Privacy Notice on the Protection of Personal Data

1. Data controller

Your personal data is processed by Sistem Grup Şirketleri / SGY - Sistem Geliştirme Yönetim Eğ. Dan. Ltd. Şti. (the "Company") as the data controller.

Address: Çetin Emeç Blv., 1328. Sk., No: 15/1, A.Öveçler, 06450, Çankaya/Ankara · Email: info@sgy.com.tr

2. Personal data processed

• Via the contact form: full name, email address, company name (optional), area of interest (optional) and the content of your message.
• While using the website: technical log records such as IP address, browser and device information, and date and time of access.
• A functional cookie may be used to remember your language preference. As of the date this notice was prepared, no analytics or marketing cookies are used on the site.

3. Purposes of processing

• Evaluating and responding to the requests, questions and applications you submit via the contact form,
• Where you request it, providing information and quotations about our services, trainings and products,
• Ensuring the security of the website and detecting and resolving technical issues,
• Fulfilling legal obligations and responding to requests from competent authorities.

4. Legal grounds

Your personal data is processed on the following legal grounds set out in Article 5(2) of the KVKK:

• Processing is directly related to the establishment or performance of a contract (Art. 5(2)(c)) — evaluating quotation and service requests,
• Processing is necessary for the data controller to fulfil its legal obligations (Art. 5(2)(ç)),
• Processing is necessary for the establishment, exercise or protection of a right (Art. 5(2)(e)),
• Processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5(2)(f)) — responding to your request and website security.

5. Transfer of personal data

Limited to the purposes above, your personal data may be transferred to the service providers that provide hosting, backup and email services for the website, and to competent public authorities upon request.

The website's server is located at a hosting provider abroad (European Union, Poland), and database backups are stored in encrypted form with a cloud storage service operating abroad. Your personal data is therefore transferred abroad within the scope of Article 9 of the KVKK.

A third-party map service may be embedded on the contact page. In that case, when you visit the page, your IP address and technical browser information may be sent to the relevant map service provider (abroad) so that the map can be displayed.

6. Method of collection

Your personal data is collected electronically when you fill in the contact form on the website, and partly by automated means through server logs while you use the website.

7. Retention period

Your personal data is retained for the periods set out in the applicable legislation or for as long as required by the purpose of processing; at the end of that period, it is deleted, destroyed or anonymised.

Information you submit via the contact form is retained for as long as necessary to conclude your request and to serve as evidence in the event of a possible dispute.

8. Your rights (KVKK Art. 11)

Under Article 11 of the KVKK, by applying to the data controller you have the right to:

• Learn whether your personal data is processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether it is used in line with that purpose,
• Know the third parties in Turkey or abroad to whom your personal data is transferred,
• Request correction of incomplete or inaccurately processed personal data,
• Request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
• Request that correction, deletion or destruction be notified to third parties to whom your personal data has been transferred,
• Object to a result against you arising from the analysis of the processed data exclusively through automated systems,
• Claim compensation for damages arising from the unlawful processing of your personal data.

9. How to apply

You can submit requests regarding the rights above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, by email to info@sgy.com.tr or in writing to Çetin Emeç Blv., 1328. Sk., No: 15/1, A.Öveçler, 06450, Çankaya/Ankara.

Your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request; if the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged.