Privacy notice (KVKK)

Data controller

The data controller is UpcyTech Teknoloji A.Ş.: Reşitpaşa Mah. Katar Cad. İTÜ Tasarım ve Prototip Merkezi Binası No: 2/41 İç Kapı No: 19, 34467 Sarıyer / İstanbul, Türkiye. MERSİS number 0893064578500001.

You can reach the data controller at [email protected].

Personal data we process

What you share in the contact form: full name, company, work email, topic, message, and the time KVKK consent was given. It is sent over SMTP to the company's mailbox; it is not stored on the site or in a database.

When you choose to show the map, your IP address is sent to the map provider (CARTO). Without that click, no map request is made.

Once you consent, an anonymous identifier is kept for analytics. Your theme preference, language and cookie choice live in the browser's localStorage, are never sent to a server, and are not processed as personal data.

Why we process it

We process data to answer your questions and run pre-contract communication; to improve the site and the services; to keep things secure; and to meet legal obligations.

Who we share it with

We do not share your personal data with third parties without your explicit consent, except where required by law. Where sharing happens, we take the necessary measures to protect your data.

Your form message goes to the company's mailbox. If you open the map, your IP address goes to CARTO; if you accept analytics, your anonymous identifier goes to the PostHog server in the EU region (eu.i.posthog.com). Data may be shared with competent authorities where a legal obligation arises.

How we collect it, and the legal basis

Data is collected electronically through the contact form, the map click, and the consent choice.

The legal bases are: pre-contract communication and explicit consent for form messages; explicit consent for analytics; legitimate interest for security records; legal obligation for disclosures to competent authorities.

Your rights (KVKK Article 11)

To learn whether your data is processed and to request information where it is; to learn why it is processed and whether it is used accordingly; to know the third parties it is shared with at home and abroad.

To have incomplete or inaccurate data corrected; to have it deleted or destroyed where the conditions are met; to have those actions notified to the third parties it was shared with.

To object to a result against you produced solely by automated analysis; to claim compensation where unlawful processing caused you loss.

How to make a request

To exercise these rights, write to [email protected] with a statement identifying you, or apply in writing to our registered address.

Requests are answered free of charge within 30 days at the latest. Where the process incurs separate cost, the fee in the Personal Data Protection Board's tariff may apply.