PRIVACY AND SECURITY POLICY

Last updated: 16 September 2026

This Privacy and Security Policy (“Policy”) explains the general privacy and information-security approach applied in connection with the use of the radiva.com website (“Website”), operated by Radiva Isı Sistemleri Sanayi ve Ticaret Limited Şirketi (“Radiva”).

Detailed information on the purposes, legal grounds and methods used to process personal data is provided in Radiva’s Personal Data Protection Privacy Notice. Information about cookies and similar technologies is provided in the Cookie Policy and Privacy Notice. This Policy does not constitute explicit consent or consent to receive commercial electronic communications.

1. PROTECTION OF PERSONAL DATA

Radiva may process personal data required for processes such as membership, orders, delivery, invoicing, customer service, communications, after-sales support and Website security.

Depending on the relevant transaction, processed data may include identity, contact, customer transaction, financial transaction, request/complaint, transaction security and preference information. The same categories of data are not collected from every visitor or customer.

Personal data is processed on the legal grounds provided by applicable legislation and in a manner connected with, limited to and proportionate to the relevant purpose. Where a processing activity can rely on another legal basis, explicit consent is not requested merely as an additional requirement; explicit consent is requested separately only where it is legally required.

2. MARKETING AND COMMERCIAL ELECTRONIC COMMUNICATIONS

Where required by applicable legislation, separate consent is obtained before sending commercial electronic communications concerning campaigns, advertising, new products, promotions or similar marketing activities.

Creating an account, making a purchase, using the Website or reading this Policy does not by itself constitute consent to receive marketing emails, SMS messages or telephone calls.

Users may change or withdraw commercial communication preferences through the methods provided under applicable legislation and the communication preference options made available to them.

3. IP ADDRESSES, SYSTEM LOGS AND SECURITY

Security information such as IP address, access time, session and transaction logs may be processed to protect the Website and services, prevent unauthorised access and misuse, identify technical problems, comply with legal obligations and resolve disputes.

Such records are evaluated only within the relevant legal basis and processing purpose and are not treated as unlimited permission to build general user profiles or conduct all forms of marketing.

4. INFORMATION SECURITY

Radiva applies technical and administrative measures appropriate to the nature of its activities and risks in order to prevent unlawful processing of or unauthorised access to personal data and to maintain data security.

Depending on the relevant system and process, such measures may include access-control restrictions, user and authorisation management, logging and monitoring, secure communication methods, up-to-date software and security components, backups, data minimisation, employee awareness and contractual security requirements for service providers.

No technical system can be guaranteed to provide absolute or “unbreakable” security. Radiva reviews security measures in light of changes in risks, technology and applicable legislation.

5. PAYMENT AND CARD SECURITY

Card payments made through the Website are processed through the secure payment infrastructure of the relevant bank and/or payment service provider.

Card and financial data processed during payment transactions is handled only to the extent required to complete the transaction, prevent fraud, process refunds and comply with legal obligations.

Users should never send a full credit card number, card security code (CVV/CVC), banking password, one-time verification code or similar sensitive payment information to Radiva customer-service email addresses.

If mail-order or another separate payment method is offered, only the authorised procedure and secure channel specified by Radiva should be used. Users are not asked to send card details by email.

6. ACCOUNT AND PASSWORD SECURITY

Users are responsible for keeping account passwords and login credentials confidential. Users are advised not to share passwords with third parties, not to reuse the same password across different services and to contact Radiva if suspicious account activity is detected.

Radiva employees do not request banking passwords, CVV/CVC codes or one-time verification codes by email, telephone or live support.

7. EMAIL SECURITY

When communicating with Radiva by email, users should not send credit card information, banking passwords, one-time verification codes or sensitive personal data that is not necessary for the relevant request.

Depending on the content and systems used, email may not constitute an end-to-end secure communication channel. Where sensitive documents must be transmitted, the appropriate secure channel communicated by Radiva should be used.

8. THIRD-PARTY SERVICES AND LINKS

The Website may link to or technically integrate with third-party services for payment, shipping, video, social media, analytics, customer support or similar purposes.

Third-party websites and services are subject to their own terms and privacy practices. This does not exclude Radiva’s statutory responsibility for its own personal-data processing or transfer activities.

9. TRANSFER OF PERSONAL DATA

Personal data may be transferred, to the extent necessary and on a valid legal basis, to service providers, business partners and legally authorised institutions for processes such as orders, payments, delivery, technical infrastructure, customer service, accounting and legal matters.

Where personal data is transferred abroad, the current requirements and appropriate safeguard mechanisms under Article 9 of Turkish Personal Data Protection Law No. 6698 are applied separately.

10. COOKIES AND SIMILAR TECHNOLOGIES

The Website may use cookies and similar technologies for purposes such as session management, security, remembering preferences, analytics or advertising.

Non-essential analytics or advertising cookies that require explicit consent should not be activated before the relevant permission is obtained. Cookie categories, purposes and preference-management methods are explained in Radiva’s Cookie Policy and Privacy Notice.

11. RETENTION AND DELETION

Personal data is retained for the period required by applicable legislation or necessary for the relevant processing purpose. When retention is no longer necessary, personal data is deleted, destroyed or anonymised in accordance with applicable legislation and Radiva’s retention and disposal processes.

Closing an account or membership does not mean that invoice, accounting, order, dispute or security records that must be retained by law will automatically be deleted before the applicable retention period expires.

12. UPDATES TO THIS POLICY

This Policy may be updated to reflect changes in legislation, Website features, payment infrastructure, data-processing operations or information-security practices.

The current version is published on the Website. Updating this Policy does not automatically constitute consent to a new processing activity where explicit consent is required.

13. CONTACT

Radiva Isı Sistemleri Sanayi ve Ticaret Limited Şirketi
Website: radiva.com
Email: info@radiva.com
Telephone: +90 216 469 8406
Registered Electronic Mail (KEP): radiva@hs01.kep.tr