Bilgetek KVKK Disclosure

1. Data controller

Within this disclosure, the 'Data Controller' is Bilgetek (Istanbul, Türkiye). Contact: privacy@bilgetek.com

2. Categories of personal data processed

• Identity: name and surname (via the contact form).
• Contact: email address and phone number if provided.
• Customer transaction info: project brief content (company name if any, request summary) and the selections you make in the price estimator together with the resulting estimate.
• Traffic info: site access logs plus the IP address, user agent and request time recorded on form submission (to prevent abuse and rate-limit submissions).

3. Processing purposes

• Responding to your request.
• Conducting proposal and contract processes.
• Ensuring website security and performance.
• Fulfilling legal obligations.

4. Legal basis

KVKK art.5/2-(c) directly related to the establishment or performance of a contract (preparing a quote in response to your request) and art.5/2-(f) legitimate interest, provided your fundamental rights are not harmed (responding to the request, site security). No separate explicit consent is collected on the contact form: what you write there is processed only to respond to your request and is not added to a marketing list.

5. Transfer

Your personal data is not shared with advertising or sales third parties. Infrastructure providers such as Cloudflare (hosting, CDN, form security and cookieless analytics) and Resend (contact email) only keep standard connection/transaction metadata. The request you submit is also recorded in Bilgetek's own customer management system (crm.bilgetek.com) so it can be followed up; that system is not owned by a third party, it is operated by Bilgetek.

6. Retention period

Contact correspondence is kept for 3 years, server access logs at most 90 days.

7. Your rights under KVKK Article 11

• Learn whether personal data is being processed.
• If so, request information about it.
• Learn the processing purpose.
• Know the third parties to whom data is transferred.
• Request correction if processing is incomplete/incorrect.
• Request deletion or destruction.
• Object to results arising from automated analysis.
• Request compensation for damages caused by processing in violation of the law.

8. How to apply

To exercise these rights, send your written application to privacy@bilgetek.com. We respond within 30 days at the latest.