Privacy Notice

1. Data controller

Your personal data is processed by our company as the data controller:

• Company: ÖZKON YAPI LTD. ŞTİ.
• Address: Valide Sultan Mah. 100. Yıl Cad. No:22-24 Merkez / Karaman
• Email: [email protected]

2. Personal data we process

• Contact form: name, email address, phone number, your company name if given, and the information you write in your message.
• Quote and service requests: in addition to the above, the details of your request and the address or location you give for it, together with any files you attach (drawings, photos, etc.).
• Job applications: name, email address, phone number, your application note and the information in the CV you upload.
• Marketing consent: whether you gave consent, the channels you chose and the date of consent.
• Technical data: your IP address and the time of submission when you send a form; connection records (IP address, time of visit, browser information) when you visit the site.

Please write only the information needed for your request. Do not include special categories of personal data such as health, religion or political opinions in the forms or in your CV.

3. Purposes and legal grounds

• To answer your questions and contact you. Legal ground: our legitimate interest (KVKK Art. 5(2)(f)).
• To prepare a quote for your request, plan a site visit, service or appointment where needed, and provide the service. Legal ground: necessary for entering into or performing a contract (KVKK Art. 5(2)(c)).
• To assess your job application and arrange an interview. Legal ground: necessary for entering into a contract (KVKK Art. 5(2)(c)).
• To keep our site and forms secure and to prevent misuse and unwanted submissions. Legal ground: our legitimate interest (KVKK Art. 5(2)(f)).
• To keep request records for the retention period in order to protect our rights in a possible dispute. Legal ground: establishment, exercise or protection of a right (KVKK Art. 5(2)(e)).
• To comply with our legal obligations and requests from competent authorities. Legal ground: legal obligation (KVKK Art. 5(2)(ç)).
• If you give consent, to send you campaign, announcement and information messages. Basis: your separate consent under Article 6 of Law No. 6563. This consent is not a condition for sending a form; you can withdraw it at any time using the opt-out link in the message or by writing to us.

4. How we collect personal data

Your personal data is collected electronically when you fill in the forms on our site and automatically when you visit the site.

5. Who we share personal data with

• Our hosting and technical service provider (KGN Yazılım Limited Şirketi): our site, form records and form notification emails are stored and processed on this provider's servers in Türkiye. The provider processes your data only on our behalf and on our instructions.
• Cloudflare, Inc. (USA): for now, our hosting provider uses the Cloudflare network to pass traffic to our server, to protect the site against attacks and abuse, and to cache the site's public files so that pages load faster. Therefore, when you visit the site your IP address, browser and connection data, and when you use a form the form content and any files you attach, pass in transit through Cloudflare's worldwide network (Cloudflare is headquartered in the USA) and are thereby transferred abroad; Cloudflare may also set a short-lived security cookie (for example __cf_bm). The legal ground for this processing is our legitimate interest in keeping the site secure and available (Article 5(2)(f) KVKK). This is temporary: our hosting provider is ending its use of Cloudflare and moving to serving traffic only from infrastructure in Türkiye; we will update this notice when the move is complete. You can exercise your rights regarding this transfer against us through the channels in sections 7 and 8.
• Competent public authorities: under our legal obligations and when requested.

6. Retention periods

• Form requests: 24 months from the date of the request.
• Files attached to requests: 180 days from upload.
• Job applications and CVs: 12 months from the date of application.
• Marketing consent records: while the consent is valid and, after it ends, for the period required by law.
• Connection (traffic) records: two years, kept by our hosting provider as required by Law No. 5651.

Records are deleted automatically by our system when their retention period ends.

7. Your rights

Under Article 11 of the KVKK you have the right to:

• learn whether your personal data is processed,
• request information about it if it is processed,
• learn the purpose of processing and whether it is used for that purpose,
• know the third parties in Türkiye or abroad to whom it is transferred,
• request correction if it is incomplete or inaccurate,
• request erasure or destruction under the conditions in Article 7 of the KVKK,
• request that correction, erasure or destruction be notified to the third parties to whom the data was transferred,
• object to a result against you arising solely from automated analysis of the data,
• claim compensation if you suffer damage because of unlawful processing.

8. How to apply

You can send your request, with enough information for us to verify your identity, in one of the following ways:

• by signed letter to Valide Sultan Mah. 100. Yıl Cad. No:22-24 Merkez / Karaman,
• by email to [email protected] from an email address you have previously given us and that is in our records.

We will respond free of charge within thirty days at the latest. If the request involves an additional cost, the fee set by the Personal Data Protection Board may be charged.