Privacy Notice on the Processing of Personal Data

1. Data Controller

The data controller is Rohan Çelik Yapı Mühendislik Sanayi ve Ticaret Limited Şirketi (the “Company”).

MERSİS No: 0735223099900001

Address: Kömürcüler Sanayi Sitesi 2877 Sk. No:106 Döşemealtı/Antalya

E-mail: [email protected]

2. Personal Data Processed

• Identity: full name.
• Contact: e-mail address, phone number (optional).
• Professional information: company name, country, structure types you are interested in and your message (optional).
• Consent records: your statement that you have read this notice, your explicit consent to transfer abroad, the notice version and the time of consent; the site language you chose.
• Transaction security: the IP address from which you submitted the form, the country derived from that IP address, the submission time and the result of the security check (Cloudflare Turnstile) used to prevent automated submissions.
• Site usage data (Google Analytics): pages visited, referring address, interactions on the page, browser and device information, approximate location (country / city) derived from the IP address and, if you accepted cookies, the random identifier in the analytics cookies.

3. Purposes of Processing

• Creating and managing the waitlist,
• Contacting you by e-mail or phone for beta access and account opening,
• Planning our products and services by assessing interest in each structure type,
• Preventing misuse of the form (automated / spam submissions) and ensuring information security,
• Measuring how the site is used and improving it,
• Fulfilling legal obligations and providing information to competent authorities.

4. Method of Collection and Legal Grounds

Your personal data is collected electronically, by automated means, through the form on this site and the measurement tool (Google Analytics) that runs while you visit it. It is processed on the following legal grounds:

• KVKK Art. 5/2-c: processing is necessary for the establishment or performance of a contract, provided it is directly related to it (handling your request for beta access),
• KVKK Art. 5/2-ç: processing is necessary for the data controller to fulfil its legal obligations,
• KVKK Art. 5/2-f: processing is necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms (keeping track of entries, transaction security).

The use of analytics cookies is based on the explicit consent you give in the cookie banner (KVKK Art. 5/1); if you decline, the cookieless measurement signals that are sent fall under Art. 5/2-f (legitimate interest). Transfer abroad is based on your explicit consent, as explained in section 6 below.

5. Domestic Transfers

Your personal data may be shared, only for the purposes above and to the extent necessary, with the service providers from whom we obtain hosting for the site and the database and e-mail services. It may also be disclosed to competent public authorities when required by law.

6. Transfers Abroad

The site traffic, the form’s security check and the database holding the entries run on service providers whose servers are located outside Türkiye:

• Cloudflare, Inc. (USA): delivering and protecting the site and the Turnstile security check. Your IP address and browser and device information are processed for this.
• MongoDB, Inc. (MongoDB Atlas): the database service where form entries are stored.
• Google LLC (USA): measuring site usage with Google Analytics.

The identity, contact, professional and transaction security data you provide are transferred to these providers on the basis of your explicit consent under KVKK Art. 9. Without that consent the form cannot be submitted; you can also join the waitlist by writing to [email protected]. You may withdraw your consent at any time by writing to the same address, in which case your entry is deleted.

Site usage data collected by Google Analytics is transferred to Google LLC on the basis of the explicit consent you give by choosing “Accept” in the cookie banner. If you choose “Decline”, no cookies are used and Google only receives limited measurement signals without cookies or persistent identifiers (page, time, browser information and consent status). You can change your choice at any time with the “Cookie settings” link at the bottom of the page.

7. Cookies

The site uses no advertising cookies. The cookies used are:

• “karkas_lang” (1 year): remembers the language you chose. A strictly necessary preference cookie.
• “karkas_consent” (6 months): remembers your choice in the cookie banner. A strictly necessary preference cookie.
• “_ga” and “_ga_…” (Google Analytics, 2 years): set only if you choose “Accept” in the cookie banner; they carry a random identifier used to tell visits apart. They are deleted if you withdraw your consent.

Cloudflare may process technical data strictly necessary for the security check and for protecting the site. You can change your choice with the “Cookie settings” link at the bottom of the page.

8. Retention

Your waitlist entry is kept for as long as the waitlist purpose continues or until you ask for it to be deleted. When the purpose ceases or upon your request it is deleted, destroyed or anonymised. IP-based attempt counters kept to prevent misuse of the form are deleted automatically within 24 hours. Measurement data in Google Analytics is deleted at the end of the period set in the Google Analytics data retention setting (at most 14 months).

9. Your Rights

Under Article 11 of KVKK you may apply to the Company to:

• learn whether your personal data is processed,
• request information if it has been processed,
• learn the purpose of processing and whether it is used for that purpose,
• know the third parties in Türkiye or abroad to whom it is transferred,
• request correction if it is incomplete or inaccurate,
• request deletion or destruction under the conditions in Article 7 of KVKK,
• request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
• object to a result against you arising from analysis exclusively by automated systems,
• claim compensation for damage arising from unlawful processing.

10. Applications

You may submit requests regarding your rights in writing to the address above, or from the e-mail address you registered with to [email protected], in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are concluded free of charge as soon as possible and within thirty days at the latest.