CARPENTO CARAVAN
PRIVACY AND PERSONAL DATA PROTECTION NOTICE
Version: 1.0
Last updated: 6 July 2026
1. PURPOSE AND SCOPE
This Privacy and Personal Data Protection Notice (“Notice”) has been prepared to explain how personal data is collected, used, stored and shared in connection with customer communications carried out under the Carpento Caravan brand, and to explain the rights of data subjects.
This Notice applies in particular to communications carried out through:
– emails sent to info@carpentocaravan.com,
– contact and quotation forms on www.carpentocaravan.com,
– telephone and other direct communication channels,
– sales, quotation, catalogue and product information requests,
– dealer and distributor applications,
– service, warranty, spare parts and after-sales support requests,
– complaints and quality reports,
– fairs, events and face-to-face meetings,
– communications with existing customers and dealers.
Cookies and similar technologies used on the website may be addressed in a separate Cookie Notice.
2. DATA CONTROLLER
The data controller responsible for your personal data is:
EGTA Endüstriyel Tasarım San. ve Tic. A.Ş.
Trade name: Carpento Caravan
Web: www.carpentocaravan.com
Email: info@carpentocaravan.com
Telephone: +90 850 307 2379
For data protection and data subject requests:
info@carpentocaravan.com
Using “Data Protection Request” in the subject line may help us route your request more quickly.
3. EUROPEAN UNION REPRESENTATIVE AND EUROPEAN CONTACT POINT
For data subjects within the European Union and the European Economic Area, our European Union representative and European contact point is:
EGTA Industrial Design B.V.
The Netherlands
Contact:
info@carpentocaravan.com
Data subjects located in the EU/EEA may contact either the data controller, EGTA Endüstriyel Tasarım San. ve Tic. A.Ş., or the EU representative, EGTA Industrial Design B.V., regarding the processing of their personal data.
4. WHAT PERSONAL DATA DO WE PROCESS?
Depending on the nature of the communication and request, we may process the following categories of personal data:
a) Identity data
– name,
– surname,
– job title,
– company or organisation represented.
b) Contact data
– email address,
– telephone number,
– address,
– country and city.
c) Request and communication data
– email and message content,
– communication history,
– subject of the request,
– Carpento model of interest,
– travel and usage plans,
– product and equipment preferences,
– expected timing for quotations and purchases.
d) Customer and transaction data
– quotation and order information,
– purchase and delivery information,
– dealer or distributor information,
– sales and customer relationship history.
e) Service, warranty and technical data
– caravan model,
– VIN or chassis number,
– production and delivery information,
– purchasing dealer,
– descriptions of technical issues,
– service and warranty history,
– photographs, videos and documents sent by the customer.
f) B2B and dealer application data
– company information,
– field of activity,
– showroom and physical sales location information,
– target market,
– sales, service and after-sales capacity,
– business experience and commercial plans.
g) Digital and technical records
– email and message identifiers,
– date and time information,
– system processing and tracking records,
– security and access logs,
– communication and lead tracking system records.
Please do not share special categories of personal data that are not necessary for your request. If such data is provided to us unsolicited, it will be processed only where necessary and legally permitted; otherwise it will be deleted, destroyed or access-restricted.
5. FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA?
Depending on the nature of the request, your personal data may be processed for the following purposes:
– receiving, reviewing and responding to your request,
– providing product, model, catalogue and sales information,
– managing quotation and pre-contractual processes,
– managing orders, sales, deliveries and customer relationships,
– determining the appropriate sales channel and local guidance based on the customer’s country,
– involving the relevant authorised dealer or distributor where necessary,
– evaluating dealer, distributor and B2B applications,
– managing service, warranty, technical support and spare parts processes,
– reviewing and resolving complaints and quality reports,
– tracking customer requests holistically by taking previous communications into account,
– linking active communications with the same individual or organisation,
– managing the status, approval and next follow-up steps of customer requests,
– improving service quality and customer communication processes,
– ensuring information and system security,
– complying with legal obligations,
– managing legal claims and disputes,
– establishing, exercising or defending legal rights.
Marketing and promotional communications are carried out to the extent permitted by applicable law and, where required, with the data subject’s consent. Data subjects may object to direct marketing communications at any time.
6. LEGAL BASES FOR PROCESSING PERSONAL DATA
Depending on the nature of the processing activity, your personal data is processed on one or more of the following legal bases:
Under Turkish Personal Data Protection Law No. 6698:
– processing is directly related to the establishment or performance of a contract,
– processing is necessary for the data controller to comply with a legal obligation,
– processing is necessary for the establishment, exercise or protection of a right,
– processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed,
– explicit consent, where required by law.
For data subjects within the scope of the GDPR:
– performance of a contract or taking steps at the request of the data subject prior to entering into a contract,
– compliance with legal obligations,
– legitimate interests such as managing customer requests, information security, service improvement and protecting legal rights,
– consent, where required by law.
Where a processing activity is based on consent, the data subject may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
7. HOW DO WE COLLECT PERSONAL DATA?
Personal data may be collected directly from you or, where necessary, from authorised business partners and dealers through:
– email,
– website contact and quotation forms,
– telephone,
– face-to-face meetings,
– fairs and events,
– service and warranty forms,
– requests forwarded by dealers and business partners,
– documents, photographs and videos sent by customers,
– digital communication and tracking systems.
Providing personal data is generally voluntary. However, certain information may be necessary in order to respond to your request, prepare a quotation, take pre-contractual steps, or carry out service and warranty procedures. If required information is not provided, the relevant request or transaction may not be fully processed.
8. AI- AND AUTOMATION-ASSISTED PROCESSING
Automation and AI-assisted tools may be used to manage customer communications more quickly, consistently and efficiently.
These tools may be used in a supporting role for:
– identifying the language and request type of incoming messages,
– summarising customer requests,
– identifying the relevant Carpento model or topic,
– linking customer records and active communications,
– preparing draft email responses,
– generating follow-up and internal process suggestions.
AI systems are used as support tools. Decisions that produce legal or similarly significant effects for a customer are not based solely on automated processing.
Responses sent to customers and important actions may be subject to review and approval by authorised personnel. AI-generated drafts do not replace human judgement.
9. WITH WHOM MAY PERSONAL DATA BE SHARED?
Your personal data may be shared, only to the extent necessary and limited to the relevant purpose, with the following recipients or categories of recipients:
– EGTA Industrial Design B.V.,
– authorised Carpento dealers and distributors,
– sales and after-sales service providers,
– logistics, transport, customs, insurance and delivery service providers,
– accounting, finance, payment and banking service providers,
– legal, tax and other professional advisers,
– email, cloud, data storage, customer tracking, automation, security and AI service providers,
– public authorities, courts and regulatory bodies where legally authorised.
Where it is necessary to involve a local dealer or distributor in the customer’s request, your contact and request information may be shared with the relevant authorised dealer. Such sharing is limited to the information necessary to manage the local sales or support request.
An authorised dealer or distributor may also act as an independent data controller for its own processing activities and may provide its own privacy notice.
10. INTERNATIONAL TRANSFERS OF PERSONAL DATA
Carpento Caravan operates internationally. The data controller is established in Türkiye, while the EU representative and European contact point are established in the Netherlands.
To the extent required by the purposes of processing, your personal data may be transferred between or processed in:
– Türkiye,
– the European Union and European Economic Area,
– other countries where authorised dealers, business partners or service providers are located.
Because we use cloud, email, data storage, automation and AI services, some data may be processed in countries where service providers operate servers or other facilities.
International transfers are carried out in accordance with the conditions and transfer mechanisms provided under applicable data protection laws.
For transfers from Türkiye, where applicable, we rely on appropriate mechanisms such as adequacy decisions, appropriate safeguards, standard contractual clauses, binding corporate rules, approved undertakings or relevant statutory derogations.
For transfers subject to the GDPR, the international transfer provisions of the GDPR apply, including adequacy decisions and appropriate safeguards where relevant.
11. HOW LONG DO WE RETAIN PERSONAL DATA?
Personal data is retained for as long as necessary for the purposes for which it was collected and, thereafter, taking into account applicable legal retention periods, limitation periods, contractual obligations, warranty periods, tax and commercial law requirements, and dispute-related needs.
Retention periods are determined in particular by considering:
– whether the customer request or communication process is ongoing,
– whether a quotation or contractual process exists,
– whether an active customer, dealer or service relationship continues,
– whether a warranty, service or complaint process remains open,
– legal retention obligations,
– applicable limitation periods for potential legal claims,
– information and system security needs.
When the purpose and legal basis for retention no longer apply, personal data is deleted, destroyed or anonymised in accordance with applicable law.
Where marketing processing is based on consent, such processing stops when consent is withdrawn. Objections to direct marketing are also respected.
12. DATA SECURITY
Technical and organisational measures appropriate to the nature of the processing are implemented to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.
These measures may include, where appropriate:
– authorisation and access controls,
– authentication,
– user and transaction logs,
– confidentiality obligations,
– data minimisation,
– secure cloud and communication infrastructure,
– backup and business continuity measures,
– supplier and service provider controls.
13. YOUR RIGHTS AS A DATA SUBJECT
Under Turkish Law No. 6698, to the extent applicable, you have the right to:
– learn whether your personal data is being processed,
– request information if it has been processed,
– learn the purpose of processing and whether the data is used in accordance with that purpose,
– learn the third parties to whom personal data has been transferred,
– request correction of incomplete or inaccurate data,
– request deletion or destruction where the relevant conditions are met,
– request notification of correction, deletion or destruction to relevant third parties,
– object to a result arising against you solely through analysis by automated systems,
– claim compensation for damage suffered as a result of unlawful processing.
For data subjects within the scope of the GDPR, where applicable, rights include:
– access,
– rectification,
– erasure,
– restriction of processing,
– objection to processing,
– objection to direct marketing,
– data portability,
– withdrawal of consent,
– lodging a complaint with a competent supervisory authority.
Data subjects located in the EU/EEA may lodge a complaint, in particular, with the supervisory authority in the place of their habitual residence, place of work or place of the alleged infringement.
14. HOW CAN YOU EXERCISE YOUR RIGHTS?
You may submit requests regarding your personal data to:
Email:
info@carpentocaravan.com
Suggested subject:
Data Protection Request
Providing the following information may help us process your request more efficiently:
– name and surname,
– contact details where we can reach you,
– a clear description of your request,
– where relevant, the related email, order, service or application information.
We may request reasonable additional information in order to verify your identity and protect the data of third parties.
Requests are handled in accordance with the time limits and procedures provided by applicable law.
15. CHILDREN’S DATA
Our products and services are not directed at children.
If personal data relating to a child is provided to us, such data is processed only to the extent legally permitted and necessary. Data that is not required is deleted, destroyed or access-restricted.
16. CHANGES TO THIS NOTICE
This Notice may be updated to reflect changes in our business processes, technologies or applicable law.
The current version is published on www.carpentocaravan.com.
Where appropriate, significant changes may also be communicated through other suitable means.
17. CONTACT
Data Controller:
EGTA Endüstriyel Tasarım San. ve Tic. A.Ş.
Carpento Caravan
Web:
www.carpentocaravan.com
Email:
info@carpentocaravan.com
Telephone:
+90 850 307 2379
EU Representative and European Contact Point:
EGTA Industrial Design B.V.
The Netherlands
Email:
info@carpentocaravan.com
Last updated:
6 July 2026