KVKK Privacy Notice.

The notice below transparently sets out why, for how long, and within the scope of which rights ProYA Engineering processes the personal data it obtains during its service relationship. Legal article references are included in the text for clarity.

01 Data Controller

The data controller for your personal data is ProYA Engineering. Company and application details:

• Title — ProYA Engineering
• Address — Maslak Mah., Sarıyer, 34485 Istanbul
• General email — info@proyaengineering.com
• KVKK application email — kvkk@proyaengineering.com

02 Processed Personal Data Categories

Within the scope of the service relationship, data in the following categories is processed through request forms, email correspondence, and system records:

• Identity — name, surname, and institution / company name, if any.
• Contact — email address, phone number, mailing address.
• Request — brief, project description, topic selection, attachments.
• Transaction security — IP address, session information, browser & device information, cookie identifiers.

03 Processing Purposes

Your personal data is processed for the following purposes:

1. Evaluating brief / project requests and providing a response.
2. Managing customer relations, offers & contracts.
3. Fulfilling legal obligations (including before official authorities).
4. Operating information security processes and preventing misuse.
5. Measuring and improving service quality (anonymized analysis).

04 Legal Basis

Your data is processed based on the following legal grounds under Article 5/2 of the KVKK:

• (a) It is expressly provided for by law.
• (c) It is necessary for the establishment or performance of a contract.
• (ç) It is necessary to fulfill a legal obligation.
• (f) Legitimate interest, without prejudice to the fundamental rights and freedoms of the data subject (limited to request evaluation).

05 Transfer

Your personal data is transferred to authorized ProYA personnel as required by their job descriptions. Where legally required, it may be shared with public institutions and organizations authorized by law.

Due to cloud-based email and form infrastructure, data may be processed on the servers of the infrastructure provider in countries covered by an EU Commission adequacy decision, within the scope of Article 9 of the KVKK. If this transfer is excluded, the process is moved by ProYA to an alternative local infrastructure.

06 Retention Periods

• Brief / contact form records — 2 years.
• Contract-scope data — the period required by applicable legislation (minimum 10 years).
• Server log records — 6 months.
• Cookie identifiers — the periods specified in the Cookie Policy.

At the end of the retention period, data is deleted, destroyed, or anonymized; the process document is shared upon request.

07 Data Subject Rights

Under Article 11 of the KVKK, you have the following rights as a data subject:

1. To learn whether your personal data is being processed.
2. To request information if it has been processed.
3. To learn the purpose of processing and whether it is used in line with that purpose.
4. To know the third parties to whom data is transferred in Turkey / abroad.
5. To request correction if it has been processed incompletely or incorrectly.
6. To request deletion or destruction within the framework of the legislation.
7. To request notification of the transactions in (5–6) to third parties to whom the data has been transferred.
8. To object to any result against you arising from analysis by automated systems.
9. To request compensation if you have suffered damage due to unlawful processing.

08 Application & Response Period

You may submit your applications in writing to kvkk@proyaengineering.com. We respond within the statutory periods (no later than 30 days).

09 Update

This notice may be updated in line with changes in legislation, decisions of supervisory authorities, or our business processes. The effective date and version are shown in the top meta block of the page; previous versions are shared upon request.