PERSONAL DATA PROCESSING NOTICE
DATA CONTROLLER
[Enter ERBIAS’s registered legal name, business address, contact email and registration details where applicable.] This notice concerns people who submit project requests or contact messages through the website.
CATEGORIES OF PERSONAL DATA
We may process your name, email address, optionally your phone number and organization, project type and scope, budget range, timing, messages, selected requirements and technical security information such as IP addresses, timestamps and access records. Actual processing must be verified against the system’s data inventory.
PURPOSES AND LEGAL BASES
Data is processed to review inquiries, respond to requests and prepare proposals. Depending on the specific processing activity, the legal basis may be necessity for establishing a contract under Article 5/2(c) of Turkish Law No. 6698 (KVKK), legitimate interests under Article 5/2(f) for proportionate security and abuse prevention, or compliance with legal obligations under Article 5/2(ç). Each basis must be verified by the data controller. Marketing communications are not automatically included in this processing.
COLLECTION METHODS
Information is collected through the website forms you complete and, for security purposes, through automated server logs.
DISCLOSURES AND INTERNATIONAL TRANSFERS
Access may be provided to legally authorized public bodies and hosting or technical service providers to the extent necessary. [Specify actual providers, recipient groups and purposes.] Where personal data is transferred abroad, the countries, safeguards and applicable mechanism under Article 9 KVKK must be explained. Do not claim that no transfer occurs without confirming this.
RETENTION AND DELETION
Information is retained only for as long as necessary to respond to requests, address relevant contractual or legal disputes and satisfy applicable legal requirements. [Specify concrete retention periods for inquiries, contact records, consent records and security logs, together with deletion or anonymization procedures.] On expiry, data is deleted, destroyed or anonymized unless a valid legal exception applies.
YOUR RIGHTS AND HOW TO APPLY
Under Article 11 KVKK, you may request information about processing; learn its purpose, recipients and lawful use; request correction or deletion where conditions apply; request notice to relevant third parties; object to certain solely automated decisions; and claim compensation for damage arising from unlawful processing. Contact [official request email and postal address] following applicable statutory procedures.
FINAL REVIEW REQUIRED
Replace all bracketed placeholders before publication. Check this notice against actual data processing, identify concrete retention periods and keep information notices separate from requests for explicit consent.