GDPR & data rights
Hafez Taplux Group operates in Türkiye but routinely advises clients who are residents of the European Union and the United Kingdom. Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal data, the rights below are available to you.
1 · Controller and contact
Hafez Taplux Group, Trump Towers, Apt. 1906, Floor 19, No: 12, Şişli, Istanbul, Türkiye, is the controller of your data. For data-protection enquiries please write to info@taplux.com with “Data rights” in the subject line.
2 · Lawful basis
We process personal data on the bases set out in our Privacy policy: performance of a contract, legal obligation (anti-money-laundering), legitimate interest (running the business), and consent for marketing.
3 · Your rights
- Right of access — ask for a copy of the personal data we hold about you.
- Right to rectification — ask us to correct inaccurate data.
- Right to erasure — ask us to delete data we no longer need to keep.
- Right to restrict processing — pause processing while a query is resolved.
- Right to object — object to processing based on legitimate interest or direct marketing.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
4 · How to exercise your rights
Email info@taplux.com from the address on file. We will respond within one month. We may ask for proof of identity before releasing personal data.
5 · International transfers
Where we transfer your data outside the European Economic Area we rely on standard contractual clauses adopted by the European Commission and on additional safeguards where required by case law (Schrems II).
6 · Complaints
If you believe your rights have not been respected, you may lodge a complaint with your local supervisory authority. We would, however, appreciate the chance to address your concern first — email info@taplux.com.
Turkish residents are covered by the Personal Data Protection Law (KVKK, no. 6698); the rights above apply in substance under that law as well.