Privacy Notice and Data Protection Policy

Data controller

Your personal data is processed within the scope described below by [TO BE COMPLETED: registered trade name], acting as data controller under Personal Data Protection Law No. 6698 (“KVKK”). Contact details are set out on the Legal Notice page.

Categories of personal data

• Identity and contact data: name, company name, e-mail address, telephone number.
• Customer transaction data: subject of the request, product group, statements on the current stage of the process.
• Transaction security data: form submission date and technical records.
• Data contained in documents you send us in connection with your request.

Purposes of processing

• Assessing quote requests and responding to you.
• Delivering consultancy, translation and coordination services.
• Establishing and performing contracts.
• Meeting legal obligations and complying with retention periods.
• Handling requests and complaints.

Legal grounds

Your personal data is processed on the grounds that processing is directly related to the conclusion or performance of a contract (Art. 5/2-c), is necessary for compliance with a legal obligation (Art. 5/2-ç), and is necessary for legitimate interests (Art. 5/2-f). Where explicit consent is required, it is obtained separately.

Collection method

Data is collected through the request form on the website, e-mail, telephone and written correspondence, by automated and partly automated means.

Transfers

Your personal data may be transferred to suppliers and business partners to the extent necessary for delivering the service, to competent public authorities where required by law, and to providers of technical infrastructure. Where transfer abroad is necessary, Article 9 of the KVKK applies and explicit consent is obtained where required.

Retention period

Personal data is retained for as long as the purpose of processing requires and until the end of the statutory limitation and retention periods. Once those periods expire, data is deleted, destroyed or anonymised.

Data subject rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed, to request information if it has been, to learn the purpose of processing and whether the data is used accordingly, to know the third parties to whom it is transferred domestically or abroad, to request correction if it is incomplete or inaccurate, to request deletion or destruction, to request that such actions be notified to third parties to whom the data was transferred, to object to an adverse outcome arising from analysis solely by automated systems, and to claim compensation for damage suffered as a result of unlawful processing.

How to apply

Requests concerning your rights may be submitted in writing to the address on the Legal Notice page, or to the KEP address with a secure electronic signature, in line with the Communiqué on Application Procedures to the Data Controller. Applications are concluded within thirty days at the latest.

Data security

Appropriate administrative and technical measures are taken to prevent unlawful processing of and access to personal data. Commercial information, pricing and supplier records are not shared with third parties.

Note: this text is a standard template and should be reviewed by legal counsel before publication.