Legal Notice

Privacy Policy

Last updated: 27 July 2026

ESAYTECH Consulting, Training and Validation Services ("ESAYTECH" or "Company") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and general GDPR principles.

1. Data Controller

  • Company Name: ESAYTECH Consulting, Training and Validation Services
  • Address: Yayla Mah. Gürsel Sk. 35/B, Tuzla / Istanbul, Turkey
  • Email: info@esaytech.info
  • Phone: +90 543 955 71 76

2. Personal Data We Collect and Why

2.1 Contact Form and Consultation Requests

  • Data collected: Full name, email address, phone number, company name, message content
  • Purpose: Evaluating and responding to consulting, training or service requests
  • Legal basis: Performance of a contract or pre-contractual steps (KVKK Art. 5/2(c))

2.2 Contractual Relationship

  • Data collected: Name, title, company details, contact information, billing details
  • Purpose: Delivering consulting and training services, fulfilling contractual obligations, invoicing
  • Legal basis: Performance of a contract (KVKK Art. 5/2(c))

2.3 Website Visitor Data

  • Data collected: IP address, browser type, pages visited, session duration (anonymised/aggregated)
  • Purpose: Website security, technical error monitoring and performance improvement
  • Legal basis: Legitimate interest (KVKK Art. 5/2(f))

2.4 Cookies

We use strictly necessary technical cookies and analytics cookies. You can manage your cookie preferences through your browser settings at any time.

3. Sharing Your Data

Your personal data may be shared with the following parties only to the extent necessary:

  • Service providers: Web hosting (Vercel), email delivery (FormSubmit) and cloud infrastructure providers — solely for service delivery
  • Legal obligations: Competent public authorities where required by applicable law
  • Accounting and legal advisors: Subject to professional confidentiality obligations

International data transfers are carried out to countries with an adequate level of protection or on the basis of the data subject's explicit consent, in accordance with KVKK Article 9.

4. Retention Periods

  • Contact form data: Up to 2 years from the request (if no contract is concluded)
  • Contract-related data: 10 years after the contract ends (Turkish Commercial Code)
  • Invoicing and accounting data: 10 years (Tax Procedure Law)
  • Website log data: Up to 2 years

Once retention periods expire or the processing purpose ceases to exist, personal data is deleted, destroyed or anonymised.

5. Your Rights

Under KVKK Article 11 you have the right to:

  • Know whether your personal data is being processed
  • Request information about the processing if it is taking place
  • Know the purpose of processing and whether data is used in line with that purpose
  • Know the third parties to whom your data is transferred, domestically or abroad
  • Request correction of incomplete or inaccurate data
  • Request deletion or destruction of your data under the conditions set out in KVKK Article 7
  • Request that correction or deletion be notified to third parties to whom your data was transferred
  • Object to a result that is detrimental to you arising solely from automated processing of your data
  • Claim compensation for damages caused by unlawful processing of your data

How to Submit a Request

  • Email: info@esaytech.info (subject: "Privacy Request")
  • Post: Yayla Mah. Gürsel Sk. 35/B, Tuzla / Istanbul, Turkey (signed letter)

Please include documents verifying your identity. Requests are responded to within 30 days in accordance with KVKK Article 13.

6. Data Security

  • SSL/TLS encryption for all data in transit
  • Access controls and authorisation mechanisms
  • Staff confidentiality commitments and KVKK awareness training
  • Data processing agreements with third-party service providers

7. Changes to This Policy

This Privacy Policy may be updated to reflect legal changes or updates to our business processes. The latest version is always available at www.esaytech.com.tr/privacy-policy.

This policy was prepared in accordance with Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Principles and Procedures for Fulfilling the Obligation to Inform.