KVKK Privacy Notice

This is an English translation provided for convenience; in case of conflict the Turkish text prevails.

1. Data controller

Under Personal Data Protection Law No. 6698 (the “Law”), your personal data is processed by TurkAI as data controller, as described below.

TurkAI · Ankara, Türkiye · E-mail: info@turkai.tr

2. Personal data processed

• Identity: first and last name (if you share it on WhatsApp, by e-mail or in other correspondence).
• Contact: e-mail address, phone number.
• Request / complaint information: messages and correspondence.
• Transaction security: IP address, browser and device information, access logs.

3. Purposes

• Receiving, evaluating and answering your contact, demo and proposal requests;
• Preparing and performing contracts;
• Running information security processes and operating the Site securely and without interruption;
• Informing authorised persons and institutions and meeting legal obligations;

4. Collection method and legal grounds

Your personal data is collected electronically, partly by automated means, through WhatsApp conversations started from the website, e-mail and phone, and processed on the following grounds under Article 5 of the Law:

• Directly related to the conclusion or performance of a contract (Art. 5/2-c) — proposal and demo requests;
• Necessary for compliance with a legal obligation (Art. 5/2-ç);
• Necessary for the establishment, exercise or protection of a right (Art. 5/2-e);
• Necessary for our legitimate interests, provided your fundamental rights and freedoms are not harmed (Art. 5/2-f) — general enquiries and transaction security;

5. Transfers

Limited to the purposes above, your personal data may be transferred to:

• Cloudflare, Inc. (hosting, content delivery and visit statistics) and Meta Platforms Ireland Ltd., which provides WhatsApp (WhatsApp correspondence) — service providers whose servers are located abroad;
• Our lawyers and advisers in legal disputes;
• Competent public authorities upon request.

Cross-border transfers are carried out by providing one of the appropriate safeguards under Article 9 of the Law (standard contractual clauses announced by the Board).

6. Retention

Personal data is kept for as long as the purpose requires and as required by law: contact correspondence for 2 years after the request is closed; correspondence that leads to a contract for the contract term plus the general limitation period under the Turkish Code of Obligations No. 6098. Afterwards, data is deleted, destroyed or anonymised.

7. Your rights under Article 11

By applying to the data controller, you have the right to:

• Learn whether your personal data is processed;
• Request information if it has been processed;
• Learn the purpose of processing and whether it is used accordingly;
• Know the third parties in Türkiye or abroad to whom it is transferred;
• Request correction if it is incomplete or inaccurate;
• Request deletion or destruction under the conditions in Article 7;
• Request that correction, deletion or destruction be notified to third parties to whom data was transferred;
• Object to a result against you arising from analysis exclusively by automated systems;
• Claim compensation for damages arising from unlawful processing.

8. How to apply

You can submit requests in line with the Communiqué on the Procedures and Principles of Application to the Data Controller: in writing to Ankara, Türkiye, with a secure electronic or mobile signature, or from the e-mail address you previously provided to us and that is registered in our system, to info@turkai.tr. Your application must include your name, (signature for written applications), Turkish ID number (nationality and passport/ID number for foreigners), address for notification, e-mail and phone if any, and the subject of your request.

Applications are concluded free of charge as soon as possible and within 30 days at the latest. If the action requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.