(Privacy Notice on the Processing of Personal Data = Kişisel Verilerin Korunması ve İşlenmesi Aydınlatma Metni)
Data Controller
As Celiksan Paslanmaz, we attach utmost importance to the security and confidentiality of your personal data. Acting as the Data Controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), we have prepared this Information Notice to transparently fulfil our obligations regarding the collection, processing, transfer, and storage of your personal data.
Which Personal Data Is Collected and How?
Our website does not require membership. Your personal data is collected only when you interact with us through the following channels:
- Contact Form: Name, surname, email address, phone number, and your message content.
- Career Application Form: Name, surname, email address, phone number, CV information, and any additional documents you provide.
- WhatsApp Communication: Your mobile phone number and message contents.
- Direct Email: Your email address, message content, and attachments.
- Telephone Calls: Your phone number and the information you share during the call.
- Blog Comments Section: When you wish to comment on blog content, we collect your name, email address, and optionally your website address. Additionally, to prevent unwanted comments, your IP address and browser user agent string are automatically collected.
- Automatic Technical Data:
- Google Analytics: Used site‑wide to analyse visitor traffic. This service collects statistical data such as your IP address (anonymised), browser type, operating system, pages visited, and session duration via cookies.
- YouTube Videos: Some pages contain embedded YouTube videos. When you play a video, YouTube may process your IP address and other data according to its own privacy practices.
For What Purposes Do We Process Your Personal Data?
Your collected personal data may be processed based on the legal grounds set out in Articles 5 and 6 of the KVKK for the following purposes:
- Responding to your requests, suggestions, complaints, and inquiries submitted via the contact form, WhatsApp, or email,
- Evaluating your career applications and carrying out human resources processes,
- Fulfilling your requests for information about our products and services,
- Publishing your blog comments and preventing spam/abuse,
- Transmitting an anonymised hash of your email address to the Gravatar service to display your profile picture (if any) alongside your comment,
- Analysing website visitor traffic anonymously to improve user experience (Google Analytics),
- Enabling embedded video content to function properly (YouTube),
- Storing communication logs to comply with legal obligations and to serve as evidence in potential disputes,
- Ensuring the security of the website and IT systems.
Legal Grounds for Processing
Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK:
- It is directly related to the establishment or performance of a contract (e.g., responding to a service you have requested),
- It is mandatory for the data controller to fulfil its legal obligations,
- Processing is necessary for the establishment, exercise, or protection of a right,
- Processing is necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms (e.g., supervising blog comments, ensuring site security, conducting anonymous traffic analysis).
Where special cases requiring your explicit consent arise (e.g., publishing your optional website address or any marketing‑related processing), your consent will be obtained separately.
Transfer of Personal Data
Your personal data may be transferred, in compliance with Articles 8 and 9 of the KVKK and only to the extent necessary, to:
- Authorised public institutions and organisations, courts, and law enforcement agencies (to fulfil legal obligations),
- The Gravatar service (only an anonymised email hash is transmitted for displaying profile pictures in blog comments),
- Google (Google Analytics) and YouTube service providers (under their respective privacy policies) for traffic analysis and video content,
- Software or consultancy firms engaged for human resources processes,
- Web hosting and infrastructure service providers (only for technical data),
- Business partners or affiliated companies, provided your explicit consent has been obtained.
Your personal data is never sold or rented to third parties for commercial purposes.
Your Rights Under KVKK (Article 11)
Pursuant to Article 11 of the KVKK, you have the right to apply to Celiksan Paslanmaz to:
- Learn whether your personal data is being processed,
- Request information if your data has been processed,
- Learn the purpose of processing and whether your data is used in accordance with that purpose,
- Know the third parties to whom your data has been transferred domestically,
- Request correction of incomplete or inaccurate data and request that such correction be notified to the third parties to whom the data has been transferred,
- Request deletion, destruction, or anonymisation of your data if the reasons for processing no longer exist, and request that this action be notified to the third parties to whom the data has been transferred (you may also request removal of your blog comments under this right),
- Object to any result arising against you through automated analysis of your processed data,
- Claim compensation for damages suffered due to unlawful processing of your data.
How to Contact Us for Requests
You may submit your requests regarding the above‑mentioned rights, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller”, along with documents verifying your identity, by:
- Postal mail: Üçevler Mah. 63. Sk. Nilüfer Ticaret Merkezi No:13 Nilüfer / BURSA
- Email: info@celiksanpaslanmaz.com
- In person: By visiting the above postal address, email.
Your request will be concluded as soon as possible and within 30 (thirty) days at the latest, depending on its nature. If the response is provided in writing or on a physical recording medium, a processing fee may be charged in accordance with Article 7 of the aforementioned Communiqué.
We also provide our Cookie and Privacy Policy.
