RFQ

Personal Data Privacy Notice

REV 1

This notice summarises how Atelpan processes personal data under Turkish Law No. 6698 (KVKK). The Turkish text prevails.

Data controller

The data controller under this notice is Atelpan.

Personal data we process

Through our forms and correspondence we may process the following categories:

  • Identity: name.
  • Contact: email, phone, company, country.
  • Customer transaction: request content, quote correspondence.
  • Transaction security: a salted hash of your IP address, browser information, Turnstile verification.
  • Marketing: newsletter email address, only with your explicit consent.

Technical files you upload are treated as trade secrets; they may still contain personal data (for example a name in a drawing title block).

Purposes

  • Answering your quote and contact requests.
  • Pre-contract discussions.
  • Information security and preventing misuse.
  • Meeting legal obligations.
  • Sending the newsletter, if you consent.

Legal bases (KVKK art. 5)

  • Art. 5/2-c: establishing or performing a contract.
  • Art. 5/2-ç: the controller's legal obligation.
  • Art. 5/2-f: legitimate interest (security logs).
  • Art. 5/1: explicit consent (newsletter and marketing).

Transfers

In Türkiye, data may be shared with authorised public bodies on request and with legal and financial advisers.

Transfers abroad are limited to hosting and infrastructure providers: Google Firebase/Cloud (EU region, europe-west1) and Cloudflare (R2 storage, CDN, Turnstile).

Collection method

Data is collected electronically through web forms (contact, quote, newsletter), browser storage and email, by automated or partly automated means.

Retention

  • Request records, uploaded files and security logs: retention periods are set by contract and applicable law.
  • Newsletter: until you withdraw consent.

Your rights (KVKK art. 11)

You may ask whether your data is processed, request information, correction, deletion or destruction, object to restricted processing, and claim compensation for damage caused by unlawful processing.

How to apply

Send your request in writing in line with the Communiqué on Application Procedures to the Data Controller. We reply within 30 days at the latest.

Version

The current version and effective date are shown at the top of this page; the version you accept in a form is recorded.