KVKK Personal Data Notice

Controller and collection

Controller: CS OTOMASYON SİSTEMLERİ TEKNOLOJİ SANAYİ VE TİCARET LİMİTED ŞİRKETİ; address: Aydınevler Mahallesi, Öncel Sokak, No: 1-13A, Maltepe / İstanbul 34854; general contact: info@csotomasyon.net, +90 216 313 86 58; KVKK requests: info@guvenlikonline.com. Data is collected electronically through web forms, site use and authorized-account actions. This is a notice under Article 10 of Turkish Law No. 6698, not a request for explicit consent.

Quote requests

Data: organization/contact name, email, phone, project and free-text details, location, sector, project type/scale/timeline, related content, source URL and language; the server also records IP and user-agent. Purposes: receiving, assessing and answering a request, exploring suitable options internally and preventing abuse. Automated scoring may occur, but it does not alone make a binding adverse decision.

Contact data needed to receive, assess and answer the request, and limited technical records needed to prevent abuse, may be processed under Article 5(2)(f) only where necessity and a balance with fundamental rights are established. Article 5(2)(c) applies only to steps directly necessary to establish a specific contract to which the individual will be a party; submitting a form on behalf of a company does not itself create that relationship. Article 5(2)(e) is limited to records necessary to establish, exercise or protect a concrete right. Only authorized administrators access records in the platform. No automatic transfer to companies occurs; any separate disclosure requires its own scope and legal basis.

Company submissions and publication

Data: company identity, website/phone/email, location, roles and description; applicant name/email; verification-token hash and keyed IP hash. Purposes: verifying email, checking duplicates and security, administrator review and publishing approved corporate details.

Applicant contact details and limited technical records needed for verification, duplicate prevention and administrator review may be processed under Article 5(2)(f) only where necessity and a balance with fundamental rights are established. Article 5(2)(c) applies only if processing is directly necessary for a specific contract to which the applicant will be a party; a free directory application does not itself create a contract. Article 5(2)(e) is limited to records needed to establish, exercise or protect a concrete right. Applicant contact details are not automatically published. Approved company contact fields can be public; fields identifying a person require further review. Applying is not newsletter permission.

Other processing and recipients

Search terms/time, security logs, IP or keyed IP hashes, and account identity, password hash, role, session and audit records may be processed. Operation/security may rely on Article 5(2)(f); a specific duty or claim may call for Article 5(2)(ç) or (e). Optional marketing and Google measurement require separate choices.

Recipient groups as needed are authorized administrators, Railway (hosting/database), Cloudflare/R2 (network/security/media), our cPanel SMTP system (mail), and Umami Cloud or Google only if activated. Public authorities receive data only for a concrete legal requirement. International access/transfer requires an applicable KVKK Article 9 mechanism; publishing this notice does not itself authorize it.

Retention and data-subject rights

The current system does not automatically erase quote or company submissions after a fixed period. Retention is limited to the processing purpose and any genuinely applicable legal duty or concrete rights claim. When all processing grounds cease, data must be erased, destroyed or anonymized under applicable law, on our initiative or upon request. Backups and audit records are assessed against their own purpose and legal requirements. An erasure request is reviewed against any continuing retention ground; you need not wait for an internal target period.

KVKK Article 11 rights include information, correction, deletion/destruction, learning recipients and asking for notification, objection to an adverse result based solely on automated analysis, and compensation for unlawful processing. Write to Aydınevler Mahallesi, Öncel Sokak, No: 1-13A, Maltepe / İstanbul 34854 or contact info@guvenlikonline.com. This is not a KEP address; ordinary email is a formal route only under the applicable registered-address and identification conditions. Requests are assessed as soon as possible and no later than 30 days.