Personal Data Protection Policy and Disclosure Text

Disclosure Text Regarding the Processing of Personal Data Within the Scope of the Contact Form

1. Data Controller

Your personal data within the scope of Law No. 6698 on the Protection of Personal Data is processed by the data controller as follows:

iTech Engineering Limited Company
Brand name: iTech Project
Address: Meydan Istanbul Shopping Mall, Balkan St. No:62, 34770 Ümraniye/Istanbul
MERSIS No:
Email: info@itechproject.com
KEP Address:

is processed within the scope explained below.

2. Processed Personal Data

If you use the contact form, the following personal data may be processed:

Identity information: Name and surname
Contact information: Email address and optionally phone number
Request and transaction information: Subject of contact, message content, request, offer or project information
Transaction security information: IP address, form submission date and time, system and security logs
Marketing preferences: Only your communication and marketing preferences if you give separate consent

Please do not write health information, biometric data, criminal conviction information, identity document images, or similar special categories of personal data in the message field.

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

Receiving and responding to your contact request
Providing information about the product, service, or solution you requested
Conducting offer, discovery, consultancy, and project evaluation processes
Contacting you and making necessary directions
Managing customer and prospective customer relationships
Following up on requests and complaints
Conducting information security processes
Preserving evidence and records in case of possible disputes
Responding to lawful requests from authorized institutions and organizations
Conducting promotional, marketing, campaign, and announcement communications only if you give separate explicit consent and commercial electronic communication approval

4. Legal Grounds for Processing Personal Data

Your personal data obtained within the scope of the contact form is processed based on the legal grounds specified in Article 5 of Law No. 6698, depending on the nature of the processing activity:

Being directly related to the establishment or performance of a contract,
Being mandatory for the data controller to fulfill a legal obligation,
Being mandatory for the establishment, use, or protection of a right,
Being mandatory for the legitimate interests of the data controller without harming the fundamental rights and freedoms of the data subject

The legal grounds are relied upon for processing.

Personal data processing activities carried out within the scope of promotional and marketing activities will only be conducted based on the explicit consent you provide separately.

5. Method of Collecting Personal Data

Your personal data may be obtained completely or partially by automatic means or by non-automatic methods as part of a data recording system through:

Contact form on the website,
Electronic mail,
Telephone conversations,
Offer and project meetings,
Website and server logs

6. Transfer of Personal Data

Your personal data may be transferred to the following recipient groups limited to and to the extent necessary for the processing purpose:

Website, server, email, and information technology service providers
Cybersecurity and technical support service providers
Legal, financial advisory, and consultancy service providers
Business partners, manufacturers, suppliers, and authorized service providers necessary to fulfill your request
Legally authorized public institutions, courts, prosecutors, and administrative authorities
Message Management System and message sending service providers if you give commercial electronic communication approval

Transfers will be carried out in accordance with the conditions regulated in Articles 8 and, if necessary, 9 of Law No. 6698.

7. Transfer Abroad

This section should be arranged according to the actual technical infrastructure used.

If no service provider located abroad is used in contact form, electronic mail, customer relationship management, or cloud services:

Your personal data obtained within the scope of the contact form is not regularly transferred abroad.

If a service provider located abroad is used, the following statement should be filled with concrete information:

Your personal data may be processed on systems located abroad provided by [service provider's name] within the scope of [name and purpose of the service]. Such transfers are carried out by fulfilling the appropriate safeguards and transfer conditions specified in Article 9 of Law No. 6698.

8. Retention of Personal Data

Your personal data is retained for the duration required by the purposes of processing and considering the statute of limitations and retention periods stipulated in the legislation to which we are subject.

When the purpose of processing and legal retention obligation ends, your personal data is deleted, destroyed, or anonymized.

Your personal data processed for marketing purposes will not be used in marketing activities if you withdraw your explicit consent or reject commercial electronic communication approval. Limited records necessary for fulfilling legal obligations and proving the rejection may be retained within the scope of relevant legislation.

9. Rights of the Data Subject

Within the scope of Article 11 of Law No. 6698, you have the rights to:

Learn whether your personal data is processed,
Request information if processed,
Learn the purpose of processing and whether it is used accordingly,
Know the third parties to whom it is transferred domestically or abroad,
Request correction if processed incompletely or inaccurately,
Request deletion or destruction within the conditions specified by law,
Request notification of correction, deletion, or destruction to third parties to whom the data has been transferred,
Object to a result against you arising from analysis by automatic systems,
Request compensation for damages in case of loss due to unlawful processing

you have these rights.

10. Application Method

You can submit your requests within the scope of the Law;

In writing and signed to [company's postal address],
Via your registered electronic mail address to [company's KEP address],
Via the email address you previously notified to our Company and registered in our systems to info@itechproject.com,
If available, through the Data Subject Application Form published on the website

You can send.

Your application must include your name, surname, signature if the application is written, Turkish ID number or passport/ID number for foreigners, address for notification, and if available, email and phone information along with the subject of the request.

MARKETING ACTIVITIES EXPLICIT CONSENT TEXT

Explicit Consent Text Regarding the Processing of Personal Data Within the Scope of Marketing Activities

By accepting that I have been informed within the scope of the Contact Form Disclosure Text provided by iTech Engineering Limited Company;

My name, surname, email address, phone number, and communication preferences;

Being informed about iTech Project products and services,
Promotion about security technologies, AI-supported video analytics, CCTV, VMS, thermal imaging, solar security systems, drone solutions, retail analytics, and engineering services,
Sharing events, webinars, campaigns, announcements, and sectoral content,
Managing customer and prospective customer communication processes

I give explicit consent for processing and limited transfer to communication, CRM, and technical service providers for these purposes.

I understand that not giving explicit consent does not prevent me from sending the contact form, receiving information, requesting offers, or benefiting from services.

I know that I can withdraw my explicit consent at any time by applying to info@itechproject.com and that the withdrawal will have prospective effects.