the scope described below. This text has been prepared to inform people who visit the Website, use the forms and polls on the Website, or leave their contact details with our sales consultants at our stores and shopping centre stands.
1. Your Personal Data That Is Processed
- Identity information: First name, surname.
- Contact information: Telephone number, email address, province and district.
- Request information: Information you select or enter in the form: the subject of the request or service, the product and colour/model you are interested in, the appliance model, who the request is for (home or business), company name, number of people, requirement, type of solution partnership application, your message and the page from which you submitted the form. If you add the result of the water cost calculator to the form, that result is also sent along with your message.
- Transaction security information: For form and poll submissions, a one-way encrypted hash of your IP address (your IP address itself is not stored in our records) and the date and time of submission. To prevent misuse, your IP address is held briefly in server memory; it may also appear in the technical logs of the hosting and content delivery infrastructure.
- Marketing information: Your consent to commercial electronic messages (if given) and your cookie preference. If you consent to marketing cookies, visit and interaction information obtained through cookies and similar technologies (pages viewed, clicks, device and browser information, approximate location).
- Stand conversation information: The first name, surname, telephone number and message you give to our sales consultants at our store and shopping centre stands; information on the stand and consultant involved in the conversation.
Polls in blog posts do not ask for your name or contact details; only the option you select, the page on which the poll appears and an encrypted hash of your IP address (to prevent the same person from voting again) are recorded.
2. Purposes of Processing Personal Data
- Receiving your information, price, quote, installation and service requests, getting back to you by telephone, email or WhatsApp and concluding your request,
- Carrying out product and service sales processes and preparing quotes,
- Evaluating authorised service, dealership and distributorship applications,
- Forwarding requests to the relevant team and following them up,
- Ensuring the security of the Website and its forms; preventing spam, bot traffic and misuse,
- Sending commercial electronic messages for campaigns, announcements and promotions, where you have given explicit consent,
- Where you have consented to marketing cookies, measuring use of the Website, measuring the effectiveness of advertising campaigns and showing adverts that match your interests,
- Fulfilling legal obligations, responding to requests from authorised institutions and organisations, and protecting our rights in the event of disputes.
3. Method of Collecting Personal Data and Legal Grounds
Your personal data is collected electronically, partly by automated means, through the forms and polls on the Website, cookies and similar technologies, and server and security logs; and, in stand conversations, by our sales consultant entering your details into our system. Your personal data is processed on the basis of the following legal grounds set out in Article 5 of the KVKK:
- Processing is directly related to the conclusion or performance of a contract: Evaluating and responding to your information, quote, installation, service and solution partnership requests.
- Processing is necessary for the data controller to fulfil its legal obligation: Retention and notification obligations arising from legislation, and requests from authorised institutions.
- Processing is necessary for the establishment, exercise or protection of a right: Retaining request and consent records as evidence in the event of disputes.
- Processing is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms: Website and form security, prevention of misuse, follow-up of requests.
- Your explicit consent: Sending commercial electronic messages and using marketing and measurement cookies.
4. Transfer of Personal Data
Your personal data may be shared with the following recipients, limited to the purposes above and to the extent necessary:
- Our service providers: Our server hosting provider; Cloudflare, Inc. for content delivery, Website security and form bot protection (Cloudflare Turnstile); Google for internal team follow-up of form records (Google Sheets) and, if you consent to marketing cookies, for Google Analytics and Google Ads; our email service provider Yandex (Yandex 360) for form notification emails; and, if you consent to marketing cookies, Meta Platforms for Meta Pixel.
- Our authorised service providers and dealers: To the extent necessary to fulfil your installation and service requests.
- Our advisers: Individuals and organisations from which we receive legal, financial and technical advisory services, to the extent necessary.
- Authorised public institutions and organisations and judicial authorities: Only in response to duly made requests and within the scope of legal obligations.
As the servers of Cloudflare, Google, Yandex and Meta are located abroad, the use of these services results in your personal data being transferred abroad. These transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK. Your personal data is never sold or rented.
5. Retention Period
- Form and stand records: Retained for the period required to conclude your request and thereafter for the limitation periods set out in the relevant legislation in respect of possible disputes.
- Commercial electronic message consent records: Retained for as long as your consent remains valid and, after you withdraw your consent, for the period required by law (3 years).
- Your cookie preference: Stored in your browser until you delete it.
- Data from measurement and advertising tools: Retained for the period set in the relevant service provider's account.
Personal data whose retention period has expired is deleted, destroyed or anonymised.
6. Rights of the Data Subject
Under Article 11 of the KVKK, you have the right to:
- Learn whether your personal data is being processed,
- Request information about the processing if your personal data has been processed,
- Learn the purpose of the processing of your personal data and whether it is used in accordance with that purpose,
- Know the third parties in Türkiye or abroad to whom your personal data is transferred,
- Request the correction of your personal data if it has been processed incompletely or inaccurately,
- Request the deletion or destruction of your personal data under the conditions set out in the KVKK and the relevant legislation,
- Request that the correction, deletion or destruction be notified to third parties to whom your personal data has been transferred,
- Object to any outcome to your detriment arising from the analysis of your processed data exclusively by automated systems,
- Claim compensation for damage if you suffer damage as a result of the unlawful processing of your personal data.
You can submit your applications, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to our address above, with a secure electronic signature or mobile signature, or from the email address you have previously provided to us and which is registered in our system, to [email protected]. Your application will be concluded free of charge within 30 days at the latest; if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board (KVKK Board). If your application is rejected, you find the response insufficient or no response is given in time, you may file a complaint with the Personal Data Protection Board (KVKK Board).
7. Commercial Electronic Messages
The commercial electronic message consent checkbox on the forms is optional and unticked by default; not giving consent does not prevent you from submitting an information, quote or service request. If you give consent, commercial electronic messages for campaigns, announcements and promotions may be sent to you. You can withdraw your consent at any time by using the opt-out link in the messages, through the Commercial Electronic Message Management System (İYS), or by writing to [email protected]. Details can be found in the Explicit Consent Text.
8. Cookies
The cookies and similar technologies used on the Website, their purposes and how you can change your preferences are explained in the Cookie Policy. Marketing and measurement tools run only with your consent.