This notice has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, to inform people who contact us through our website. Last updated: October 2026.
Data controller
The data controller is Desa Bilişim. Address: Doğukent, Akşemsettin Blv. No: 4/6A, 63340 Karaköprü / Şanlıurfa. Email: iletisim@desabilisim.com. Phone: 0 (414) 312 33 72.
What data do we process, for what purpose and on what legal basis?
- Quote, “Let us call you”, contact and specification forms: full name, phone number, email, organization name, province and district, place and system details, site survey preference and your message. Purpose: to get back to you, plan a site survey and prepare a quote. Legal basis: it is directly related to the conclusion of a contract (Art. 5(2)(c) KVKK).
- Fault and maintenance request: in addition to the above, and only if you add them: your location (if you accept your browser’s permission prompt), the address or map link you enter, and up to 3 photos. Photos are reduced in size on your device before they are sent, and the location information inside them is removed. Purpose: so that the technician can reach you and see the problem in advance. Legal basis: performance of the contract (Art. 5(2)(c)).
- Maintenance reminder: name, phone number, email, system and installation date. Purpose: to call you when maintenance is due. Legal basis: performance of the contract and your own request (Art. 5(2)(c)).
- Job application: full name, contact details, experience, CV and reference letters. Purpose: to assess your application. Legal basis: conclusion of an employment contract (Art. 5(2)(c)). Please do not include special categories of personal data such as health, religion or association membership in your CV; we do not need them.
- Your journey on the site: when you submit a form, the list of pages you visited during the same visit and your country are added to your request. Your IP address is not stored; it is kept for only 10 minutes to prevent abuse. Purpose: to better understand your needs. Legal basis: legitimate interest (Art. 5(2)(f)).
- Questions you write to the site assistant: the text of the question and the answer given (your name is not asked for). Purpose: to generate answers and improve the content based on frequently asked questions. Legal basis: legitimate interest (Art. 5(2)(f)).
- Quote by voice: With the “Get a quote by talking” feature, your voice is processed briefly only to transcribe it and fill in the form; the audio recording is not stored. Only if you submit the form is the resulting text stored with your request. Legal basis: m.5/2-c.
- Request status notifications: if you allow notifications on the tracking page, your browser’s notification address is linked to your request. It is deleted when you turn off notifications or when the request record is deleted.
We also keep anonymous page summaries that do not identify you and use neither cookies nor IP addresses: which page was viewed and for how long, how much of it was read, the device and browser type, browser language, approximate city (based on the internet provider), where the visitor came from and how fast the page loaded. These do not identify you and are not personal data.
How data is collected
Your data is collected electronically, by automated means, when you choose to fill in and submit the forms on our website. If you do not submit a form, what you typed does not reach us.
Who is it transferred to?
Your data is not shared with anyone for sales or marketing purposes. It is transferred only in the following cases:
- Hosting and infrastructure: the site, database and files are stored on the servers of Cloudflare, Inc.; the assistant and quote by voice are processed by Cloudflare’s AI service. Since these servers may be located abroad, the transfer is made relying on the safeguards set out in Article 9 of the KVKK, and only to provide the service.
- Authorized authorities: where required by law, to the authorized public institutions and organizations that request it.
How long do we keep it?
- Your requests: 2 years from the last action. When this period ends, the name, phone number, email and message are deleted; only statistics that do not identify the person (request type, district, system, date) remain. If your quote turns into a job, invoice and contract records are kept not on this site but in our accounting records, for the periods required by the Tax Procedure Law and the Turkish Commercial Code.
- Backup copies: 1 year, after which they are deleted automatically (exact location and address are never included in backups).
- Maintenance reminder records: 2 years after the maintenance is done or canceled.
- Exact location, address and photos in fault and maintenance requests: 6 months. They are then deleted; the district information remains for as long as the request is kept.
- Job applications (including CV and reference letters): 12 months.
- Questions asked to the assistant: 12 months.
- Anonymous page summaries: 13 months.
These periods are applied automatically every day; data whose period has expired is deleted or anonymized.
Your rights (Art. 11 KVKK)
By applying to us, you can ask:
- to learn whether your personal data is processed and, if so, to request information about it,
- to learn the purpose of the processing and whether the data is used in line with that purpose,
- to know the third parties in Turkey or abroad to whom it has been transferred,
- to have it corrected if it is incomplete or incorrect,
- to have it deleted or destroyed under the conditions in Art. 7 KVKK,
- for corrections and deletions to be notified to the third parties to whom the data was transferred,
- to object to a result against you that arises solely from analysis by automated systems,
- to claim compensation if you suffer damage due to unlawful processing.
How do you apply?
Under the Communiqué on the Procedures and Principles for Applications to the Data Controller, you can send your application in writing (as a petition with a wet signature to our address above), by registered e-mail (KEP), secure electronic signature or mobile signature, or from the email address you previously gave us in the forms, to iletisim@desabilisim.com . Your application must include your full name, contact details and your request. Your application will be concluded free of charge within 30 days at the latest. All your records matching your phone number or email address will be given to you or permanently deleted; the action is documented with a record that contains no personal data. If you find our answer insufficient, you can file a complaint with the Personal Data Protection Board.