Personal Data Protection Notice — Sedan Mühendislik

1. Identity of the data controller

Under the Kişisel Verilerin Korunması Kanunu (KVKK), Law no. 6698, your personal data is processed, as data controller, by SEDAN Mühendislik Elektrik Mekanik San. ve Tic. Ltd. Şti. ('Sedan Mühendislik' or the 'Company'), within the scope described below.

Address: Çengelköy Mh. Kalantor Sk. No: 19/A, Üsküdar / İstanbul.

E-mail: info@sedan.com.tr

2. Categories of personal data processed

Our website has no account and no newsletter sign-up. Your personal data is processed in three situations.

When you fill in the quote form or contact us by phone or e-mail, to the extent you share it with us:

Identity data: full name
Contact data: phone number and/or e-mail address
Occupational/transactional data: company name, facility or system details, the subject of your request, the content of your message, and any documents attached to the form or to your e-mail (for example a specification or a project drawing)

When you visit our website, technically, while the Site is delivered to you:

Transaction security data: IP address, browser and device information, the page requested and the time of access

When you submit the quote form, to protect the form against automated (bot) submissions:

Transaction security data: IP address, browser information and technical properties of the connection (assessed by Cloudflare Turnstile)

3. Purposes of processing

Your personal data is processed only for the following purposes:

Evaluating the request you send through the quote form, by phone or by e-mail, preparing a quote and, where needed, planning a site survey
Sending you the prepared quote and our reply to your request, and contacting you in connection with it
Confirming, by an automatic e-mail to the address you typed in the form, that your quote request has been received
Delivering the website to you and protecting it and the quote form against automated submissions and misuse (for technical data)

Your personal data is not used for any purpose beyond those listed above — for example, to build a marketing list or to share with third parties.

4. Legal basis

Your personal data is processed on the legal grounds set out in Article 5 of the KVKK:

Information you share through the quote form, by phone or by e-mail: because preparing the quote you requested is directly related to the establishment of a contract (KVKK Art. 5/2-c), and because replying to your request falls within the Company's legitimate interest (KVKK Art. 5/2-f)
Technical data of a site visit and of form security: the Company's legitimate interest in delivering the Site and the form securely (KVKK Art. 5/2-f)

No separate explicit consent is obtained for this processing. The checkbox on the quote form is there for you to confirm that you have read this notice.

5. Method of collection

Your personal data is provided directly by you, verbally or electronically, when you fill in the quote form, call us or send us an e-mail.

Information you send with the quote form is delivered as an e-mail to info@sedan.com.tr, through the infrastructure that hosts the Site.

The technical data of a site visit is obtained automatically, through the requests your browser sends to the Site, by the infrastructure that hosts the Site.

The Site contains no database that records form data; the content of the form is only delivered as an e-mail.

6. Transfer of personal data

Information you share through the quote form, by phone or by e-mail may be seen only by authorised persons within the Company, for the purpose of handling your request.

Quote form submissions are delivered to info@sedan.com.tr; files you attach to the form are sent as attachments to that e-mail.

After the form is submitted, an automatic confirmation e-mail is sent from form@sedan.com.tr to the e-mail address you typed in the form, stating that your request has been received. That e-mail contains only a fixed notice; it does not contain the information you entered in the form.

Information you send by e-mail and through the quote form is stored on the servers in Türkiye of DorukNet, the Türkiye-based provider of the sedan.com.tr e-mail service.

The website is hosted on Cloudflare's infrastructure. When you visit the Site, your IP address and the technical details of the request are processed by Cloudflare in order to deliver the Site to you and to keep it secure.

Information you send with the quote form passes through Cloudflare's infrastructure while it is delivered as an e-mail; Cloudflare does not store it.

Cloudflare Turnstile, used on the form, assesses your IP address and browser information to tell automated submissions apart. According to Cloudflare's own notice, Cloudflare may also process these technical signals on its own behalf to improve the Turnstile service.

Cloudflare is a service provider established abroad.

These transfers to Cloudflare are carried out in accordance with the conditions set out in Article 9 of the KVKK.

Your personal data is not transferred to any third party, institution or organisation beyond those stated above; it is not sold and is not shared for marketing purposes.

7. Retention period

Your personal data is retained for as long as required by the purpose of processing, subject to the limitation periods set out in applicable legislation; at the end of that period it is deleted, destroyed, or anonymised.

Correspondence and documents relating to requests that lead to a contract: 10 years, the period set for commercial books and documents by Article 82 of the Turkish Commercial Code and for the general limitation period by Article 146 of the Turkish Code of Obligations
Requests that stay at the quotation stage and do not lead to a contract: for as long as evaluating and answering the request requires; they are deleted once that purpose no longer applies

8. Data security

The Company takes appropriate technical and administrative measures to prevent the unlawful processing of the personal data it holds and unlawful access to it, and to ensure the data is properly safeguarded.

The Site contains no database that records form data; the content of the form is only delivered as an e-mail and is not stored on the Site.
The confirmation e-mail is limited against misuse (one e-mail to the same address within a short time); for this limit the e-mail address is not recorded, only a hash of it is held briefly in memory.
The quote form is protected against automated submissions by Cloudflare Turnstile and a submission limit.
The Site is served over an encrypted connection (HTTPS).
Access to the e-mail server uses an encrypted connection (TLS).
Only authorised employees can access the e-mail accounts and request correspondence.

9. Your rights under KVKK Article 11

Under Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:

To learn whether your personal data is being processed
To request information about it, if it has been processed
To learn the purpose of processing and whether the data is used in accordance with that purpose
To know the third parties, in Turkey or abroad, to whom the data is transferred
To request correction if the data has been processed incompletely or inaccurately
To request deletion or destruction within the conditions set out in Article 7 of the KVKK
To request that correction, deletion and destruction be notified to the third parties to whom the data was transferred
To object to a result that is to your detriment arising from analysis of the processed data exclusively through automated systems
To claim compensation for damage arising from unlawful processing

10. How to apply

You may submit requests concerning the rights above, together with information and documents verifying your identity, by e-mail to info@sedan.com.tr, or in writing to Çengelköy Mh. Kalantor Sk. No: 19/A, Üsküdar / İstanbul.

The Company concludes your request as soon as possible, according to its nature, and within the maximum period allowed by law.