Last updated: 2026-08-04
This notice is issued by Oditron Teknoloji A.Ş., acting as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), whose principles are aligned with the GDPR.
1. Data Controller
- Entity: Oditron Teknoloji A.Ş.
- Address: Üniversiteler Mh. 1597. Cd. No: 3/27 Çankaya/ANKARA, Türkiye
- Email: info@oditron.com
- Phone: +90 (312) 911 15 63
2. Personal Data We Process
a) Through the contact form: first name, last name, email address, phone number, company name, the contents of your message and your preference as to whether you wish to receive promotional messages.
b) Through direct email or phone contact: the identity and contact details you share and the content of the conversation.
c) Automatically during your visit: technical log records kept by our hosting infrastructure — IP address, request time, browser and operating system information. These records are kept for the operation and security of the site and are not used for marketing.
No profiling or automated decision-making is carried out on this site.
3. Method of Collection
Your personal data is collected by wholly or partly automated means, in electronic form, when you complete the contact form on oditron.com or contact us by email or telephone.
4. Purposes of Processing
- Responding to your enquiries, questions and requests for quotations,
- Managing solution evaluation, pre-sales and partnership processes,
- Managing pre-contractual discussions and customer relations,
- Operating information security processes and system records,
- Sending promotional, campaign and update messages where you have given explicit consent.
5. Legal Bases
| Processing | Legal basis under KVKK |
|---|---|
| Responding to enquiries, quotation and partnership discussions | Art. 5/2-c — directly related to the conclusion or performance of a contract |
| Managing corporate communication and customer records | Art. 5/2-f — legitimate interests of the data controller |
| Keeping log records, information security | Art. 5/2-ç — compliance with a legal obligation |
| Promotional and update messages | explicit consent (Art. 5/1) — you may withdraw it at any time |
6. Transfers
Your personal data may be transferred, strictly for the purposes above, to the suppliers we use for hosting, form delivery and email services, and to competent public authorities where legally required. Your personal data is never sold or rented to third parties for marketing.
International transfers (KVKK Art. 9): the following providers operate servers outside Türkiye. These transfers are necessary for the delivery of the service and are carried out in accordance with the conditions set out in Article 9:
| Service | Provider | Data transferred |
|---|---|---|
| Website hosting | Netlify | Technical log records |
| Contact form delivery | Web3Forms | The information you submit in the form |
| Corporate email | Microsoft 365 | Correspondence content and contact details |
| Embedded map (Contact page) | Google Maps | Technical data your browser sends to Google when the map is displayed |
7. Retention
Your personal data is retained for as long as the purpose of processing requires and, after that, for the statutory limitation periods provided by applicable law. At the end of these periods the data is deleted, destroyed or anonymised. Processing based on explicit consent stops when you withdraw your consent.
8. Your Rights (KVKK Art. 11)
As a data subject you have the right to:
- Learn whether your personal data is being processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether the data is used accordingly,
- Know the third parties in Türkiye or abroad to whom the data has been transferred,
- Request rectification of incomplete or inaccurate data,
- Request erasure or destruction under the conditions set out in Article 7,
- Request that rectification, erasure and destruction be notified to third parties to whom the data has been transferred,
- Object to a result to your detriment arising solely from automated analysis of the data,
- Claim compensation for damage arising from unlawful processing.
9. How to Apply
In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests:
- To info@oditron.com from the email address registered in our records,
- By secure electronic signature or mobile signature,
- In writing to the address above (in person or through a notary public).
Your application should state your name and surname, your signature if submitted in writing, your Turkish ID number (nationality and passport number for foreign nationals), your address for notification, your phone and email if any, and the subject of your request.
Applications are concluded free of charge within 30 days at the latest, depending on the nature of the request; where the process incurs an additional cost, the fee set out in the Board's tariff may be charged. If your application is rejected or not answered in time, you retain the right to lodge a complaint with the Personal Data Protection Board (Art. 14).