Privacy Policy

Last updated: 29 September 2026

Arma Elektronik Metal San. ve Tic. Ltd. Şti. (“Arma”, “we”, “us” or “our”) respects the privacy of individuals who visit arma.com, enquire about our products or communicate with us. This policy describes our approach to personal data in connection with our website and business communications.

1. Data Controller and Contact Details

Arma Elektronik Metal San. ve Tic. Ltd. Şti.
Registered address: Şerifali Mah., Başer Sok. No: 31-33, Ümraniye, İstanbul 34775, Türkiye
Privacy contact: [email protected]
Website: https://arma.com

This general policy should be read together with any specific privacy notices provided when information is collected.

2. Information Covered by This Policy

Depending on your interaction with us, personal data may include your name, business contact details, company and job title; product enquiries, quotation requests, technical requirements, correspondence and files you provide; technical information such as IP address, access times, browser information and security logs; and communication or cookie preferences.

Please do not include sensitive personal data or information unrelated to your enquiry in messages or files.

3. Purposes and Legal Grounds

We use enquiry and contact information to respond to requests, provide product information and prepare quotations. Where processing is necessary to enter into or perform a contract with you, that processing is based on the relevant contractual requirement. Business correspondence and handling enquiries may also be based on our legitimate interest in managing business relationships, provided your fundamental rights and freedoms are not overridden.

Technical records may be processed for website operation, troubleshooting and security on the basis of our legitimate interest in maintaining a secure service. Information required for statutory obligations is processed to comply with those obligations. Records needed for legal claims may be processed to establish, exercise or protect rights.

Where consent is required for marketing communications, analytics or other processing, it must be obtained separately. Visiting this website or reading this policy does not constitute consent.

4. Collection Methods

Information is collected through website forms, emails and other communications you send to us. Technical information may also be generated through website access, server logs, cookies and similar technologies.

5. Cookies and Your Choices

Cookies and similar technologies may be used for website functionality and measurement. Their use is subject to applicable consent requirements. You can use your browser settings to view, block or delete cookies. Blocking cookies may affect some website functions. Where cookie preference controls are displayed on the website, you can also use those controls to manage your choices. For questions about website cookies, contact [email protected].

6. Recipients and International Transfers

Personal data may be shared, where necessary for the relevant purpose, with providers supporting website hosting, IT, email and technical operations; parties involved in fulfilling your request or contract; professional advisers; and competent authorities where required by law. Disclosure must be limited to what is necessary for the relevant service or obligation.

Where a service involves transfer of personal data outside Türkiye or access from abroad, the applicable requirements and safeguards under Article 9 of Turkish Personal Data Protection Law No. 6698 (“KVKK”) must be satisfied. You may contact us for information about recipients and transfers relating to your personal data.

7. LinkedIn Integration

Arma has applied for LinkedIn Community Management API access for an internal application intended to manage its own LinkedIn Company Page. As of the date of this policy, the API integration is not operational.

The planned use is to prepare, review, schedule and publish approved company posts and review company post performance. Before the connection is activated, this policy will be updated to reflect the actual permissions, data accessed, storage arrangements and deletion process. Any connection will use LinkedIn’s official authorisation process. LinkedIn passwords must not be sent to Arma. Website visitors do not need to connect a LinkedIn account to browse arma.com or send an enquiry.

8. Retention and Deletion

Retention is determined by the purpose of the record, whether an enquiry or contractual relationship remains active, applicable statutory retention duties, and relevant periods for establishing or defending legal claims. Technical records are assessed according to operational and security needs. Personal data must not be retained beyond the period justified by its purpose or a legal requirement. When the lawful reason for retention ends, the data is deleted, destroyed or anonymised as applicable.

9. Data Security

Arma is responsible for taking technical and organisational measures appropriate to the risks of personal data processing, including preventing unlawful access and processing and ensuring appropriate storage. Please contact [email protected] if you believe personal data connected with our services has been exposed or misused.

10. Your Rights

Under KVKK, subject to the applicable conditions, you may learn whether your personal data is processed; request information about processing, its purposes and recipients in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction when the legal conditions are met; and request notification of relevant corrections or deletion to recipients.

You may also object to a result against you arising from analysis exclusively by automated systems and seek compensation for damage caused by unlawful processing. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal.

Submit requests to [email protected] or our registered address using the application methods permitted by applicable law. We may request proportionate information to verify your identity. Requests are handled as soon as possible and within the applicable statutory period, normally no later than 30 days under KVKK. A fee may apply only where permitted by the relevant rules.

11. External Services

Links to LinkedIn, other social media platforms and external websites lead to services governed by their own privacy policies. Please review their policies before providing information.

12. Updates

This policy may be updated to reflect changes in our services, processing activities or applicable requirements. The current version and its revision date are published on this page. Additional notice will be provided where required.