Legal informationThis English version is provided for information only. If it differs from the Turkish version, the Turkish text prevails.
This notice is provided under Article 10 of Law No. 6698 on Personal Data Protection and the Communiqué on the Duty to Inform. It applies to visitors, prospective clients and other people whose data is processed through the website, contact, quotation and preliminary project discussions.
Data controller and website operator
Ataklar Kimya İnşaat Demir Çelik Sanayi ve Ticaret Limited Şirketi
Ataklar İnşaat · Ataklar Group
Business address
İkitelli OSB Mahallesi, Esenler Sanayi Sitesi 3. Blok Apt. No: 2, Başakşehir / 34480 İSTANBUL
1. Identity of the data controller
The data controller is Ataklar Kimya İnşaat Demir Çelik Sanayi ve Ticaret Limited Şirketi, whose contact information appears above. Ataklar İnşaat and Ataklar Group are trade names used by the company on this website.
2. Personal data and purposes
Identity and contact — name, company, phone and e-mail
Identify the person making the enquiry, contact you, direct the request to the correct team, arrange a survey or quotation and manage the client relationship.
Enquiry and project — service, area, location, message and source page
Understand requirements, assess a suitable flooring system, plan a site survey, prepare a quotation and keep the history of the request.
Security — IP, time, device or browser signals, logs and Turnstile token
Protect forms, prevent spam and automated attacks, investigate technical faults and manage information-security incidents.
Legal and correspondence — applications, e-mails, replies and related records
Comply with legal duties, respond to applications and establish, exercise or protect legal rights.
3. Collection methods
You provide data through the contact or quotation form, e-mail, telephone and other direct communications. Technical and security data may be collected wholly or partly by automated means through the website server, security systems and Cloudflare Turnstile when you use the website or a form.
4. Legal grounds
- Article 5(2)(c): processing is necessary and directly related to entering into or performing a contract.
- Article 5(2)(ç): processing is necessary for the controller to comply with a legal obligation.
- Article 5(2)(e): processing is necessary to establish, exercise or protect a right.
- Article 5(2)(f): processing is necessary for the controller's legitimate interests, provided your fundamental rights and freedoms are not prejudiced.
The checkbox confirming that you have read this notice records that information has been provided; it is not explicit consent. If a separate activity cannot rely on the grounds above and requires explicit consent, consent will be requested separately and may be withdrawn.
5. Recipients and transfers
Data may be disclosed, only as necessary for the stated purposes, to authorised staff, e-mail and hosting providers, IT and cyber-security suppliers, legal or financial advisers where needed, and legally authorised public bodies.
Cloudflare Turnstile secures the forms. Google Maps and YouTube may process limited technical data when their content is used. Where processing involves an international transfer, the conditions and appropriate safeguards in Article 9 of Law No. 6698 apply. Personal data is not sold for advertising.
6. Retention and deletion
Data is not kept longer than the purpose, statutory retention period or limitation period requires. General enquiries are normally retained for three years after closure; records that become part of a contract or project for normally ten years after the relationship ends; security logs for normally twelve months; and KVKK applications for three years after conclusion. A continuing dispute or specific legal duty may require a different period.
At the end of the period, data is deleted, destroyed or anonymised by an appropriate method.
7. Your rights under Article 11
- Learn whether your personal data is processed and request information if it is.
- Learn the purpose of processing and whether the data is used in accordance with that purpose.
- Know the third parties in Türkiye or abroad to whom data is transferred.
- Request correction of incomplete or inaccurate data.
- Request deletion or destruction where the statutory conditions are met.
- Request that correction, deletion or destruction be notified to recipients.
- Object to a result against you produced exclusively by automated analysis.
- Claim compensation if unlawful processing causes damage.
8. Applications and response periods
An application should include your name, signature for a written application, Turkish ID number for citizens or nationality and passport or identity number for non-citizens, address for notices, available e-mail and telephone details, and the subject of the request. We may ask only for information necessary to verify identity.
You may apply in person or in writing to the business address stated above; by registered electronic mail, secure electronic signature or mobile signature; or, if it is already registered in our systems, from your e-mail address to info@ataklarinsaat.com with “KVKK Data Subject Application” in the subject line.
Applications are answered free of charge as soon as possible and no later than 30 days. A fee in the Board's tariff may apply where the process has an additional cost. If the response is inadequate, rejected or late, you may complain to the Personal Data Protection Board within 30 days of learning the response and in any event within 60 days of the application.
9. Updates to this notice
We update this notice when processing activities or the law changes. If a purpose changes, a further notice is provided before processing begins for that new purpose. The current version and revision date are published on this page.