Data controller
Under Turkish Personal Data Protection Law No. 6698, the data controller is Enes KERVANKAYA. The electronic contact address is iletisim@nsdij.com, and the telephone and WhatsApp number is 0553 462 05 74.
Categories of personal data
The following categories of data may be processed through the project consultation form.
- Identity: first and last name
- Contact: email address, optional telephone number and contact preference
- Customer transaction: company, industry, requirement, project description and timing
- Transaction security: form start time, source page, referring page and verification records
- Visual and audio records and document information: only when an optional file is uploaded
Purposes of processing
Data is processed to respond to the contact request, assess the requirement and potential project scope, schedule a meeting, maintain record security, prevent duplicate submissions or misuse, and comply with legal obligations.
Method of collection and legal basis
Data is collected electronically through the website form and direct contact channels. Processing is based on being directly related to the establishment or performance of a contract, compliance with the data controller’s legal obligations, and legitimate interests provided that fundamental rights are not harmed. If a separate activity requiring explicit consent arises, consent is obtained separately from this notice.
Recipient groups and purposes of transfer
Data may be shared with technical data processors that host the website or provide database and private file storage services, solely to provide and secure the service. If enquiry notifications are enabled, a summary containing the name, company, contact details, industry, solution type and timing may be processed by a transactional email provider for delivery to the authorised NSDIJ address; detailed descriptions and uploaded files are not attached to notification emails. Data may be transferred to authorised public bodies where legally required. Where an international transfer occurs, the transfer conditions in Article 9 of the Law also apply.
Retention period
Data is retained for the period required to assess the enquiry and maintain any ongoing customer relationship, and afterwards only for applicable statutory retention, limitation and evidentiary periods. When the retention purpose ends, the relevant records are deleted, destroyed or anonymised.
Rights under Article 11 of the KVKK
Data subjects may exercise the following rights.
- To learn whether personal data is processed and, if so, request information about that processing
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom data is transferred in Türkiye or abroad
- To request correction of incomplete or inaccurate data
- To request deletion or destruction under the conditions set out in the Law
- To request notification of correction and deletion operations to third parties to whom the data has been transferred
- To object to an adverse result arising exclusively from automated systems
- To request compensation where damage is suffered due to unlawful processing
How to submit a request
You may send a request concerning your rights to iletisim@nsdij.com with information explaining your identity and request. Additional identity verification information may be requested to protect the security of the application.