Personal Data Protection Privacy Notice
Information on the personal data processed through our website and communication channels under the Turkish Personal Data Protection Law No. 6698.
As Narstek Elektronik Bina Teknoloji San. ve Tic. Ltd. Şti. (“Narstek” or the “Company”), we care about the security of your personal data. This notice has been prepared to inform you in our capacity as data controller, pursuant to the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.
1. Data controller
2. Personal data processed
- Identity and contact information: full name, company / organisation name, phone number, email address, province / district and the address you share in a service request.
- Request information: the service, system and brand you are interested in, and the details you share in your message and attachments.
- Transaction security information: IP address, browser and device information, date and time of submission and the result of the bot verification when a form is submitted.
- Visit statistics: page visited, referring address and device type. This information is kept without cookies, in a way that is not intended to identify you, and for aggregate statistical purposes.
Please do not share special categories of personal data, such as health information, in the request form or in your messages.
3. Purposes of processing
- Receiving and evaluating your survey, quotation, product supply, technical service and support requests and responding to you,
- Carrying out quotation and contract processes for the requested service or product,
- Ensuring the security of the website and form infrastructure and preventing automated (bot) and repeated submissions,
- Fulfilling legal obligations and responding to information requests from competent authorities,
- Establishing, exercising and protecting rights in the event of a dispute,
- Measuring website usage in aggregate and improving service quality.
The information you submit through the form is used only to respond to your quotation and support requests; it is not used for marketing, campaign or newsletter communications without your explicit consent.
4. Method of collection and legal grounds
Your personal data is collected when you submit it through the survey / quotation and technical service forms on our website, by email, by phone or via WhatsApp, and automatically through the website infrastructure. This data is processed on the following legal grounds set out in Article 5, paragraph 2 of the KVKK:
- Processing of personal data of the parties to a contract being necessary, provided that it is directly related to the establishment or performance of that contract (Art. 5/2-c): handling your quotation and service request,
- Processing being mandatory for the data controller to fulfil its legal obligations (Art. 5/2-ç),
- Processing being mandatory for the establishment, exercise or protection of a right (Art. 5/2-e),
- Processing being mandatory for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5/2-f): website and form security, prevention of misuse and aggregate visit statistics.
5. Transfer of personal data
Your personal data may be transferred to the following groups of recipients, limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK:
- Hosting and email service provider: our website and corporate email service are hosted on the infrastructure of a hosting company operating in Türkiye.
- Bot verification service: the Turnstile service provided by Cloudflare, Inc. is used to protect our forms against automated attacks. In this context, IP address and browser / device information may be processed on servers located abroad. This transfer is carried out in accordance with the procedures and conditions set out in Article 9 of the KVKK.
- Business partners and suppliers: where required by your request and to the extent necessary, product suppliers and subcontractors we work with in order to deliver the quotation and service.
- Authorised public institutions and organisations: judicial authorities and competent institutions, when requested under obligations arising from legislation.
If you contact us via WhatsApp, the communication takes place over the infrastructure of the WhatsApp application (Meta Platforms) and is subject to that service’s own privacy terms. Our website does not use cookies for advertising, profiling or tracking, and does not sell your personal data.
6. Retention periods
- Request records that remain at the quotation stage (from the request date): 2 years,
- Requests that turn into a sale or service contract, and the related commercial records (as required by the Turkish Commercial Code and the Tax Procedure Law): 10 years,
- IP address and browser information of form submissions: 180 days,
- Aggregate visit statistics: for as long as necessary for statistical purposes, in a form not intended to identify you.
Personal data whose retention period has expired is deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.
7. Your rights under Article 11 of the KVKK
As a data subject, you may exercise the following rights by applying to our Company:
- Learn whether your personal data is being processed,
- Request information about the processing if it has been processed,
- Learn the purpose of processing and whether the data is used in line with that purpose,
- Know the third parties to whom the data is transferred in Türkiye or abroad,
- Request correction if the data has been processed incompletely or inaccurately,
- Request deletion or destruction within the framework of the conditions in Article 7 of the KVKK,
- Request that correction, deletion or destruction be notified to the third parties to whom the data has been transferred,
- Object to a result against you arising from the analysis of the processed data exclusively by automated systems,
- Claim compensation for damages if you suffer loss due to unlawful processing.
8. How to apply
You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, by a written and wet-signed petition containing information that identifies you and your request, delivered to our address above in person or through a notary public, or by email with the subject “KVKK Information Request” sent to info@narstek.com from the email address you have previously provided to our Company and that is registered in our system.
Your application will be concluded free of charge as soon as possible according to the nature of the request and within 30 days at the latest. If the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, you find the response insufficient, or no response is given in time, you may file a complaint with the Personal Data Protection Board.
Last updated: 10 November 2026