TemirTech

Personal Data Protection Notice (KVKK)

Last updated: 20 July 2026

This notice is provided by TemirTech ("TemirTech"), acting as data controller, under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") and the related Communiqué on the Fulfilment of the Obligation to Inform, to transparently explain how personal data of temirtech.com ("Site") visitors is processed.

1. Data Controller

Data controller: TemirTech Contact: info@temirtech.com

2. Personal Data Processed

The Site is designed around data minimisation; only the data listed below is processed. The Site uses no analytics, advertising, or behavioural tracking technology.

  • Contact form (only if you submit it): full name, e-mail address, company/organisation name (optional), phone number (optional), and message content.
  • Transaction security data: IP address (for rate limiting), bot verification result (Cloudflare Turnstile), limited server access logs, and technical error and performance records (no personal profiling).
  • Cookie: a functional cookie storing your language preference (not linked to your identity — see the Privacy & Cookie Policy).

3. Purposes of Processing

Your personal data is processed solely to:

  • Receive, evaluate, and respond to requests, questions, or quote inquiries submitted via the contact form, and take steps towards establishing a business relationship at your request.
  • Ensure the security of the Site and its communication channels; prevent abuse, automated (bot) submissions, and request flooding.
  • Fulfil legal obligations and establish evidence in the event of a dispute.

4. Legal Bases

Your data is processed under Article 5/2 of the KVKK, on legal bases that do not require explicit consent:

  • Art. 5/2-c — processing is necessary in direct connection with the establishment of a contract (steps relating to the request you submit via the form).
  • Art. 5/2-f — processing is necessary for our legitimate interests, provided your fundamental rights are not harmed (information security, spam and abuse prevention).
  • Art. 5/2-ç — compliance with legal obligations.

5. Transfers and International Transfers

Your personal data is never sold, rented, or shared with third parties for marketing purposes. For the technical operation of the Site, data is transferred to a limited number of infrastructure providers acting as data processors:

  • Vercel Inc. (USA) — hosting and delivery of the Site.
  • Resend (USA) — delivery of form submissions to us by e-mail.
  • Upstash Inc. (USA) — rate limiting (IP address, max. 10 minutes).
  • Cloudflare Inc. (USA/global) — domain, network infrastructure, bot verification, and e-mail routing.
  • Proton AG (Switzerland) — the corporate mailbox receiving form messages.
  • Functional Software, Inc. (Sentry) — technical error monitoring and performance measurement; data is hosted in Sentry's European Union (Frankfurt) region.

As these providers operate servers abroad, transfers are carried out subject to the procedures and appropriate safeguards set out in Article 9 of the KVKK.

6. Method of Collection

Your personal data is collected electronically, partly by automated means when you fill in the contact form; transaction security data is collected by automated means through the Site infrastructure.

7. Retention Periods

  • Rate-limiting data (IP): max. 10 minutes.
  • Server access logs: short-term, for technical purposes, at the hosting provider.
  • Form messages: up to 3 years after your request is concluded; if a business relationship is established, for the periods required by applicable law, after which they are deleted.

8. Your Rights (Art. 11 KVKK)

As a data subject you have the right to: learn whether your personal data is processed; request information if it has been; learn the purpose of processing and whether data is used accordingly; know the third parties to whom data is transferred domestically or abroad; request correction of incomplete or inaccurate data; request erasure or destruction under the conditions of Art. 7; request notification of these operations to third-party recipients; object to a result arising against you through analysis exclusively by automated systems; and claim compensation for damages caused by unlawful processing.

You may submit requests to info@temirtech.com in accordance with the Communiqué on Application Procedures to the Data Controller. Requests are concluded free of charge within 30 days at the latest.

9. Changes

This notice may be updated to reflect changes in legislation or in the Site's data processing activities. The current version is always published on this page.