This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. For visitors in the European Union it also contains the information required by Article 13 of the General Data Protection Regulation ("GDPR").
In case of any discrepancy between this English version and the Turkish version, the Turkish version prevails.
1. Data controller
| Company | IDE Smart Teknoloji Anonim Şirketi ("IDE Smart", "we") |
| Address | Bilişim Vadisi, Muallimköy Mah. Deniz Cad. No: 143-8 C1 Blok, Gebze / Kocaeli, Türkiye |
| MERSIS No | 0465163208600001 |
| Trade Registry No | 48053 |
| info [at] idesmart.com | |
| Phone | +90 (216) 909 0195 |
2. Scope
This notice covers only the idesmart.com corporate website (the "Site"). Data processed while using IDE Smart's software products (e.g. IDE Hub, IDE Smart Identity) and devices is governed by the privacy policy of the respective product.
The Site has no user accounts, sign-in, payments or online sales. You do not need to provide any personal information to browse the Site.
3. Personal data we process
3.1 Contact form
When you submit the contact form, we process:
| Category | Data |
|---|---|
| Identity | Full name |
| Contact | Email address, phone number |
| Customer transaction | Company name, selected subject, the content of your message, the language of the form |
| Transaction security | Reference number and creation time of your request |
Please do not include information that is not needed (for example special categories of personal data) in your message; it is not required to answer your request.
3.2 Technical data
- IP address (abuse prevention): The contact form uses your IP address to prevent a large number of submissions in a short time. It is kept only in server memory for at most one hour and is never written to the database.
- Server access logs: Our server keeps standard access logs (IP address, date and time, requested address, browser information) for security and troubleshooting. These logs are kept for at most 30 days and are not used for any other purpose.
3.3 Data stored in your browser
The Site stores a small number of records in your browser that it needs to work (for example your cookie choice). No advertising or analytics cookies are used. See the Cookie Policy for details.
4. Purposes
- Receiving and assessing your enquiry and getting back to you,
- Handling the quotation, information or support process related to your enquiry,
- Confirming by email that we have received your request,
- Keeping the Site and the contact form secure and preventing abuse (spam, automated submissions),
- Complying with legal obligations and protecting our rights in potential disputes.
Your data is not used to send marketing messages. If we ever wish to send you commercial electronic messages, we will ask for your separate consent.
5. Method of collection and legal bases
Data is collected electronically, partly by automated means, through the contact form on the Site.
| Purpose | KVKK Art. 5(2) | GDPR Art. 6(1) |
|---|---|---|
| Answering your enquiry; quotation and information process | (c) Directly related to the establishment of a contract | (b) Pre-contractual steps |
| Sending the receipt confirmation | (f) Legitimate interest | (f) Legitimate interest |
| Security and abuse prevention | (f) Legitimate interest | (f) Legitimate interest |
| Legal obligations; protecting our rights | (ç) Legal obligation; (e) establishment, exercise or protection of a right | (c) Legal obligation; (f) Legitimate interest |
We do not need your explicit consent to answer your enquiry, so the form does not ask for it.
6. Recipients and transfers
6.1 Within Türkiye
Your data is shared with the IDE Smart employees who handle your enquiry and, only upon the request of public authorities legally entitled to it, with those authorities to the extent requested.
The Site and the contact form records are stored on the infrastructure of our hosting (server) provider, which operates from a data centre in Türkiye. This provider processes the data only on our behalf and on our instructions (as a data processor).
6.2 Outside Türkiye
Your contact form data is processed abroad through our corporate email service:
| Recipient | Location | Data | Purpose |
|---|---|---|---|
| Google (Google Workspace) | EU / USA | Contact form data (as part of emails) | Corporate email; forwarding your request to our team and sending you a receipt confirmation |
This transfer is made on the basis of standard contractual clauses under Article 9 of KVKK.
7. Retention
| Data | Period |
|---|---|
| Contact form records | 2 years from submission |
| IP address (abuse prevention) | At most 1 hour, in server memory only |
| Server access logs | At most 30 days |
| Receipt confirmation and correspondence | 2 years after your request is closed; if it leads to a contract, the retention periods required by the applicable legislation |
Data whose retention period has expired is deleted or anonymised in the periodic destruction carried out at least every six months under the Turkish Regulation on the Deletion, Destruction or Anonymisation of Personal Data. If you ask us to delete your data, we delete it without waiting for this period unless we have a legal reason to keep it.
8. Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss and misuse: the connection between you and the Site is encrypted (HTTPS/TLS), access to the database is limited to authorised staff, and your email address and phone number are masked in the automated emails sent to you. See the Security page for details.
9. Your rights
Under Article 11 of KVKK you have the right to:
- learn whether your personal data is processed,
- request information about the processing,
- learn the purpose of the processing and whether the data is used accordingly,
- know the third parties to whom your data is transferred in Türkiye or abroad,
- request rectification of incomplete or inaccurate data,
- request erasure or destruction of your data under the conditions of Article 7 of KVKK,
- request that rectification, erasure or destruction be notified to third parties to whom the data has been transferred,
- object to a result against you arising from the analysis of your data exclusively by automated systems,
- claim compensation for damage suffered due to unlawful processing.
Visitors in the EU additionally have the rights of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest under the GDPR.
10. How to exercise your rights
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request:
- By email: to info [at] idesmart.com, from the email address you used in the form, with the subject "KVKK Request",
- In writing: with a wet-signed letter to our address in section 1.
Please state your full name, contact details and your request clearly. We may ask for additional information to verify your identity.
We will respond within 30 days at the latest and free of charge. If the request involves an additional cost, the fee set by the Turkish Personal Data Protection Board may be charged.
If your request is rejected, you find the response insufficient, or we do not respond in time, you may lodge a complaint with the Turkish Personal Data Protection Board (www.kvkk.gov.tr). Visitors in the EU may also contact the data protection authority of their country.
11. Children
The Site is not directed at persons under 18. If you are under 18, please do not use the contact form.
12. Changes
We may update this notice when our processing activities or the legislation change. The current version is always published on this page; the "Last updated" date at the top shows when it took effect.