BME · PRIVACY AND PERSONAL DATA
Privacy and KVKK Information Notice
Last updated: 20 October 2026
This notice has been prepared for BME Sanayi ve Ticaret Ltd. Şti.’s bmetr.com website and the communications conducted through the email channels listed below. It explains the purposes and legal grounds for processing your personal data, the parties to whom your data may be transferred, and your rights.
1. Data controller and contact details
The controller of your personal data is BME Sanayi ve Ticaret Ltd. Şti.
- Website: bmetr.com
- General enquiries and questions about personal data: info@bmetr.com
- Product and quotation enquiries: sales@bmetr.com
2. Collection methods, purposes of processing and legal grounds
When you contact us by email, we may process the first and last name, contact details, company and job information you provide, together with any enquiry or project information included in your message. The scope is limited to the information you send us and what is necessary to address your enquiry. Information obtained by email is processed electronically by wholly or partly automated means.
| Activity and information used | Purpose of processing | Legal ground |
|---|---|---|
| Identity, business contact and enquiry information in general enquiries and product or quotation correspondence on behalf of a company | To answer the question, understand the product requirement and conduct correspondence with the person concerned | Article 5/2(f) of the Turkish Personal Data Protection Law (KVKK): the legitimate interest in conducting necessary and proportionate communications, provided that your fundamental rights and freedoms are not prejudiced |
| Necessary information in quotation or contract correspondence relating to a contract to which you are personally a party | To carry out the steps necessary to enter into or perform the contract you request | KVKK Article 5/2(c): only for data belonging to a party to the contract and directly related to entering into or performing that contract |
| Identity, contact and request information you provide when exercising your personal data rights | To assess the request and any necessary identity verification, and to respond | KVKK Article 5/2(ç), together with Articles 11 and 13: fulfilment of the data controller’s legal obligation |
| Technical connection information transmitted to servers when a webpage is displayed | To deliver the page and provide the necessary technical security | KVKK Article 5/2(f): legitimate interest in the necessary and proportionate technical operations for these purposes, with due regard for your rights and freedoms |
Contacting us as an employee or representative of a company does not, by itself, make you a party to a contract. In such a case, the contractual legal ground does not apply automatically.
Please do not include personal information that is unnecessary for your enquiry, or special categories of personal data, in general correspondence or quotation requests.
3. Current status of the quotation form
The quotation form on the website is not yet open for submissions; files are not accepted through the website. Information entered in the current form fields is not sent to BME through this form. If you wish to request a quotation, you can email sales@bmetr.com; the email processes described above will then apply.
When form submissions or file sharing become available, the information to be collected and the applicable processing conditions will be explained separately before the data is obtained.
4. Technical connections, external images and cookies
Opening a webpage requires a connection between your browser and the servers delivering that page. During this connection, technical information such as your IP address is transmitted to the relevant server. This explanation is not an inventory of which information is recorded on the server or how long it is retained.
In the current design, some images are loaded from Pexels and Unsplash image servers. When these images are displayed, your browser connects directly to those services; connection information may reach them for the purpose of delivering the image. This use should be considered together with the transfer explanation below.
The names, purposes, durations and providers of cookies used in visitor sessions will be added to this page after the technical inventory has been verified. Merely visiting the website or reading this notice does not mean that you have given explicit consent to the processing of your personal data.
5. Access to and transfer of data
BME employees authorised by virtue of their duties may access the information necessary to assess your communication. The categories of recipients and purposes that may arise in connection with external services or legal obligations are as follows:
- Hosting and email service providers: Technical services necessary to deliver the website and conduct email communications.
- Pexels and Unsplash image services: Delivery of the external images described above to your browser.
- Competent public authorities or judicial bodies: Provision of necessary information only in connection with an applicable legal obligation or a lawful request.
The scope of each transfer must be limited to the information necessary for its purpose. Since the service providers’ data processing locations and the applicable transfer conditions have not yet been fully verified, this notice does not state that data is processed exclusively in Türkiye.
Where a transfer abroad takes place, the conditions in KVKK Article 9 must also be met. Providing this notice, or your use of the website, does not by itself constitute permission or a safeguard for a transfer abroad.
6. Retention and data security
Personal data must be retained only for as long as necessary for the purposes for which it is processed and, where applicable, in accordance with retention obligations under the relevant legislation. Where retention is necessary to protect a specific right, that necessity is assessed for the record concerned; the legal ground is KVKK Article 5/2(e). When the grounds for processing cease to exist, deletion, destruction or anonymisation must be carried out in accordance with Article 7 of the Law.
The data controller is responsible for preventing unlawful access to and unlawful processing of personal data, and for taking appropriate technical and organisational measures to protect it.
7. Your rights under KVKK
Under Article 11 of the Law, you may:
- Find out whether your personal data is being processed and, if it is, request information about that processing.
- Ask about the purpose of processing and whether your data is being used in accordance with that purpose.
- Find out which third parties receive your data within Türkiye or abroad.
- Request correction of incomplete or inaccurate personal data.
- Request deletion or destruction of your data when the conditions in Article 7 of the Law are met.
- Request that third parties to whom the data has been transferred be notified of any correction, deletion or destruction.
- Object to a result that is to your detriment and arises solely from automated analysis.
- Seek compensation if you suffer damage as a result of unlawful processing.
8. Requests and response process
You can send questions about your personal data and requests for information about application methods to info@bmetr.com.
Requests to exercise your rights are made using the methods set out in KVKK and the Communiqué on the Procedures and Principles for Applications to the Data Controller. The Communiqué provides for applications in writing, registered electronic mail (KEP), secure electronic signature, mobile signature, an email address previously supplied to and registered in the data controller’s system, or an application developed for this purpose. This list does not mean that BME offers a separate channel for each of these methods.
To exercise your rights by email, you must use the email address you previously supplied to us and which is held in our records. If you contact us from a different address, clarification may be requested to determine the appropriate method and verify your identity to the extent necessary.
The request must include your first and last name; a signature for written applications; your Turkish identity number if you are a citizen of the Republic of Türkiye; or, for foreign nationals, nationality and passport number or identity number, if any. It must also include a residential or business address for notifications, an email address, telephone and fax number for notifications where available, and the subject of the request. Relevant supporting information and documents should be attached. These details are not mandatory fields for an ordinary product enquiry or quotation request.
Requests are concluded as soon as possible, depending on their nature, and within no more than 30 days. Acceptance, or rejection with reasons, is communicated in writing or electronically. If the procedure entails an additional cost, a fee may be charged only within the tariff set by the Personal Data Protection Board.
9. Updates to this notice
This notice is updated when the website’s functions or personal data processing activities change. Where a new processing purpose is introduced, the relevant information must be provided before processing begins. An information notice does not replace consent where explicit consent is required for a particular processing activity.