Privacy Notice on the Protection of Personal Data

This privacy notice has been prepared under the Personal Data Protection Law No. 6698 ("KVKK") by the data controller whose details are given below.

It covers natural persons who visit our website, fill in the forms on the site, or contact us by email or telephone.

Through our website we process only the data you provide yourself and the data that is technically necessary:

• Identity data: name and surname.
• Contact data: email address, telephone number, company name and title.
• Request management data: the content of the messages you write in the contact, quote and careers forms; the product group, volume, duration, customs regime and handling preferences you select in the quote form; the area of interest and message you provide in the careers form.
• Transaction security data: IP address, date and time of the form submission, session cookie identifier, browser and server log records.

We do not ask for special categories of personal data on our website. Please do not enter special-category data (health, religion, membership and the like) into the forms; if such data is sent to us it is deleted at the first opportunity.

Your personal data is processed for the following purposes:

• Receiving, assessing and responding to your contact and quote requests,
• Pricing and assessing the suitability of the storage service,
• Conducting pre-contractual discussions and contract processes,
• Assessing job applications and running human resources processes,
• Ensuring the security of the website and detecting misuse and attempted attacks,
• Fulfilling our legal obligations and securing evidence in possible disputes.

Your personal data is not used for marketing purposes without your explicit consent and is not transferred to third parties for marketing purposes.

Your personal data is collected electronically, by fully or partly automated means, through the forms on our website, email, telephone and server log records.

Your data is processed on the following legal bases set out in Article 5 of the KVKK:

• Art. 5/2-c — processing being directly related to the establishment or performance of a contract (quote and pre-contractual processes),
• Art. 5/2-ç — processing being necessary for the data controller to fulfil a legal obligation,
• Art. 5/2-e — processing being necessary for the establishment, exercise or protection of a right,
• Art. 5/2-f — processing being necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject (site security, keeping records of requests),
• Art. 5/1 — explicit consent (non-essential cookies and operations subject to explicit consent in the forms).

Limited to the purposes of processing and in line with the conditions in Articles 8 and 9 of the KVKK, your personal data may be transferred to the following parties:

• Our suppliers of hosting, email and information technology infrastructure services,
• Depending on the nature of your request, our group companies and business partners,
• Authorised public institutions and judicial authorities where we are legally obliged,
• Our lawyers and financial advisers in legal disputes.

Transfers abroad are made only where the conditions in Article 9 of the KVKK are met. Where a transfer abroad arises from the use of analytics or similar services, it is based solely on your explicit consent or on the other transfer conditions in the Law.

Your personal data is kept for as long as necessary for the purpose for which it is processed, taking into account the limitation periods set out in the relevant legislation:

• Contact and quote form records: 2 years after the request is concluded,
• Records of requests that lead to a contractual relationship: for the limitation period in the relevant legislation from the end of the contract,
• Job applications: 1 year from the application date,
• Server and security log records: up to 1 year,
• Cookies: for the periods stated by type in the Cookie Policy.

At the end of the period your personal data is deleted, destroyed or anonymised.

Technical and organisational measures are in place to provide an appropriate level of security, to prevent the unlawful processing of and unlawful access to your personal data:

• Encrypted connection (HTTPS) across the site,
• Authorisation, a strong password policy and two-step verification for access to the administration panel,
• Bot and abuse filters and IP-based rate limiting on form submissions,
• Server- and database-level access restrictions against unauthorised access, regular backups,
• Confidentiality obligations for staff with access to the data.

Under Article 11 of the KVKK, by applying to the data controller you may exercise the following rights:

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of the processing and whether the data is used in line with that purpose,
• To know the third parties, in Türkiye or abroad, to whom your personal data has been transferred,
• To request the correction of your personal data if it is incomplete or inaccurate,
• To request the deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
• To request that corrections, deletions and destructions be notified to the third parties to whom your personal data has been transferred,
• To object to a result to your detriment arising from the analysis of your data exclusively by automated systems,
• To claim compensation for damage suffered as a result of the unlawful processing of your personal data.

You can submit requests under Article 11 of the KVKK, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, through the following channels:

• In writing, with a wet-ink signature, delivered in person or through a notary to the address given in the company details,
• Through a registered electronic mail (KEP) address, a secure electronic signature or a mobile signature,
• To the email address given in the company details, using an email address you have previously notified to us and which is registered in our systems.

Your application must contain your name and surname, your signature if the application is in writing, your Turkish ID number (passport number for foreign nationals), your address for service, your email address and telephone number if any, and the subject of your request.

Your request will be concluded free of charge as soon as possible according to its nature, and within thirty days at the latest. If the process involves an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.

This privacy notice may be amended in line with changes in legislation and updates to our business processes. The current text is always published on this page; you can follow the effective date from the "last updated" date at the top of the page.