Privacy and Security

General Principles

Teriş Kimyevi Maddeler Ticaret ve Sanayi A.Ş. (Teris or the Company) respects the privacy of every visitor to its website and regards the security of their information as a corporate priority. This Privacy and Security Policy explains what information is collected at www.teris.com.tr, how it is used, how it is protected and what rights you have.

Our processing activities are governed by the following principles:

• Lawfulness and fairness.
• Accuracy and, where necessary, currency of the data.
• Collection for specified, explicit and legitimate purposes.
• Relevance, limitation and proportionality to the purposes of processing, and avoidance of unnecessary collection.
• Retention only for the period prescribed by legislation or required for the purpose of processing.
• Transparency and accountability.

For detailed information on the processing of personal data and on your rights under Law No. 6698 on the Protection of Personal Data ("KVKK"), please refer to our Data Protection Notice.

Information We Collect and Why

Our website is designed so that visitors are never asked for more information than is necessary. The information collected falls into two groups.

Information you provide directly: the name, surname, company name, job title, e-mail address, telephone number and message content that you submit through the contact, quotation (RFQ) and career forms. This information is used solely to respond to your request, prepare a commercial offer, maintain the business relationship and evaluate your application.

Information collected automatically: IP address, browser and operating system information, access time, pages viewed and server log records. This information is used to maintain system security, resolve errors and monitor site performance. Where you have given consent, aggregated analytics measurement may also be carried out; details are set out in our Cookie Policy.

Information obtained through the website is never sold, rented or transferred to third parties for marketing purposes.

Processing of Form Data

Contact Form

Information submitted through the contact form is routed to the relevant department so that your question or request can be answered. Once the matter is concluded, records are retained for a reasonable period for the purposes of follow-up correspondence and evidentiary requirements, and are then destroyed.

Quotation (RFQ) Form

The company details, product specifications and volume requirements you provide in the quotation form are processed by our sales team for pricing, stock verification, supply planning and pre-contractual negotiations. To the extent that this processing is directly related to the conclusion of a contract, it is based on the contractual legal ground. Where it is necessary to consult supplier manufacturers during a quotation process, disclosure is limited to the information strictly required to clarify technical and commercial terms.

Career Application Form

The career form is designed to collect contact details together with a summary of education and experience entered in free-text fields. For security reasons, the career form does not accept curriculum vitae uploads or any other file attachments. This design decision prevents attacks that could be carried out through malicious file uploads and avoids the collection of unnecessary personal data. If your curriculum vitae is required during the recruitment process, our human resources department will contact you directly and request the document through a secure channel.

Candidates are not asked to provide health information, criminal records, religious beliefs, membership details or any other special category of personal data, and are kindly asked not to enter such information into the form fields.

Information Security Measures

Current security measures are applied to our website and supporting systems in order to protect the confidentiality, integrity and availability of your data:

• Encryption: all traffic between your browser and the site is encrypted using the TLS protocol, and forms are transmitted only over a secure connection.
• Access authorisation: access to form records and to the administration panel is restricted according to job description on a least-privilege basis.
• Session security: secure cookie attributes, session timeouts and token-based protection against cross-site request forgery (CSRF) are applied to form submissions and administrative sessions.
• Input validation: form fields are validated on the server side, and filtering and rate limiting are applied against injection and automated submission (spam) attempts.
• Backup: data is backed up at regular intervals and the restorability of backups is tested periodically.
• Up-to-date software: server, application and component versions are regularly updated and security patches are applied without delay.
• Audit records: system and access activity is monitored through log records, unusual activity is investigated and, where necessary, our breach response procedure is triggered.

Notwithstanding these measures, no transmission of data over the internet can be guaranteed to be absolutely secure. In the event of unlawful acquisition of personal data, the affected data subjects and the Personal Data Protection Board will be notified as soon as possible in accordance with Article 12 of the KVKK.

Payments and Financial Information

No payment is collected through our website and no credit card, debit card or comparable payment instrument details are gathered. The site does not offer online sales or a shopping basket. Collections arising from our commercial relationships are made through banking channels in accordance with the applicable contract and invoice terms.

We strongly recommend that no reliance be placed on e-mails or messages purporting to be sent on behalf of the Company that request payment, notify a change of bank account details or invite payment through our website. Any such request should be verified by telephone on +90 216 577 62 62.

Third-Party Links

Our website may contain links to suppliers, group companies, industry associations or informational resources. If you follow such a link, the privacy and cookie policies of the relevant third party will apply. The Company is not responsible for the content, security or data processing practices of linked websites. We recommend that you review the privacy policy of every website you visit.

Data Subject Rights and Contact

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used in accordance with that purpose; to know the third parties in Türkiye or abroad to whom the data has been transferred; to request rectification of incomplete or inaccurate data; to request erasure or destruction; to request that such actions be notified to third parties to whom the data has been transferred; to object to adverse outcomes arising from analysis carried out exclusively by automated means; and to claim compensation for damage suffered as a result of unlawful processing.

Requests may be submitted in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller through the following channels:

• Address: Çayıryolu Sokak, Üçgen Plaza No:7 Kat:12, 34752 İçerenköy, Ataşehir / Istanbul, Türkiye
• E-mail: info@teris.com.tr, from an e-mail address registered in our systems or using a secure electronic signature
• Registered electronic mail: through our registered electronic mail address
• Telephone: +90 216 577 62 62

Applications are concluded as soon as possible according to the nature of the request and in any event within thirty days.

Updates to This Policy

This Privacy and Security Policy may be updated in line with legislative amendments, technological developments and changes in our business processes. The current version is published at www.teris.com.tr and takes effect on the date of publication. Where a material change is made, data subjects will be informed by appropriate means.