This policy explains how your personal data is processed when you visit www.iksap.com and use the forms on the site. It is issued under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). If you are in the European Union, your additional rights under the General Data Protection Regulation ("GDPR") are set out in section 10.
1. Data controller
İKSAP Bilişim Teknoloji Hizmetleri Tic. Ltd. Şti. ("IKSAP")
İçerenköy Mah. Ali Nihat Tarlan Cad. Şakir Bey Sk. No:3 Kat:4 D:5, 34752 Ataşehir / İstanbul, Türkiye · Phone: +90 216 316 28 64 · Email: info@iksap.com
2. What personal data we process
| Where | Data processed |
|---|---|
| Contact form | name, email, company, phone, your message, the page you sent it from and the time |
| Job application form | first name, last name, email, phone, your message, the CV you upload and the information in it |
| Email newsletter | email address, language, the page you subscribed from, the consent text and the time of consent |
| Site usage (only with your consent) | pages visited, time on site, device and browser details, approximate location, identifiers set by the site |
| Security | IP address and technical signals used to assess whether a form submission is automated |
We do not ask for special categories of personal data (health, religion, trade-union membership, etc.). Please do not include such information in your CV.
3. Purposes and legal bases
| Purpose | Legal basis (KVKK Art. 5 / GDPR Art. 6) |
|---|---|
| Replying to your inquiry or request for a proposal | steps prior to entering into a contract · legitimate interest |
| Assessing your job application and contacting you | steps prior to entering into a contract |
| Sending the newsletter | consent: given via the checkbox and withdrawable through the link in every issue |
| Measuring and improving site usage (analytics cookies) | consent: given by choosing "Accept all" in the cookie banner |
| Protecting forms against abuse and automated submissions | legitimate interest |
| Meeting legal obligations and responding to legal claims | legal obligation · establishment, exercise or defense of legal claims |
4. Who we share your data with
- Our service providers: our website hosting provider and our corporate email service provider.
- Google (Google Analytics 4 and reCAPTCHA): Google Analytics only if you consent to analytics cookies; reCAPTCHA for form security.
- Competent public authorities: only where required by law.
We do not sell or rent your data to third parties for marketing.
5. International transfers
When Google Analytics, reCAPTCHA and our corporate email service are used, data may be processed on the providers' servers outside Türkiye. These transfers are made in line with the safeguards set out in KVKK Art. 9 (such as standard contracts) and, for analytics cookies, also on the basis of your consent. If you do not consent to analytics cookies, Google Analytics is not loaded.
6. Retention
| Data | Where and for how long |
|---|---|
| Contact form records | in our website database and corporate email system; 2 years after your inquiry is closed |
| Job applications and CVs | in our website database and server and in our corporate email system; 1 year from the application (longer only with your consent) |
| Newsletter subscription | for as long as you are subscribed; after unsubscribing, only the consent and withdrawal record, for 3 years |
| Analytics data | 14 months in Google Analytics |
When the period ends, data is deleted, destroyed or anonymized.
7. Cookies
The site uses strictly necessary cookies and, only with your consent, analytics cookies. We do not use advertising or retargeting cookies. See the Cookie Policy for details. You can change your choice at any time via the Cookie settings link at the bottom of the page.
8. Your rights under KVKK (Art. 11)
You may ask us to:
- confirm whether we process your data and give you information about it,
- tell you the purpose of processing and whether the data is used accordingly,
- tell you the third parties the data is transferred to in Türkiye or abroad,
- correct incomplete or inaccurate data,
- delete or destroy it under KVKK Art. 7,
- notify the third parties concerned of such correction or deletion,
- object to a decision against you made solely by automated analysis,
- compensate any damage caused by unlawful processing.
Where processing is based on consent (newsletter, analytics cookies), you can withdraw it at any time.
9. How to contact us
Send your request, with information that allows us to verify your identity, in writing to the address above or by email to info@iksap.com from the address you used with us.
We respond free of charge within 30 days. If you are not satisfied, you may complain to the Turkish Personal Data Protection Authority.
10. If you are in the European Union (GDPR)
If you are in the EU and your data is processed under the GDPR, you additionally have the rights under GDPR Articles 15–22 (access, rectification, erasure, restriction, data portability, objection) and the right to lodge a complaint with the data protection authority of your country. To exercise your rights, contact us directly through the channels in section 9.
11. Changes to this policy
We update this policy when necessary; the current version is always on this page, and the last updated date at the top shows when it changed.