1. Data controller
Koza Teknoloji is the data controller for personal data processed through visits to kozateknoloji.com and contact requests. This notice explains our processing activities under Turkish Personal Data Protection Law No. 6698 (“KVKK”).
- Brand
- Koza Teknoloji
- [email protected]
2. Data we collect and how
When you contact us we process your name, email address, your brand or company name if you share it, the solution you are interested in and the information in your message. This data is obtained electronically through the emails you send us and any ongoing correspondence.
When you submit the contact form, the details you enter are sent to the site’s server and emailed to [email protected]. The form content is not stored in a website database; it exists only in our mailbox. To prevent abuse, a one-way digest of your connection address is kept temporarily for up to one hour during submission.
When you access the site, technical data such as your IP address, the requested page, access time and browser information is passed to our hosting infrastructure and may appear in access and security logs kept by that infrastructure.
3. Purposes and legal bases
To assess your project needs, prepare proposals and conduct contract discussions, your contact and request details are processed where directly related to the formation or performance of a contract (KVKK Art. 5/2-c).
To answer general questions and continue communication, we process identity, contact and message data; to keep the site secure and investigate abuse, we process technical access logs under legitimate interests (Art. 5/2-f), without harming your fundamental rights and freedoms.
Information needed to answer legal requests and meet obligations toward authorities is processed under Art. 5/2-ç; records needed to establish, exercise or protect a legal right are processed under Art. 5/2-e. Contacting us does not mean you have consented to commercial electronic messages.
4. Transfers
Your contact details and correspondence are shared with email service providers to deliver and store messages, and technical access data is shared with hosting and infrastructure providers to operate and secure the site, to the extent the service requires. Where a legal obligation or a duly issued request exists, necessary information is passed to competent public authorities and courts.
Transfers observe Articles 8 and 9 of KVKK; where a service requires a transfer abroad, no transfer is made unless the conditions and safeguards in those articles are met.
5. Retention
Data is kept for as long as needed to conclude your request, run an ongoing business relationship, and meet applicable legal retention duties and limitation periods. Once the reasons for processing end, data is deleted, destroyed or anonymised unless another legal retention duty applies.
6. Your rights
Under Article 11 of KVKK you may learn whether your data is processed, request information about it, learn the purpose and whether it is used accordingly, and know the third parties it is transferred to in Türkiye or abroad.
You may request correction of incomplete or inaccurate data, deletion or destruction where legal conditions are met, and notification of these actions to recipients. You may object to an outcome against you produced solely through automated analysis and request compensation for damage caused by unlawful processing.
7. Applications and contact
Send requests about your rights in writing to [email protected]. Other application methods in the Communiqué on Procedures and Principles of Application to the Data Controller remain available. Your request should state clearly what you ask and include enough information to verify your identity; we may ask for more information where necessary.
Requests are answered as soon as possible and within 30 days at the latest, depending on their nature. The process is generally free of charge; if it requires extra cost, the tariff set by legislation may apply.