1. Data controller
Under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by [to be completed: LEGAL_COMPANY_NAME] (“ZEG Automation”) as data controller, as described below. This is an English translation; the Turkish version prevails.
Address: [to be completed: LEGAL_ADDRESS]
MERSIS no.: [to be completed: LEGAL_MERSIS_NUMBER]
Email: hello@zegautomation.com
2. Data processed and purposes
| Category | Data | Purpose | Legal basis |
|---|---|---|---|
| Identity | Name | Scheduling and holding the call | KVKK Art. 5(2)(c) |
| Contact | Email, phone (optional) | Confirmation email and calendar invitation, communication about the call | KVKK Art. 5(2)(c) |
| Professional | Company, team size, your message | Preparing for the call and the quote | KVKK Art. 5(2)(c) |
| Customer transaction | Chosen time slot, language, time zone | Holding the call at the right time and in the right language | KVKK Art. 5(2)(c) |
| Transaction security | IP address (in memory only, max. 1 hour), technical logs | Preventing abuse, information security | KVKK Art. 5(2)(f); where applicable Art. 5(2)(ç) (Law No. 5651) |
| Marketing / analytics | Random per-tab session id and the pages visited in that session | Measuring and improving how the site is used | Explicit consent (KVKK Art. 5(1)) |
Anonymous page-view statistics contain no personal data; no IP address or identifier is stored.
3. How data is collected
Electronically, partly by automated means, when you fill in the booking form on our website and when you visit the site.
4. Transfers (in Türkiye and abroad)
Limited to the purposes above, data is transferred to our processors: our hosting provider ([to be completed: LEGAL_HOSTING_PROVIDER]), Cloudflare, Inc., Google LLC / Google Ireland Ltd., Resend (Plus Five Five, Inc.). As their servers are abroad (mainly USA and EU), transfers are made under the standard contracts announced by the Personal Data Protection Board under Art. 9(4) KVKK, which are notified to the Authority within five business days of signature. Data may also be disclosed to authorized public bodies where the law requires.
5. Retention
Booking data is deleted automatically 24 months after the call if no business relationship follows. If one does, records are kept for the periods required by the Turkish Commercial Code and Tax Procedure Law. Analytics consent records are kept for 36 months. Expired data is deleted in line with the Regulation on the Deletion, Destruction or Anonymization of Personal Data.
6. Your rights under Art. 11 KVKK
By applying to the controller, you may:
- learn whether your personal data is processed,
- request information about the processing,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Türkiye or abroad to whom data is transferred,
- request correction of incomplete or inaccurate data,
- request deletion or destruction under the conditions of Art. 7 KVKK,
- request that the actions under (e) and (f) be notified to third parties who received the data,
- object to a result against you arising exclusively from automated analysis,
- claim compensation for damage caused by unlawful processing.
7. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, send your application with information identifying you: in writing to [to be completed: LEGAL_ADDRESS]; or from the email address registered with us to hello@zegautomation.com. We answer free of charge within 30 days at the latest; if the action has a separate cost, the Board's tariff may apply. If your application is rejected, the answer is insufficient, or we do not answer in time, you may complain to the Personal Data Protection Board within 30 days of learning the answer, and in any case within 60 days of applying.