1. Data Controller
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by TechLink Yapay Zeka ve Yazılım Teknolojileri Limited Şirketi (“TechLink”, “Company”, “we”) as the data controller within the scope described below.
Contact: [email protected] | Bilişim Vadisi - Ayazağa Mah. Kemerburgaz Cd. D:7C Blok, Sarıyer/İstanbul | https://www.techlink.com.tr
2. Personal Data We Process
When you visit our website, submit a contact form, or use our services, the following personal data may be processed:
- Identity data: first name, last name
- Contact data: email address, phone number
- Message / request content and service of interest
- Transaction security data: IP address, browser information, access time, cookie records
- Marketing preferences: cookie consent status (necessary / analytics / marketing)
3. Purposes of Processing
Your personal data is processed for the following purposes:
- Receiving, assessing and responding to contact requests
- Managing demo, proposal and discovery-call processes
- Managing pre-contract and post-contract customer relationships
- Ensuring website security and preventing abuse
- Complying with legal obligations and resolving disputes
4. Legal Bases
Your personal data is processed based on the legal grounds set out in Articles 5 and 6 of the KVKK:
- Your explicit consent (analytics cookies, commercial electronic messages, and transfers abroad)
- Necessity for establishing or performing a contract
- Explicitly provided by law and fulfilment of our legal obligations
- Necessity for our legitimate interests (site security, service quality)
5. Cookies
Necessary cookies are used for site functionality. Analytics and marketing cookies are enabled only with your consent. You may change your preference via the cookie banner (clearing browser data will show the banner again).
- Necessary cookies: session, security, language preference, form protection (Turnstile)
- Analytics cookies: anonymous usage statistics (e.g. Google Analytics) — with consent
- Marketing cookies: campaign measurement — with consent
6. Data Transfers
Your personal data may be shared with the following parties in line with the purposes above and applicable law:
- Hosting, email and cloud infrastructure providers
- Security and bot-protection services (e.g. Cloudflare Turnstile)
- Competent public authorities where legally required
- Legal advisors and auditors under confidentiality obligations
Email delivery, Cloudflare Turnstile, Microsoft Teams meetings, and the Calendly scheduling widget on the contact page may run on servers located abroad. Google Analytics loads only if you accept it on the cookie banner, and in that case data is also sent abroad. These are transfers abroad under KVKK article 9. The contact form asks for this transfer with a separate checkbox that is not pre-ticked and is distinct from the privacy notice. Analytics transfers happen only if you accept them separately on the cookie banner.
7. Retention Period
Personal data is retained for as long as required by the processing purpose and applicable limitation/retention periods. Afterwards, data is deleted, destroyed or anonymized.
8. Your Rights under KVKK Article 11
Under Article 11 of the KVKK, you have the right to:
- Learn whether your personal data is processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom data is transferred domestically or abroad
- Request correction of incomplete or inaccurate data
- Request deletion/destruction under the conditions in the KVKK and notification of third parties to whom data was transferred
9. How to Apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may apply as follows. After identity verification, applications are concluded free of charge within 30 days; if the process incurs an extra cost, the Board’s tariff may apply.
If your request is rejected, the response is insufficient, or no timely reply is given, you may lodge a complaint with the Personal Data Protection Board.
- You may send a wet-signed written application, with documents that identify you, to the registered office (Bilişim Vadisi - Ayazağa Mah. Kemerburgaz Cd. D:7C Blok, Sarıyer/İstanbul) by post or notary.
- You may email [email protected] from an address already registered in our systems. A message from an unregistered address requires separate identity verification.
- The application must state your name, contact details, and the request clearly. No KEP address is published in this notice; a KEP application can be used once an address is announced.
10. Security
We apply technical and organizational measures (access control, encryption, secure communication, logging) to protect personal data against unauthorized access, loss or misuse. No system is 100% secure; we follow industry-standard safeguards.
11. Changes
This notice may be updated due to legal or operational changes. The current version is always published on this page.
Data Controller Contact: [email protected]
This notice is for information purposes; seek legal advice for specific situations.