1. Who handles your information?

This notice covers personal information relating to Auto Remote Controls at autoremotecontrols.com. It applies to website visitors, account users and individual contacts acting for business customers. Business-only sales do not remove the protection of those individuals’ personal information.

The controller for ARC’s customer, order and website administration is Esan Elektronik San. Tic. Ltd. Şti, at Ataturk Boulevard Deposite Business Center A1 Block Floor:3 No:324 Istanbul / Turkey. Tax office: İkitelli Vergi Dairesi; tax number: 3770430731. Contact [email protected] for privacy enquiries. Banks, payment services and other providers may separately control processing carried out for their own purposes.

2. Information and sources

• Contact and business details: name, business name, email, telephone, billing and delivery addresses, and relevant invoicing or tax details supplied by you or your business.
• Accounts and purchases: account details, orders, invoices, delivery information, payment references and transaction status.
• Enquiries and support: messages, return requests and vehicle, product or equipment details you choose to provide.
• Technical information: information generated when your browser connects to the site or embedded services, such as IP address, browser/device information, page addresses and online identifiers.
• Marketing interactions: subscription requests and information received through the Google and Meta integrations described below.

We receive information from you, your business, website interactions and providers involved in payments, deliveries and support. Supply only information relevant to the transaction or enquiry. Required order information is needed to process a purchase; optional marketing choices are separate. Payment services process information needed for the selected payment method. Do not email card security codes or account passwords.

3. Why information is used

• Enquiries and orders: to respond, administer accounts, supply goods, arrange payment and delivery, and provide after-sales assistance. Contract-related processing applies where necessary for a contract with the individual; when acting for a corporate customer, necessary contact administration is based on the legitimate interest in managing that business relationship, subject to individual rights.
• Legal records: to issue invoices, maintain required accounting and tax records, and respond to lawful authority requests, on the basis of applicable legal obligations.
• Security and disputes: to protect the store, investigate misuse and establish, exercise or defend claims, on the applicable legal-claims ground and legitimate interests subject to the relevant rights safeguards.
• Optional marketing and measurement: to communicate promotions, measure advertising and understand site use. Consent is required where the relevant privacy, electronic-marketing or cookie rules require it; accepting this notice is not that consent.

The grounds above are applied under Turkish Law No. 6698 (KVKK) and, where applicable, the GDPR. Processing is limited to the purpose concerned. Withdrawing an optional consent does not cancel processing independently required for an order or a legal obligation.

4. Google and Meta technologies

The website contains Google Analytics and Google Ads integrations intended for site-use measurement, advertising measurement and remarketing. It also contains Meta Pixel code that sends page-view information to Meta. The presence of an integration does not mean that every available feature is enabled.

When these services load, the provider may receive page addresses, IP address, browser/device information and online identifiers. Advertising services can relate site activity to advertising interactions or a provider account according to that provider’s settings and policies. This information is not necessarily anonymous.

Google explains its processing and controls in How Google uses information from partner sites. Meta explains its processing in the Meta Privacy Policy. These provider notices supplement this notice and do not replace our responsibilities.

5. Cookies and controls currently available

Cookies and similar technologies can support shopping sessions, account functions, security, measurement and advertising. A session cookie is generally removed when the session ends; a persistent cookie remains until its expiry or deletion. The duration and behaviour depend on the particular service and your browser settings.

The website currently does not provide an active site-wide cookie preference panel. Optional third-party code may load when pages are opened, before a site-specific consent choice is obtained. This notice describes that situation; it does not treat browsing, silence or acceptance of purchase terms as consent, nor does it claim that optional tracking is blocked pending your choice.

You can block or delete cookies through your browser and manage provider advertising settings through Google My Ad Center and your Meta account settings. Blocking necessary cookies may affect the basket or account functions. These controls may not prevent every third-party connection or erase information already received by a provider; they are not a substitute for a required site consent mechanism.

Contact [email protected] to exercise your rights or withdraw a marketing consent you previously gave us. If you receive promotional email, you may also use the unsubscribe option in that message. Necessary order and service communications are separate.

6. Recipients

• Store infrastructure: the T-Soft ecommerce platform and providers supporting the website, its hosting and administration, to the extent needed for their services.
• Payments: the bank, card-processing service or PayPal involved in the selected method, for payment, transaction security and reconciliation.
• Shipping: DHL, TNT and relevant delivery or customs participants, for delivery and clearance.
• Embedded services: Google and Meta as described above. The site also includes Sendloop and Elfsight code for email/marketing or embedded website services; loading third-party content can disclose browser connection information to its provider.
• Professional and legal recipients: advisers, authorities and other parties where necessary for a legal obligation or the establishment, exercise or defence of a claim.

A provider may act under our instructions for a service or independently for its own regulatory, security or service purposes. For information about a recipient involved in your particular transaction, contact us with the order reference.

7. International processing

ARC operates from Turkey and serves international customers. Processing associated with a purchase may take place in Turkey, the delivery country and locations used by the selected payment, delivery or technology provider. International technology providers may process information in the United States and other countries, as described in their own notices.

A cross-border disclosure must have a lawful basis and any transfer safeguards required under the applicable KVKK or GDPR rules. This notice does not itself provide consent to an international transfer or establish such a safeguard. You may contact [email protected] to ask which recipients and transfer arrangements apply to your information and to request information about any applicable safeguards.

8. Retention

Retention depends on the record and purpose:

• Orders, invoices and payment records: retained for the accounting, tax and other statutory record-keeping periods that apply to the transaction, and longer only where necessary for an outstanding claim or legal requirement.
• Account information: retained while needed to provide the account and resolve related matters. Closing an account does not require deletion of invoices or other records that must legally be kept.
• Enquiries, returns and warranty records: retained while the issue is handled and for the relevant claim or limitation period.
• Security information: retained for as long as reasonably needed to investigate incidents, prevent misuse or meet a legal duty.
• Marketing preferences: retained while relevant to the preference and to record or respect a withdrawal or objection. Limited suppression information may be kept to avoid contacting someone who opted out.
• Third-party tracking: retention depends on the provider and the specific technology. Browser storage and information already received by a provider are separate; deleting a browser cookie does not itself delete the provider’s records.

Information that is no longer needed and has no continuing lawful retention ground should be deleted or anonymised. Contact us for the retention criteria applicable to a specific record.

9. Security and your account

Protect your login information and notify us promptly if you suspect misuse. Do not share passwords or send full card details in a support message. We handle privacy and security reports at [email protected]. No website, transmission method or online service can guarantee absolute security.

10. Your rights

Under KVKK, subject to its conditions, you may ask whether information is processed, obtain details of the purposes and recipients, request correction or deletion, request notification of relevant corrections or deletions to recipients, object to a detrimental result produced solely by automated analysis and seek redress for unlawful processing.

Where GDPR applies, rights may also include access, restriction, portability and objection, including objection to direct marketing, and the protections applicable to solely automated decisions with legal or similarly significant effects. You may withdraw a consent without affecting processing lawfully carried out before withdrawal.

Send enquiries to [email protected] or a written request to Esan Elektronik San. Tic. Ltd. Şti, Ataturk Boulevard Deposite Business Center A1 Block Floor:3 No:324 Istanbul / Turkey. Include sufficient information to identify the request and your relationship with us. We may request proportionate identity verification. For a formal KVKK application, use a submission method recognised by the applicable rules; contact us for assistance if needed.

KVKK applications are addressed as soon as appropriate and within 30 days. Where GDPR applies, the usual response period is one month, subject to the lawful extension process and notice. Rights are subject to applicable exceptions, including required record retention.

You may complain to the relevant data-protection authority. KVKK complaint procedures require the applicable prior application to the controller and compliance with statutory time limits. Where GDPR applies, you may contact the competent supervisory authority.

11. Changes and contact

We may update this notice when our practices or applicable requirements change. The revision date identifies this version. A notice update does not itself authorise a new use of personal information or replace any required consent.

Privacy questions: [email protected].