Data subject request: how to exercise your rights

Last updated: 11 September 2026

What your request must contain

If any of the information below is missing we cannot conclude your request and will have to ask you to complete it, which lengthens the process. Sending everything at once is quicker for everyone.

1. Name, surname and — if the request is in writing — a signature
2. Turkish ID number for Turkish citizens; nationality, passport number or identity number for foreign nationals
3. Residential or business address for service of the reply
4. E-mail address, telephone and fax number for notification, if any
5. The subject of the request — which right, and in respect of which data

How to apply

By e-mail

A request sent from an e-mail address you have previously given us and which is recorded in our systems is valid. Putting “Personal Data Request” in the subject line speeds things up.

info@emea.com.tr

By registered electronic mail (KEP)

You may send a request signed with a secure electronic signature or mobile signature to our registered e-mail address. This route establishes your identity automatically.

emeateknoloji@hs01.kep.tr

In writing

You may deliver a wet-signed request, together with a copy of a document establishing your identity, to the address below in person or through a notary.

EMEA Technology Endüstriyel Otomasyon A.Ş.
NİLTİM Alaaddin Bey Mah. 631. Sok. No:8
Nilüfer — Bursa
16285 Türkiye

The rights you can exercise

The full list of rights and the articles they rest on are set out in section 8 of the privacy notice. In short: you can learn whether your data is processed, ask for information and a copy, have inaccuracies corrected, have data erased once its purpose has gone, learn who it was transferred to, object to automated decisions and claim compensation for damage.

Process and deadlines

Your request is recorded when it arrives and your identity is verified. Depending on its nature it is answered in writing within thirty days at the latest, by the same route you used. The reply states whether the request is accepted or, with reasons, refused.

Questions

Frequently asked questions

How quickly will my request be answered?

Article 13 of the Law says thirty days at the latest, and the period starts when your request reaches us. No fee is charged unless the request involves a separate cost; where it does, the tariff set by the Board applies. For requests under the GDPR the period is one month, extendable by a further two months for complex requests; if an extension is needed you will be told separately.

Why is there no web form for this?

Because a request requires identity verification. Acting on a request that arrives through a web form risks handing someone else’s data to a third party — the opposite of the right we are meant to protect. E-mail, registered e-mail and written application all allow us to verify who you are.

Can I apply on behalf of someone else?

Yes, but a power of attorney is required. If you are a lawyer, attach the relevant part of the power of attorney; if you are a parent or guardian, attach the document showing that. Without such a document we must refuse a request made on another person’s behalf.

What if I am not satisfied with the answer?

If your request is refused, if you find the answer inadequate, or if no answer is given in time, you may complain to the Turkish Personal Data Protection Board within thirty days of learning the answer and in any event within sixty days of your request. If you are in the European Union you may also apply to the supervisory authority of your own country.

Can I ask for my data to be erased entirely?

You may, and data whose purpose has ceased is erased. However, records we are legally required to keep — invoices and contract documents, for example — cannot be deleted before the statutory period expires. In such a case we tell you in writing which data is retained and why.