GDPR Notice

As Atalay Tech, we would like to inform you about the processing of your personal data as the data controller within the scope of the Personal Data Protection Law No. 6698 ("KVKK").

Data controller under KVKK:

Personal data is processed in the following categories:

• Identity Information: Name, surname
• Contact Information: Email address, phone number, address
• Customer Transaction Information: Project requests, proposals, contract information
• Transaction Security Information: IP address, log records, cookie data
• Marketing Information: Communication preferences, campaign participation

Your personal data is processed for the following purposes:

• Service delivery and fulfillment of contractual obligations
• Meeting communication requests
• Preparing project proposals and pricing
• Conducting billing and financial transactions
• Fulfilling legal obligations
• Ensuring information security
• Conducting marketing activities (with consent)

Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of KVKK:

• Necessity for the establishment or performance of a contract
• Fulfillment of legal obligations of the data controller
• Legitimate interest of the data controller
• Provided it does not harm the fundamental rights and freedoms of the data subject
• Your explicit consent

Your personal data is retained for the period required by the processing purpose and within legal retention periods. These periods are:

• During the contractual relationship and 10 years thereafter
• Invoices and financial documents: 10 years
• Communication records: 3 years
• Cookie data: 2 years
• Other periods required by legal obligations

You have the following rights under Article 11 of KVKK:

• Learn whether your personal data is processed
• Request information if your personal data has been processed
• Learn the purpose of processing your personal data and whether they are used appropriately
• Know third parties to whom your personal data is transferred domestically or abroad
• Request correction if your personal data is incomplete or incorrectly processed
• Request deletion or destruction of your personal data under conditions set forth in Article 7 of KVKK
• Request notification of correction, deletion, and destruction operations to third parties
• Object to the emergence of a result against you by analyzing the processed data exclusively through automated systems
• Request compensation for damages if you suffer damage due to unlawful processing of your personal data

You can apply through the following methods to exercise your rights under KVKK:

• Email: Apply to info@atalay.tech with documents verifying your identity
• Written application: To company address via notary or registered mail
• Via registered electronic mail (KEP)

Your applications will be concluded free of charge within 30 days at the latest. If the transaction requires an additional cost, the fee determined by the Personal Data Protection Board may be charged.