1. Data Controller
Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by DBPRO Bilişim Danışmanlık Ltd. Şti. (“DBPRO”) as data controller, as described below.
Address: Cevizli Mah. Tugay Yolu Cad. No:20 Ofisim İstanbul Plazaları B Blok Kat:2 Ofis:13 Maltepe / İstanbul, Türkiye
Email: [email protected] · Phone: +90 216 807 27 76
This notice covers visitors to the dbpro.com.tr website and people who use its contact form.
2. Personal Data Processed, Purposes and Legal Grounds
| Data category | Data processed | Purpose | Legal ground (KVKK Art. 5(2)) |
|---|---|---|---|
| Identity | First and last name | Assessing and responding to your enquiry | (c) Directly related to the conclusion or performance of a contract; (f) Legitimate interest of the data controller |
| Contact | Email address | Responding to your enquiry | (c), (f) |
| Request | Subject and message content | Assessing your enquiry and responding to requests for information or quotations | (c), (f) |
| Transaction security | IP address, browser information, date and time of visit (server logs) | Ensuring website security, preventing misuse and complying with legal obligations | (ç) Compliance with a legal obligation; (f) Legitimate interest |
| Cookie data | Cookie preferences; data collected by Google Maps if you consent | Remembering your cookie preferences; displaying map content | Strictly necessary cookies: (f); Google Maps: explicit consent under Art. 5(1) |
Please do not include special categories of personal data (health, religion, ethnic origin, etc.) in messages sent via the contact form.
3. Method of Collection
Your personal data is collected when you submit it via the contact form on our website, and automatically through server logs and cookies when you visit our website.
4. Transfer of Personal Data
Your personal data is not sold and is not shared with third parties for marketing purposes. Our website is hosted on DBPRO’s own servers located in Türkiye. Your data may be transferred only in the following cases:
- Email service provider: Messages sent via the contact form are received and stored through Microsoft 365 (Microsoft Corporation), our corporate email platform. As Microsoft’s data centres are located abroad, this transfer is carried out under Article 9 of KVKK on the basis of the standard contract and appropriate safeguards concluded with Microsoft.
- Google Maps: The map on our Contact page is loaded only with your explicit consent. In that case, your IP address and browser information are transferred to Google LLC and may be processed abroad. This transfer is based on your explicit consent under Article 9 of KVKK; if you do not consent, the map is not loaded and no data is transferred to Google.
- Competent public authorities: Where requested by legally authorised public institutions and judicial authorities, in compliance with our legal obligations.
5. Retention Periods
- Contact form messages: 2 years from the conclusion of the enquiry; if the enquiry leads to a business relationship, for the periods required by applicable legislation.
- Server logs: 2 years.
- Cookie preferences: 365 days. Details on cookies are available in our Cookie Policy.
Personal data whose retention period has expired is deleted, destroyed or anonymised.
6. Your Rights under Article 11 of KVKK
By applying to the data controller, you have the right to:
- learn whether your personal data is processed,
- request information if your personal data has been processed,
- learn the purpose of processing and whether the data is used in line with that purpose,
- know the third parties in Türkiye or abroad to whom your personal data is transferred,
- request rectification of incomplete or inaccurate data,
- request erasure or destruction of your personal data under the conditions set out in Article 7 of KVKK,
- request that rectification, erasure or destruction be notified to third parties to whom your data has been transferred,
- object to a result to your detriment arising from analysis of your data exclusively by automated systems,
- claim compensation for damages arising from unlawful processing of your personal data.
7. How to Apply
You can submit your requests, together with information that identifies you and in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- in writing with a wet-ink signed petition, in person or via a notary, to the address above,
- via registered electronic mail (KEP), secure electronic signature or mobile signature,
- from an email address you have previously provided to us and that is registered in our systems, to [email protected].
Your request will be concluded free of charge within 30 days at the latest, depending on its nature. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
8. Updates
This Privacy Notice is updated whenever our data processing activities or the applicable legislation change. The current version is always published on this page.