Privacy notice · Detmore

This is an English translation of our Turkish privacy notice (KVKK aydınlatma metni). If the two differ, the Turkish text applies.

This privacy notice has been prepared under Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. It explains how the personal data of people who visit the website https://detmore.tr and who contact us through the contact form, by email or on WhatsApp is processed.

Data controller

Your personal data is processed by [Company name] (“Detmore”) in its capacity as data controller.

Registered name: [Company name]
MERSİS no.: [MERSİS no.]
Tax office and no.: [Tax office and no.]
Address: [Address]
KEP (registered electronic mail) address: [KEP address]
Email: [email protected]

For processing activities carried out by Detmore’s Famagusta office, the provisions of the Northern Cyprus Personal Data Protection Law (89/2007) also apply, in addition to the KVKK.

Personal data we process

Identity and contact details: name, email address, phone number and, if you share it in your message, company name.
Request details: the services you select in the contact form, the description you write for the “Other” option and the content of your message; correspondence you send by email or WhatsApp.
Transaction security data: IP address, browser information and the timestamp of the form submission. This data is processed to prevent spam and abuse, and as part of the technical records (logs) kept by our hosting provider.
Aggregate visit statistics: aggregate information such as how many times each page was viewed, the referring site, country, browser and device type. These statistics are produced without cookies and do not identify individual visitors.

Purposes of processing

We process your personal data for the following purposes:

to receive, assess and respond to your contact request;
to prepare a proposal that fits your needs and to schedule a meeting;
to contact you about your request;
to carry out pre-contractual steps such as an initial meeting, a non-disclosure agreement and a proposal;
to ensure information security and to prevent spam and abuse;
to fulfil our legal obligations.

Your data is processed only for these purposes. In addition, we do not send you commercial electronic messages unless you have given your consent.

Legal grounds

Your personal data is processed on the following legal grounds set out in Article 5(2) of the KVKK:

(c) Processing the personal data of the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of that contract: pre-contractual steps such as responding to your request, preparing a proposal and scheduling a meeting.
(ç) Processing is mandatory for the data controller to fulfil its legal obligation: records that must be kept under the legislation, and requests from competent authorities based on the law.
(f) Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject: ensuring information security, preventing spam and abuse, keeping aggregate visit statistics and answering general questions from you that are not aimed at a contract.

We do not ask, in the contact form or through any other channel, for the special categories of personal data listed in Article 6 of the KVKK (data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of an association, foundation or trade union, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data). Please do not share such information in your messages.

How personal data is collected

Your personal data is collected electronically through the following channels:

the contact form on our website;
emails you send to [email protected];
messages you send on WhatsApp.

Transaction security data and aggregate visit statistics are generated by automated means by the hosting and content delivery infrastructure when you visit the site. If you choose to write to us on WhatsApp, your messages are transmitted under that service’s own terms of use and privacy policy.

Transfers of personal data

Your personal data may be transferred to the following recipients, limited to the purposes above and to the extent necessary:

Cloudflare, Inc. (USA): hosting the site, content delivery, security, storing contact form records and cookieless visit statistics (Cloudflare Web Analytics).
Resend (USA): forwarding the information you send through the contact form to us by email, as a daily summary.
Competent public authorities and institutions, and judicial authorities: only where required by law, and limited to the information requested.

Because these service providers are based in the USA and may process data on servers abroad, these transfers qualify as transfers abroad. Under Article 9 of the KVKK, as amended by Law No. 7499 and in force since 1 June 2024, a transfer abroad may be made, provided that one of the processing conditions in Article 5 or 6 is met, on the basis of an adequacy decision if one exists for the destination country or, if not, on the basis of one of the appropriate safeguards, such as a standard contract. Where there is neither an adequacy decision nor an appropriate safeguard, the exceptional cases listed in the law, such as your explicit consent, may be relied on, provided that the transfer is incidental and that you have been informed of the possible risks.

Transfers abroad are carried out on the basis of one of the conditions provided for in KVKK Art. 9. Where explicit consent is required, the consent checkbox in the contact form is used. You are not obliged to give explicit consent, and you may withdraw any explicit consent you have given at any time; withdrawal takes effect for the future.

Retention period

The information you send through the contact form is stored temporarily until it is forwarded to us by email, and this record is deleted automatically no later than 7 days after it has been forwarded. Your request details, together with the related emails and other correspondence, are kept for [retention period, e.g. 2 years] from the date the request is received; at the end of this period they are deleted, destroyed or anonymised. If your request leads to a contract, the data covered by the contract is kept for the periods set out in the relevant legislation.

Transaction security data and technical records are kept according to the relevant service provider’s (Cloudflare, Resend) own retention periods and are deleted by the provider at the end of those periods.

Cookies and tracking tools

Our site does not use cookies of its own and contains no tracking tools (pixels, tags, etc.) for advertising or remarketing. Cloudflare Web Analytics, which we use for visit statistics, does not use cookies and does not identify individual visitors. Where necessary to protect the site against attacks and malicious traffic, our hosting provider Cloudflare may use strictly necessary technical cookies that serve only this security function.

Your rights

Under Article 11 of the KVKK, by applying to the data controller, you have the right to:

a) learn whether your personal data is processed,
b) request information about the processing if your personal data has been processed,
c) learn the purpose of the processing of your personal data and whether it is used in line with that purpose,
ç) know the third parties in Türkiye or abroad to whom your personal data is transferred,
d) request the correction of your personal data if it is incomplete or has been processed inaccurately,
e) request the deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
f) request that the operations carried out under sub-paragraphs (d) and (e) be notified to the third parties to whom your personal data has been transferred,
g) object to an outcome against you that arises from the analysis of the processed data exclusively through automated systems,
ğ) claim compensation for the damage if you suffer damage because your personal data has been processed unlawfully.

How to apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your requests concerning your rights in one of the following ways:

by delivering your written application bearing your wet signature by hand to [Address], or by sending it there by post;
by sending it from your registered electronic mail (KEP) address to [KEP address];
by sending it to [email protected], either signed with a secure electronic signature or mobile signature, or from an email address that you have previously given us and that is registered in our system.

Your application must include your first name and surname and, for written applications, your signature; for citizens of the Republic of Türkiye, the Turkish identity number (T.C. kimlik numarası), and for foreign nationals, nationality and passport number or, if any, identity number; the residential or business address for service of notices; if any, the email address, telephone and fax number for notifications; and the subject of the request. You may attach any documents relating to your request.

Your application will be concluded free of charge as soon as possible, depending on the nature of the request, and within thirty days at the latest (KVKK Art. 13). If the process involves an additional cost, only the fee in the tariff set by the Personal Data Protection Board may be charged. Our response will be sent to you in writing or electronically.

If your application is rejected, if you find the response inadequate, or if no response is given in time, you may lodge a complaint with the Personal Data Protection Board within thirty days of the date you learn of the response and, in any event, within sixty days of the date of application (KVKK Art. 14). For processing activities carried out by our Famagusta office, your rights and remedies under Northern Cyprus legislation are also reserved.

Changes

We may update this notice when there are changes to our data processing activities or to the legislation. The current version is always published on this page, and the date at the top is updated.