Get a quote

Privacy Notice (KVKK)

Last updated: 25 September 2026

SAMPLE TEXT — pending legal review. This document must be reviewed by a lawyer/data protection consultant before going live.

Data Controller

[COMPANY NAME] ("the Company") processes your personal data as the data controller within the scope described below, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK").

  • Address: [ADDRESS]
  • MERSIS No: [MERSIS NUMBER]
  • KVKK request e-mail: [KVKK E-MAIL]
  • Registered e-mail (KEP): [KEP ADDRESS]

Categories of Personal Data Processed

  • Identity: full name
  • Contact: e-mail, phone, city
  • Customer transaction: quote request content, files attached to quote requests, contact form messages
  • Transaction security: IP address, session/log records, password (stored irreversibly, hashed)

Purposes of Processing

  • Creating and managing website membership
  • Responding to requests received via the contact form and quote request form
  • Preparing and delivering the requested service quote
  • Carrying out information security processes
  • Fulfilling legal obligations

Legal Grounds

Your personal data is processed based on the following legal grounds under Article 5/2 of KVKK:

  • Being directly related to the establishment or performance of a contract (Art. 5/2-c)
  • Being mandatory for the Company to fulfil its legal obligations (Art. 5/2-ç)
  • Being mandatory for the establishment, exercise or protection of a right (Art. 5/2-e)
  • Being mandatory for the Company's legitimate interest (Art. 5/2-f)

Transfers

Your personal data may be shared, to the extent necessary to provide the service, with service providers such as hosting and e-mail service providers.

Transfer abroad: E-mails sent to you or by the Company are delivered through servers (Gmail) belonging to our e-mail service provider Google LLC. Accordingly, your personal data is transferred abroad under Article 9 of KVKK. The legal basis for this transfer is: [TRANSFER BASIS — to be clarified in legal review].

Collection Method

Your personal data is collected electronically, by automated means, through the forms on the website (membership, contact, quote request).

Retention Periods

  • Contact form messages: 2 years
  • Quote requests and their attachments: 10 years (commercial record-keeping obligation)
  • Membership account data: until the account is deleted
  • Security/log records: [PERIOD]

Your Rights (KVKK Article 11)

Under Article 11 of KVKK, by applying to the data controller you have the right to;

  • Learn whether your personal data is being processed,
  • Request information if it has been processed,
  • Learn the purpose of processing and whether it is used in accordance with that purpose,
  • Know the third parties to whom it is transferred domestically or abroad,
  • Request correction if processed incompletely or incorrectly,
  • Request deletion or destruction within the conditions set out in Article 7 of KVKK,
  • Request that correction/deletion/destruction be notified to third parties to whom the data was transferred,
  • Object to a result that is to your detriment arising from analysis of the processed data exclusively through automated systems,
  • Request compensation for damages arising from unlawful processing.

How to Apply

You may submit your request via the [KVKK E-MAIL] address, the [KEP ADDRESS] registered e-mail address, or in writing to [ADDRESS]. Your application will be answered within 30 days at the latest, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.