Data protection notice

The data controller under the Law is the following legal entity.

Legal name

ASK SOLAR ENERJİ MÜHENDİSLİK SAN. VE TİC. LTD. ŞTİ.

Address

Atayurt Mah. Fuzuli Cad. No:4D/12 Etimesgut/Ankara

Tax office / number

Etimesgut V.D. 0861689327

Email

info@gesetiket.com

Phone

+90 545 569 39 40

Your personal data is collected only if you complete and submit the contact form on our website, electronically and by automated means. No data is collected beyond what is requested from you, and no profiling is carried out through cookies.

• Identity and contact data: full name, company name, email address, phone number.
• Request-related data (optional): province where the plant is located, approximate installed capacity, your message.
• Transaction security data: an irreversible hash (SHA-256) of your IP address. The IP address itself is not stored; this hash is kept solely to prevent automated abuse of the form.
• Consent record: the date and time you gave explicit consent.

Your data is processed for the following purposes and limited to them:

• Receiving your request, assessing it technically and preparing a tailored quote.
• Contacting you about your request and answering your questions.
• Preventing automated abuse of the form and maintaining information security.

Your data is NOT processed for marketing, profiling, advertising targeting or automated decision-making; it is never sold, rented out or transferred to third parties.

Your identity, contact and request-related data is processed on the basis of your EXPLICIT CONSENT under Article 5/1 of the KVKK. Ticking the consent box before submitting the form constitutes that consent. Transaction security data (the IP hash) is processed under Article 5/2-f, within the legitimate interest of the data controller and without prejudice to your fundamental rights and freedoms.

You may withdraw the explicit consent you gave at any time, without giving any reason. If you send us such a request through the application methods below, your data is deleted without delay. Withdrawal does not affect processing lawfully carried out up to the date of withdrawal.

Your data is never transferred to any third person, institution or organisation for sales or marketing purposes. It is only hosted on the servers of the following service providers that we use to deliver the service technically. These providers process your data solely on our instructions, as data processors:

• Hosting and content delivery: Vercel Inc. (US-based, servers within the European Union).
• Database: Neon Inc. (US-based, servers within the European Union).
• Email notifications: Resend (US-based).

Because these providers are located abroad, your data may be deemed transferred outside Türkiye. Such transfer is made on the basis of your explicit consent under Article 9 of the KVKK. The explicit consent you give by submitting the form covers this transfer as well. Any transfer is in all cases limited to the purposes set out in this notice.

Your personal data is retained for as long as the purpose of processing requires:

• If your request concludes and no commercial relationship is established: at most 12 months from the last contact. At the end of that period your data is deleted or anonymised.
• If a commercial relationship is established: the limitation and retention periods set out in applicable legislation apply (in particular the 10-year period under the Turkish Commercial Code and the Tax Procedure Law).
• If you withdraw your consent: without delay, unless a legal retention obligation applies.

Technical and administrative measures are in place to prevent unlawful processing of and unlawful access to your personal data: all connections are encrypted in transit (TLS), authorisation is checked server-side on every request, personal data is never written to system logs, access is limited to personnel who need it for their duties, and IP addresses are not stored in raw form.

Under Article 11 of the KVKK you may exercise the following rights by applying to the data controller:

1. To learn whether your personal data is being processed.
2. To request information if it has been processed.
3. To learn the purpose of processing and whether the data is used in line with that purpose.
4. To know the third parties to whom the data is transferred, domestically or abroad.
5. To request correction if the data is incomplete or inaccurate.
6. To request erasure or destruction of the data within the conditions of the Law.
7. To request that correction, erasure and destruction be notified to the third parties to whom the data was transferred.
8. To object to an adverse outcome arising solely from the automated analysis of your data.
9. To claim compensation for damages suffered due to unlawful processing of your personal data.

You may submit requests concerning your rights, in line with the Communiqué on Application Procedures to the Data Controller, to the email address above or in writing to the company address. Your application must clearly state your full name, the contact details on which the application is based and the subject of your request. Your request is concluded free of charge as soon as possible and in any event within 30 days at the latest. Where the process entails an additional cost, the fee set in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected or left unanswered, you have the right to lodge a complaint with the Personal Data Protection Board.

This notice may be revised due to changes in legislation or updates to our business processes. The current text is always published on this page and its effective date is shown at the top.