Data Controller Notice

This text is a draft, currently under legal review. It will be confirmed by a lawyer before publication.

Identity of the Data Controller

Data Controller: [ADENCON MÜHENDİSLİK — LEGAL NAME/COMPANY REGISTRY NO/TAX ID/ADDRESS/REGISTERED E-MAIL TO BE ADDED]. Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by us as data controller within the scope described below.

Purpose of Processing

Your personal data is processed to create and manage your account, provide the engineering calculation and design services you request, run supplier quote workflows, improve service quality, and fulfil our legal obligations.

Data Transfers

Your data may be transferred to service providers we work with — such as our database/file storage provider (Supabase) and our email notification provider — only to the extent necessary to deliver the service and in accordance with applicable law. Some of these providers may be based outside Türkiye.

Collection Method and Legal Basis

Your personal data is collected electronically when you register, fill in forms, and use the platform, based on the legal grounds set out in KVKK Art. 5: being directly related to the establishment or performance of a contract, and compliance with a legal obligation.

Categories of Data Processed

Categories of data processed: identity and contact data (name, email), account data, engineering project/design data, supplier business data, and technical logs (e.g. IP addresses kept for security purposes).

Retention Period

Your personal data is retained for as long as required by the purpose of processing and by applicable statutory limitation periods, after which it is deleted, destroyed, or anonymized.

Your Rights Under KVKK Art. 11

Under KVKK Art. 11, you have the right to: learn whether your personal data is processed; request information about it if so; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred, domestically or abroad; request correction if incomplete or inaccurate; request deletion or destruction; request that correction/deletion be notified to third parties to whom the data was transferred; object to a result that is to your detriment arising solely from automated analysis; and request compensation for damage arising from unlawful processing.

How to Apply

To exercise the rights above, use our Data Subject Request Form. Your request will be resolved within 30 days at the latest, as required by KVKK Art. 13. Request Form

For EU Residents (GDPR)

To the extent we process the data of individuals based in the European Union, the General Data Protection Regulation (GDPR) applies in addition to KVKK. Under the GDPR, you additionally have the right to receive your data in a structured, commonly used format and transmit it to another controller (data portability), to object to a decision based solely on automated processing, and to lodge a complaint with the supervisory authority in your country of residence. Türkiye does not hold an adequacy decision from the European Commission, so transfers of your data to Türkiye are safeguarded by a transfer mechanism such as the European Commission's Standard Contractual Clauses (SCCs).