Personal data notice

This English translation is provided for information only. In case of any discrepancy, the Turkish text prevails.

Last updated: [DD.MM.YYYY]

1. Data controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by [Mutaco's registered legal name] ("Mutaco") as the data controller, within the scope described below.

  • Address: [full address]
  • Email: [email address]
  • Website: mutacodigital.com

2. Personal data we process

  • Identity and contact details: Full name, email address, phone number, company name, job title
  • Request details: The content of messages and project details you send through our contact and quote forms, or by WhatsApp and email
  • Transaction security data: IP address, browser and device information, date and time of visit
  • Cookie data: Data obtained through the cookies described in our Cookie Policy

3. Purposes of processing

  • Responding to your quote and information requests and getting in touch with you
  • Concluding and performing a service contract
  • Keeping the website secure and fixing errors
  • Fulfilling legal obligations
  • With your explicit consent: sending campaigns, announcements and newsletters; measuring visits for analytics

4. Legal grounds

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

  • Being directly related to the conclusion or performance of a contract (Art. 5/2-c)
  • Enabling the data controller to fulfil its legal obligations (Art. 5/2-ç)
  • The legitimate interest of the data controller, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f)
  • Your explicit consent for marketing communications and non-essential cookies (Art. 5/1)

5. How data is collected

Your personal data is collected electronically through the contact and quote forms on the website, email, phone, WhatsApp and our social media accounts, as well as through cookies.

6. Transfers

Limited to the purposes above, your personal data may be transferred to:

  • the hosting (server), email and software service providers we use,
  • authorised public institutions and organisations, upon request.

[If any of the service providers used has servers abroad (e.g. email, analytics or form services), this must be stated here together with a basis that meets the conditions for transfers abroad in Article 9 of the KVKK. Confirm with your lawyer.]

7. Retention period

Your personal data is kept for as long as the purpose of processing requires and for the periods set out in the relevant legislation; when that period ends, it is deleted, destroyed or anonymised. [E.g. 2 years for quote requests that did not proceed; the statutory retention periods for customers with a contract. Confirm the periods.]

8. Your rights

Under Article 11 of the KVKK, you have the right to:

  • learn whether your personal data is being processed,
  • request information about it if it has been processed,
  • learn the purpose of processing and whether it is used in line with that purpose,
  • know the third parties in Türkiye or abroad to whom it has been transferred,
  • request correction if it is incomplete or inaccurate,
  • request its deletion or destruction under the conditions in Article 7 of the KVKK,
  • request that correction, deletion and destruction be notified to the third parties to whom the data was transferred,
  • object to a result against you arising from the analysis of the processed data exclusively by automated systems,
  • claim compensation if you suffer damage due to unlawful processing.

9. Applications

You can submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

  • to [email address], from the email address registered in our system,
  • or in writing to [full address].

Your request will be concluded free of charge within 30 days at the latest; if the process requires an additional cost, the fee schedule set by the Personal Data Protection Board may apply.