KVKK Aydınlatma Metni

1. Data Controller

The data controller is Sardeks Teknoloji A.Ş., located at Zümrütevler Mah. Ural Sk. No: 30, İç Kapı No: 11, Maltepe / İstanbul, Turkey.

2. Categories of Personal Data Processed

The following categories of personal data are processed:

• Identity Data: Full name
• Contact Data: Email address
• Professional Data: Company name (demo requests only)
• Request Data: Message content, use case selection
• Technical Data: IP address (anonymized), browser type, device information, pages visited (with consent)
• Cookie Data: Language preference, cookie consent preference

3. Purpose of Processing

Your personal data is processed for the following purposes:

• Responding to contact requests and inquiries
• Processing and evaluating demo requests
• Analyzing website traffic and improving services (with explicit consent)
• Ensuring website security and preventing automated spam
• Providing a personalized browsing experience (language preferences)

4. Data Transfers

Your personal data may be transferred to the following parties:

Domestic Transfers: No domestic third-party transfers are made.

International Transfers: Data may be transferred to the following international service providers with your explicit consent or based on legitimate interest:

• Web3Forms (USA) - For processing form submissions
• Google LLC (USA) - For analytics (Google Analytics), security (reCAPTCHA), and typography (Google Fonts)

5. Method and Legal Basis for Collection

Personal data is collected through electronic means (website forms, cookies, and analytics tools). The legal bases for processing are: • Explicit consent of the data subject (KVKK Art. 5(1)) - for analytics cookies and optional form submissions • Processing is necessary for the legitimate interests of the data controller (KVKK Art. 5(2)(f)) - for website security and spam prevention • Processing is mandatory for the establishment or performance of a contract (KVKK Art. 5(2)(c)) - for responding to demo and contact requests

6. Data Retention Periods

Personal data is retained for the following periods: • Form submission data: In accordance with Web3Forms retention policy • Analytics data: Up to 14 months (Google Analytics) • Cookie data: Up to 1 year Data is deleted, destroyed, or anonymized at the end of the retention period.

7. Your Rights Under KVKK Article 11

As a data subject, you have the following rights:

• To learn whether your personal data is being processed
• To request information about processing if your data has been processed
• To learn the purpose of processing and whether data is used in accordance with its purpose
• To know the third parties to whom your personal data has been transferred, domestically or abroad
• To request rectification of personal data if it is incomplete or inaccurately processed
• To request deletion or destruction of personal data under the conditions set forth in Article 7
• To request notification of rectification or deletion operations to third parties to whom data has been transferred
• To object to a result that is to your detriment arising from the analysis of processed data exclusively through automated systems
• To claim compensation for damages arising from the unlawful processing of personal data

8. How to Exercise Your Rights

To exercise your rights under KVKK, you may submit a written request to: Sardeks Teknoloji A.Ş. Address: Zümrütevler Mah. Ural Sk. No: 30, İç Kapı No: 11, Maltepe / İstanbul, Turkey Email: privacy@sardeks.com Your request will be processed within 30 days. Depending on the nature of the request, there may be no charge, or a fee in accordance with the tariff determined by the Personal Data Protection Board may apply.