Privacy Notice (KVKK)

Through the contact form, the following data are processed:

• Identity: Name, surname

• Contact: E-mail address, phone number (optional)

• Customer request: Free-text content you share in the message field (project details, requirements, etc.)

When you browse the site, your IP address, browser type and visit time may be temporarily kept by our hosting provider (Cloudflare, Inc.) within the scope of technical infrastructure.

Your data is processed for the following purposes:

• Responding to your enquiry, providing quotations, scheduling site visits

• Negotiating and forming contracts for products and services

• Compliance with statutory obligations

• Communications required for our legitimate business interests

When you submit the contact form, your data is transmitted to us through two parallel channels:

1) An e-mail is automatically sent to our corporate address [email protected]. This transmission is handled by our e-mail delivery service Resend, Inc. (USA) and delivered to our mail server hosted on the EU (Netherlands/Germany) data centre of Zoho Corporation.

2) At the same time, the WhatsApp application opens in your browser with a pre-filled message draft ready for you to send. Once you dispatch the message manually, transmission occurs over the WhatsApp infrastructure operated by Meta Platforms, Inc. (USA).

Both channels constitute cross-border data transfers within the scope of KVKK Art. 9. By ticking the "I have read the Privacy Notice" checkbox, you acknowledge being informed of both transfers.

Your data is not shared with third parties other than the competent Turkish authorities and courts where required by law.

Data is collected electronically, directly from the data subject through the sipahimermer.live contact form.

Legal basis:

• KVKK Art. 5/2-c — Processing necessary for the conclusion or performance of a contract

• KVKK Art. 5/2-e — Processing necessary to establish, exercise or protect a right

• KVKK Art. 5/2-f — Legitimate interests of the data controller, provided that the fundamental rights of the data subject are not infringed

Your personal data is retained for the duration of the relevant enquiry/project and, for the purpose of potential legal disputes, for a maximum of 2 (two) years thereafter.

Form content delivered by e-mail to [email protected] is archived on our Zoho Mail EU servers for the same period. At the end of the retention period, the data is deleted or anonymised.

Messages transmitted via WhatsApp are subject to WhatsApp/Meta retention policies; we consider the e-mail channel as the authoritative persistent archive for corporate correspondence.

You may exercise the following rights by applying to us in your capacity as the data subject:

a) Learn whether your data is processed

b) Request information about the processing

c) Learn the purpose and whether processing is consistent with the purpose

d) Know the third parties to whom data is transferred within Turkey or abroad

e) Request rectification of incomplete or inaccurate data

f) Request erasure or destruction of data

g) Request notification of rectification/erasure to third-party recipients

h) Object to outcomes derived from automated decision-making

i) Claim damages in case of unlawful processing

To exercise your rights:

• By e-mail: [email protected] (with information establishing your identity)

• By KEP (Registered E-mail): see the Company Information section at the bottom of the site

• In writing: a signed petition addressed to the official postal address listed in Company Information

Your application must comply with the Communique on the Procedures and Principles of Application to the Data Controller; we will respond within 30 days, free of charge. The Board may charge a fee for exceptional cases as specified in the Communique.

Our site uses HTTPS (TLS 1.3) encryption; server security is provided by our hosting provider Cloudflare, Inc. through DDoS protection and a Web Application Firewall (WAF).

Contact form data is transiently processed on a Cloudflare Pages Function (no persistent logs) and then relayed over TLS to our e-mail delivery service Resend, Inc.; from there it is delivered as an SPF/DKIM-signed message to our address [email protected] (Zoho Mail EU).

End-to-end TLS 1.2+ encryption applies. Form data is not stored in our own database; it is retained only in the e-mail archive (subject to the Art. 6 retention period).