This notice explains how personal data collected through vinterna.com is processed under Turkish Personal Data Protection Law No. 6698 ("KVKK") and, for visitors in the European Economic Area or the United Kingdom, the General Data Protection Regulation ("GDPR"). The Turkish version of this notice prevails in case of any discrepancy.
1. Data controller
Your personal data is processed by the following company as data controller:
- Vinterna Teknoloji Limited Şirketi
- MERSİS: 0925134898100001
- İstanbul Ticaret Sicili No: 1165602
- Yamanevler Mah. Siteyolu Cad. Anel İş Merkezi No: 5 İç Kapı No: 28, Ümraniye / İstanbul
- info@vinterna.com
2. Personal data we process
- Identity and contact: the full name and email address you enter in the contact form.
- Request details: company name (optional), the topic you select and the content of your message.
- Security: the IP address you submit the form from, and server access logs (date and time, requested page, browser information).
- Preferences: the "NEXT_LOCALE" cookie, which remembers the site language you chose.
3. Purposes
- To review and answer the questions, quote requests and partnership enquiries you send through the contact form,
- To prepare a proposal and hold pre-contract discussions at your request,
- To keep the website and the form secure and to prevent spam and abuse,
- To show the site in your preferred language.
4. Legal bases and how we collect data
Personal data is collected electronically and automatically, through the contact form on our website and through server logs.
We rely on the following legal bases: taking steps at your request before entering into a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)), compliance with legal obligations (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)) and our legitimate interests in answering enquiries and keeping our services secure (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)). We do not ask for your consent for these purposes.
5. Recipients
We share personal data only for the purposes above and only to the extent necessary, with:
- Google LLC (Google Workspace): delivering and storing contact form messages as email.
- Amazon Web Services: hosting the server that runs this website (Frankfurt, Germany).
- Competent public authorities: where they are legally entitled to request it, and only to the extent requested.
6. International transfers
Because the servers of these service providers are located outside Türkiye, your personal data is transferred abroad. These transfers are made under standard contractual clauses, one of the appropriate safeguards set out in Article 9 of the KVKK.
7. Retention
- Form messages and correspondence: up to 2 years after we reply if no business relationship follows; 10 years under Article 82 of the Turkish Commercial Code if one does.
- IP address kept for form security: 10 minutes.
- Language preference cookie: 1 year. You can delete it at any time in your browser settings.
When the retention period ends, data is deleted, destroyed or anonymised. We do not use analytics or advertising cookies.
8. Your rights
Under Article 11 of the KVKK you may ask us whether your personal data is processed and request information about it; learn the purpose of processing and whether data is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction of incomplete or inaccurate data; request erasure or destruction under Article 7; request that third parties be notified of such corrections or erasures; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.
If you are in the EEA or the UK, the GDPR also gives you the rights of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with your local data protection authority.
9. How to contact us
You can send requests about your rights in writing to Yamanevler Mah. Siteyolu Cad. Anel İş Merkezi No: 5 İç Kapı No: 28, Ümraniye / İstanbul, or by email to info@vinterna.com from an email address you have previously shared with us. Please include information that allows us to identify you.
We respond as soon as possible and within 30 days at the latest, free of charge. If a request involves additional cost, a fee may be charged according to the tariff set by the Turkish Personal Data Protection Board.