Personal data and privacy notice

Version in force since: 2026-11-01

1. What this notice covers

This notice is written under Article 10 of the Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the information duty. It covers the TEKNECE website, its request form, the tools and the WhatsApp link.

The request form is the only place where we ask you for personal data. Reading the site needs no account, sets no cookies and runs no tracking or advertising tools.

2. Controller

Özkan Nafi Yurdugül, TEKNECE, Türkiye (“TEKNECE” in this notice). The business address and registry details are given on request to persons who apply.

Questions and requests about your personal data: info@teknece.com, +90 216 493 40 75.

3. What we collect and how

What you enter in the request form:

Identity and contact: your name, e-mail address and/or phone number, your country. At least one of e-mail or phone is needed.
Your request: the service you ask about; if you choose to give them, the craft type, model, hull length and the country where it is; depending on the service, your role in the CE process, your PCA situation or the purpose of the survey; your description.
Optional tool summary: if you choose to attach the result of the CE Preliminary Check or the Builder’s Plate Generator, the tool’s reference and a summary made of numbers and codes. No free text, no craft identification number and no manufacturer name travel with it.

Recorded automatically when the form is sent:

The page the form is on, the page you came from and campaign labels in the link (UTM), the time of the request, the language you chose and the version of this notice you confirmed.
To filter unwanted submissions, the time taken to fill the form and a hidden check field; neither is written to the request record.
Your IP address: used at that moment to limit many submissions from one address in a short time (an hourly counter that is deleted within two hours), not written to the request; it may appear briefly in server access logs. Server logs hold no name, e-mail, phone or message content.

The tools (CE Preliminary Check, Builder’s Plate Generator, Essential Requirements Guide) run in your browser. What you enter is not sent to us unless you choose to send it with the request form, and the tools store nothing in your browser.

When you click the WhatsApp link, the conversation takes place in the WhatsApp app (Meta Platforms) under WhatsApp’s own privacy policy. We use what you send by WhatsApp, e-mail or phone only to answer your request.

Method of collection: your personal data is collected electronically, through the web form and through WhatsApp, e-mail or phone, when you send it. We collect no data about you from other sources.

4. Purposes and legal grounds

We process your personal data for the following purposes, on the legal grounds of KVKK Article 5(2):

To answer your request, define the scope, prepare a quote and carry out the service — necessary for the conclusion and performance of a contract at your request (Art. 5(2)(c)).
To confirm by e-mail that your request was received and to give you its reference — the same ground (Art. 5(2)(c)).
To keep records, to prove facts in a possible dispute and to meet commercial-book and tax obligations — compliance with a legal obligation (Art. 5(2)(ç)) and the establishment, exercise or protection of a right (Art. 5(2)(e)).
System security, prevention of unwanted submissions and abuse, error logs — our legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5(2)(f)).

We do no marketing: there is no newsletter, your data is not used for advertising and no explicit consent is asked for that. The box in the form states that you have read this notice; it is not explicit consent, and none of the processing above rests on consent.

No automated decisions are made about you: tool results and our preliminary review are technical preliminary information and contain no assessment or profiling of you.

5. Who receives it

Your personal data is not sold, not shared for advertising and not given to third parties, notified bodies included, unless you ask for it or it is agreed within a project. It is passed only to the following recipients, for the following purposes:

TEKNECE staff who handle requests: the request arrives as an e-mail in the company mailbox hosted in Türkiye and is handled there (when a request management system is put into service, it is kept there under the same rules).
A staff alert through Telegram (Telegram FZ-LLC, outside Türkiye): request reference, service, country, craft type and length, language, source page and the tool reference if any. Your name, e-mail, phone and description are not sent; this summary cannot identify you.
The confirmation e-mail through an e-mail server located in Türkiye, which processes your name and e-mail address for delivery only.
Hosting: the website and the database are kept on servers located in Türkiye. Your personal data is not transferred abroad; the only message that leaves Türkiye is the Telegram staff alert above, which carries no identifying data.
Public authorities: where they are expressly authorised by law and ask for it, to the extent the law allows.

6. How long we keep it

Requests that do not lead to a contract: three years from the last contact about the request, the period within which a question or claim about the request can still arise. At the end of that period the name, e-mail, phone, description and notes are deleted; only a trace record with the reference and dates, carrying no identity, remains.
Requests that become a contract: ten years from the end of the business relationship, the retention period of the Turkish Commercial Code (Art. 82) and the general limitation period of the Code of Obligations (Art. 146).
The technical record used to filter a repeated submission of the same form: 24 hours. Notification delivery records: as long as the request record.
At your request for deletion: your personal data is deleted before the period ends and only the trace record remains, except documents we are legally bound to keep.

7. Security

Under KVKK Article 12 we take appropriate technical and organisational measures: connections are encrypted with TLS; staff access is limited by password and role; personal data is masked in server logs; only the data needed is asked for; requests are tracked by references that cannot be guessed. In the event of a data breach, the Personal Data Protection Board and the persons concerned are notified within the period the Board has set.

8. Your rights

Under KVKK Article 11 you may apply to us to:

learn whether your personal data is processed and, if so, request information;
learn the purpose of processing and whether the data is used in line with it;
learn the third parties to whom it is transferred, in Türkiye or abroad;
request correction where it is incomplete or inaccurate;
request deletion or destruction under the conditions of KVKK Article 7;
request that corrections, deletions and destructions are notified to the third parties the data was transferred to;
object to a result against you that arises exclusively from automated analysis;
claim compensation for damage caused by unlawful processing.

Under the Communiqué on the procedures for applications to the controller, send your application in writing to the business address (given on request by e-mail or phone) or, from the e-mail address you gave us earlier, to info@teknece.com. It must contain your name and surname, your signature (written applications), your Turkish ID number or passport number for foreign nationals, your address for notifications, your e-mail and phone if any, and the subject of your request.

We answer within 30 days at the latest and free of charge; if the operation entails a separate cost, the fee in the Board’s tariff may be charged. If your application is refused, the answer is insufficient or none arrives in time, you may lodge a complaint with the Personal Data Protection Board under KVKK Article 14.

9. Visitors in the European Union

If you are in the EU, the General Data Protection Regulation (GDPR) also applies. The same data is processed for the same purposes on the grounds of Article 6(1)(b) (contract), 6(1)(c) (legal obligation) and 6(1)(f) (legitimate interest). For the rights of Articles 15 to 22 (access, rectification, erasure, restriction, portability, objection) apply to us in the same way; you may also complain to the supervisory authority of your country. Your data is processed in Türkiye, outside the EU; the transfer is made with the safeguards of Article 44 and following.

10. Changes and version

The version of this notice is shown at the top of the page; the version you confirmed when sending the form is recorded with your request. When the notice changes, the new version is published on this page; for important changes, persons with open requests are informed separately.