Privacy Notice

1. Data controller

Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by [FULL LEGAL COMPANY NAME] (“CECA Solution”) as data controller, within the scope described below.

• Address: [FULL ADDRESS], Ümraniye / Istanbul, Türkiye
• Trade registry / Tax no: [NUMBER]
• Email: info@cecasolution.com

2. Personal data processed

If you contact us through this website, the following data is processed:

• Identity data: first name, last name
• Contact data: email address, phone number
• Transaction data: your company, service of interest, content of your message
• Security data (for everyone who visits our website): IP address, time of visit, page viewed and time spent on it, referring site, browser / operating system / device type, country and city estimated from the IP address

3. Purposes of processing

• Receiving and responding to your enquiries
• Providing information and proposals about our products and services
• Conducting pre-contractual discussions
• Fulfilling our legal obligations
• Keeping our website secure and monitoring its use statistically

4. Legal basis

Your data is processed under Article 5/2 of the KVKK on the grounds that processing is directly related to the conclusion or performance of a contract (subparagraph c), necessary for compliance with a legal obligation (subparagraph ç), and necessary for our legitimate interests (subparagraph f). Where none of these apply, processing is based on your explicit consent.

5. Method of collection

Your personal data is collected electronically through the contact form on our website, and via email, telephone and WhatsApp; visit records are collected automatically by our server when you visit the site.

6. Transfers

Your personal data may be transferred, only to the extent necessary for the purposes above, to our service providers such as [HOSTING PROVIDER] and [FORM / EMAIL SERVICE], and to public authorities legally entitled to request it.

[IF DATA IS TRANSFERRED ABROAD — for example if servers are located outside Türkiye — THIS MUST BE STATED EXPLICITLY AND THE CONDITIONS OF KVKK ARTICLE 9 MUST BE MET.]

7. Retention period

Your data is retained for as long as the purpose of processing requires and until the statutory limitation periods expire, after which it is deleted, destroyed or anonymized.

Retention period for contact form records: [PERIOD — e.g. 2 years]

Retention period for website visit records: 24 months (deleted automatically afterwards).

8. Your rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is being processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used accordingly; to know the third parties to whom it is transferred domestically or abroad; to request correction if it is incomplete or inaccurate; to request erasure or destruction; to request that such actions be notified to third parties to whom the data was transferred; to object to a result against you arising from analysis carried out exclusively by automated systems; and to claim compensation for damage arising from unlawful processing.

9. How to apply

You may submit requests regarding your rights by email to info@cecasolution.com or in writing to our address above. Applications are concluded within 30 days at the latest.

Last updated: [DATE]