Privacy Notice and Personal Data Processing

Last updated: 22 October 2026

This notice explains the processing of personal data in connection with the contact form and initial enquiry channels on the Kent Kurumsal website. It is intended to provide information under Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”). This notice is an information notice; it is not, by itself, a request for explicit consent.

1. Data controller and contact details

The data controller for the processing activities described in this notice is Kent Kurumsal Danışmanlık İnşaat Gıda Emlak Sanayi ve Dış Ticaret Limited Şirketi.

Email: info@kentkurumsal.net
Telephone: +90 212 854 1947
Address: Barbaros Hayrettin Paşa Mahallesi, 1988 Sokak No: 6, Taksim A Cemre Emenkent Sitesi, B Blok, Daire 2, Esenyurt / İstanbul, Türkiye

2. Categories of personal data

Depending on the fields you complete, the following data may be processed when you use the contact form:

Identity and contact data: name and surname, telephone number and email address.
Customer transaction and enquiry data: the content of your message, the service you enquire about and correspondence with us.
Transaction-security data: technical records that may appear in server logs, such as IP address, date and time, browser/device information and request logs, for form security, abuse prevention and technical troubleshooting.

Please do not include special-category personal data or confidential information about other people unless it is necessary for your enquiry.

3. Purposes and legal grounds

Your personal data is processed only for specific purposes and to the extent necessary:

Receiving and responding to your enquiry and discussing requested services: where the statutory conditions are met, Article 5(2)(c) of KVKK, where processing is necessary to take steps at the data subject’s request before entering into a contract or is directly related to the establishment or performance of a contract.
Documenting communications, addressing disputes and meeting legal obligations: the relevant condition under Article 5(2), as applicable to the specific circumstances, including compliance with a legal obligation or the establishment, exercise or protection of a right.
Protecting the form, limiting spam and misuse, and maintaining system security: where the balancing test is satisfied, the controller’s legitimate interests under Article 5(2)(f), provided that this does not prejudice your fundamental rights and freedoms.

The appropriate legal ground must be assessed separately for each processing activity. The pre-contractual-steps ground may be used only where its statutory conditions are actually met. Legal-obligation and rights-related grounds apply only where relevant to the circumstances. Any legitimate-interest assessment must take your fundamental rights and freedoms into account.

This information notice is not explicit consent. If a separate activity requires explicit consent, that consent must be specific, informed and freely given for the relevant purpose, and obtained separately from this notice. Responding to a service enquiry is not conditional on consenting to marketing.

4. How data is collected

Data may be collected electronically directly from you when you complete the contact form or contact us by email or telephone. Technical records may also be generated automatically by the web server while the form operates and security measures are applied.

5. Recipients and transfers

Data may be disclosed only to the extent necessary for the stated purposes, with access restricted to authorised persons and on an applicable legal basis under KVKK, to the following categories of recipients:

Hosting, email and technical service providers and their authorised personnel, where needed to receive and answer your message;
Competent public authorities and legally authorised bodies where required by law or in connection with a dispute;
Professional advisers providing legal support, where necessary and legally permitted.

Personal data is not sold for advertising. The countries in which hosting, email, map providers and their sub-processors process data must be verified against the actual service contracts and settings. If a transfer abroad occurs, it must rely on an applicable mechanism under the current Article 9 of KVKK and related regulations, such as an adequacy decision, appropriate safeguards or a legally available derogation. Using a provider does not, by itself, establish that an international transfer is lawful. No definitive statement about a particular overseas transfer can be made until the actual infrastructure and transfer mechanism have been verified.

6. Retention and deletion

Contact-form information is retained only for as long as needed to respond to the enquiry and manage the communication. Where longer retention is necessary for a contract, accounting or tax obligations, a dispute, or the establishment, exercise or protection of a right, the relevant record is retained only for the applicable legal period. Retention periods for technical server logs and messages in email accounts depend on the provider settings and the controller’s retention-and-destruction policy. When the relevant period ends and no other lawful retention ground applies, data is deleted, destroyed or anonymised.

Before publication, the company should set and actually apply a specific retention period for each data category. This notice does not legitimise indefinite or unspecified retention.

7. Cookies and third-party content

No analytics or advertising tags were identified in the source code of the package version reviewed. The cookie-preference interface stores a preference in this browser’s local storage for up to 180 days, after which the choice may be requested again. This preference record is not, by itself, an analytics or advertising cookie. If optional analytics, advertising or other tracking technologies are introduced later, their purposes, providers, duration and legal basis must be assessed individually; they must not run before the applicable legal requirements and user choice have been satisfied, and the choice must be easy to withdraw.

The Google Maps content on the contact page is not loaded initially. A connection to Google is made only after the visitor selects the “Load Google Map” control; Google may then process technical information under its own terms and privacy practices. Choosing not to load the map does not prevent you from using the contact form. Since the live server, browser and provider settings may differ from the package reviewed, a separate cookie and tracker audit must be performed in the live environment before publication.

8. Your rights under KVKK

Under Article 11 of KVKK, subject to applicable conditions and exceptions, you may have the right to learn whether your personal data is processed; request information if it is processed; learn the purpose of processing and whether data is used consistently with that purpose; learn the third parties to whom data is transferred domestically or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where the statutory conditions are met; request notification of correction or deletion to recipients; object to a result against you arising exclusively from analysis by automated systems; and claim compensation for damage caused by unlawful processing.

9. How to submit a request

Under Article 13 of KVKK and the applicable application rules, you may submit requests in writing or by electronic methods accepted by law. Your application should include your name, an explanation of the request and the requested remedy, and contact details for the response. Identity verification may be required depending on the method used. Lawful channels may include the controller’s officially registered address, a registered electronic mail (KEP) address if available, a secure electronic signature, or an email address previously notified to and registered by the controller, where permitted by the applicable rules.

info@kentkurumsal.net is the general contact address; the company must designate and monitor it as a channel for KVKK applications if it intends to accept formal applications there. The controller must respond as soon as possible and no later than 30 days, depending on the nature of the request. Statutory fee provisions may apply where processing the request incurs a permitted cost.

If your request is rejected, the response is inadequate, or no response is provided in time, you may have the right to complain to the Personal Data Protection Board subject to the conditions and time limits in Article 14 of KVKK. An application to the controller must be made before complaining to the Board.

10. Changes to this notice

This notice may be updated if the company’s processing activities, technical infrastructure or applicable law changes. The current version will be published on this page. It should be reviewed regularly to ensure that it remains consistent with actual practices.

Publication check: This English page is a translation for convenience. The Turkish KVKK notice is the primary notice for Turkish-law purposes. Before publication, verify the actual service providers, international transfers, retention schedule, application channel and live-site tracking technologies. This page is not legal advice or a substitute for review by Turkish privacy counsel.

Contact Kent Kurumsal · Cookie policy · Terms of use · Turkish KVKK notice