Controller and scope
Sarp Technical Solutions Gemi Donatım Sanayi Ticaret Limited Şirketi (“Company”), İstasyon Mah. Koza Sk. Alara Evleri Sitesi A2 Blok No: 4, Tuzla / İstanbul, Türkiye, provides this notice for individuals using contact, quotation, callback and project-enquiry channels. Data subjects may be customer or supplier representatives, prospective customers and visitors.
Data collected
Information may include name, email, telephone, optional company information, enquiry details, selected products and quantities, delivery needs, project information and necessary processing records. These records include enquiry ID, type, language, time, notice version and notification status. Limited technical security records support abuse prevention and administration access. Sensitive personal data is not requested.
Purposes and legal grounds
Reviewing requirements, preparing quotations and responding to requests may be necessary for establishing or performing a contract under Article 5/2-c of Turkish Law No. 6698. General communication and proportionate security processing are assessed under legitimate interests in Article 5/2-f, subject to fundamental rights. Article 5/2-e applies where establishing, exercising or protecting a right requires processing. Other applicable legal obligations are considered where relevant. An enquiry does not create a marketing subscription or consent to advertising.
Collection and access
Data is obtained electronically when individuals submit forms or contact the Company by email, telephone or WhatsApp. Access is limited to authorised staff and technical service providers within their defined duties. Legally required disclosures may be made to competent authorities or relevant advisers. Personal information is not sold for advertising.
Cloud services and international processing
Cloudflare provides hosting, database, file and security services; Resend is used for email when configured. These services may involve international processing. Following a WhatsApp link also engages that provider’s own terms. Applicable international-transfer grounds and safeguards must be established under Article 9 of the Law. A provider’s general privacy policy does not by itself establish compliance with these requirements.
Retention and security
Information is retained only as necessary for its purpose and applicable obligations. The operational enquiry-retention target is 365 days; this is not a universal legal retention period. Records required for a commercial relationship, legal obligation, dispute or protection of rights are assessed separately. Information is deleted, destroyed or anonymised when relevant grounds cease. Administration uses authentication, roles and access limits, together with session and configuration protections; absolute security of internet transmission cannot be guaranteed.
Rights and requests
Individuals may request information on processing, purposes and recipients; correction; deletion or destruction under applicable conditions; notification of relevant changes to recipients; objection to adverse decisions based exclusively on automated analysis; and compensation for unlawful processing where provided by law. Submit a request through legally permitted methods to İstasyon Mah. Koza Sk. Alara Evleri Sitesi A2 Blok No: 4, Tuzla / İstanbul, Türkiye. Contact: [email protected]. Properly submitted requests are answered as soon as possible and within thirty days, subject to applicable procedure. Do not send passwords or unnecessary sensitive information.
Updates
The notice is reviewed when purposes, providers or data flows change. The notice version and processing time associated with a submitted enquiry remain historical records.