This privacy notice has been prepared by [Company Name] (the “Company”) as data controller to inform you about the processing of your personal data in accordance with Turkey's Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).
1. Data controller
[Company Name] — [Address] — MERSIS: [—] — Email: [privacy@domain.com]
2. Personal data we process
- Identity data (first and last name)
- Contact data (email address, phone number, company, job title)
- Request and project data (descriptions and files submitted through our forms)
- Technical security data (IP address, browser information, log records)
- Marketing data (cookie data — only with your consent)
3. Purposes of processing
- Responding to your quote and contact requests
- Entering into and performing contracts
- Providing and improving our services
- Ensuring information security
- Complying with legal obligations
- Marketing activities, if you have given your consent
4. Legal bases
We process your personal data where it is necessary to enter into or perform a contract, to comply with our legal obligations or for our legitimate interests (KVKK Art. 5(2); GDPR Art. 6(1)(b), (c) and (f)), and, where required, on the basis of your consent (KVKK Art. 5(1); GDPR Art. 6(1)(a)).
5. Recipients and transfers
Limited to the purposes above, your personal data may be shared with providers of hosting, email and software services we use, with competent public authorities and with persons legally entitled to receive it. Transfers to service providers with servers outside Turkey or the European Economic Area are carried out in accordance with KVKK Art. 9 and Chapter V of the GDPR, using appropriate safeguards.
6. How we collect data
We collect your personal data electronically through the forms on our website, by email, by phone and through cookies.
7. Retention
We keep your personal data only for as long as necessary for the purposes described above or as required by law, and then delete or anonymise it.
8. Your rights
You have the right to find out whether your personal data is processed, to request information and access, to have inaccurate data corrected, to request erasure or restriction of processing, to know the third parties to whom it has been transferred, to object to processing, to data portability and to withdraw your consent at any time (KVKK Art. 11; GDPR Arts. 15–21). You may also lodge a complaint with a data protection authority. Please send your requests to [privacy@domain.com].