Privacy Notice (KVKK)

Last updated: 6 October 2026

1. Data controller

MTDE Technology (“MTDE Tech”) processes your personal data as the data controller under Law No. 6698 on the Protection of Personal Data (“KVKK”), as described in this notice.

2. Personal data we process

• Identity: first name, last name
• Contact: e-mail address, phone number, the company you work for
• Request details: the topic you select and the content of your message
• Transaction security: IP address, date and time, browser and device information
• Cookie data: explained in our Cookie Policy

We do not request special categories of personal data (such as health, religion or trade union membership) through the contact form. Please do not include such information in your message.

3. Purposes of processing

• We respond to your request and prepare a suitable service and quotation for you.
• We carry out pre-contract discussions and the contracting process.
• We keep our website secure and prevent misuse and unsolicited submissions.
• We comply with our legal obligations and meet our burden of proof in potential disputes.
• We send commercial electronic messages when you have given your explicit consent, or where Law No. 6563 and the related regulation allow it (for example, to the business e-mail address of a merchant or tradesperson). Every message includes a free way to opt out of receiving such messages at any time.

4. Collection method and legal bases

We collect your personal data electronically through the contact form on our website, by e-mail and by telephone. We base the processing on the following legal grounds in Article 5(2) of KVKK:

• It is directly related to the conclusion or performance of a contract (Art. 5/2-c)
• It is necessary for us to comply with a legal obligation (Art. 5/2-ç)
• It is necessary for the establishment, exercise or protection of a right (Art. 5/2-e)
• It is necessary for our legitimate interests, provided that your fundamental rights and freedoms are not harmed (Art. 5/2-f)

When we send commercial electronic messages, we also comply with Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages.

5. Who we share it with

We do not sell your personal data and do not share it with third parties for marketing purposes. We transfer your data only to the following recipient groups, limited to the stated purposes:

• Service providers that host our website and provide our e-mail and cloud infrastructure (to deliver the service)
• Our legal, financial and technical advisers (under a duty of confidentiality, to obtain advisory services)
• Authorized public authorities (as required by law, upon request)

The servers of our e-mail and cloud infrastructure may be located abroad. We carry out cross-border transfers in accordance with Article 9 of KVKK: we transfer data to countries covered by an adequacy decision of the Personal Data Protection Board. Where there is no adequacy decision, we transfer data provided that one of the appropriate safeguards listed in the article (for example, a standard contract notified to the Board) is in place. Where neither applies, we make transfers only in the exceptional cases provided for in the article.

6. Retention period

We keep the records of your request for 2 years after the request is concluded. If a contract is concluded between us, we keep the data for the periods required by the applicable legislation. At the end of the period, we delete, destroy or anonymize the data.

7. Your rights

Under Article 11 of KVKK, you may apply to us to:

• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used in accordance with that purpose,
• Know the third parties to whom it is transferred in Türkiye or abroad,
• Request correction if it is incomplete or inaccurate,
• Request deletion or destruction under the conditions in Article 7 of KVKK,
• Request that correction, deletion and destruction be notified to the third parties to whom the data has been transferred,
• Object to a result against you arising from the analysis of the processed data exclusively by automated systems,
• Request compensation for damages if you suffer harm due to unlawful processing.

8. How to apply

You may submit your requests through the following channels, in accordance with the Communiqué on the Procedures and Principles of Applications to the Data Controller:

• In writing with a wet signature, to: Orhantepe Mah. Albay Sedat Bey Sk. No: 6 Daire: 12 Kartal/İSTANBUL, Türkiye
• Signed with a secure electronic signature or a mobile signature, to [email protected]
• From the e-mail address you previously gave us and that is registered in our system, to [email protected]

Your application should include your first and last name, your signature (for written applications), your Turkish ID number (for foreigners, your nationality and passport or ID number), your residence or business address, your e-mail and phone number if any, and the subject of your request. Please write “Request under the Personal Data Protection Law” on the envelope or in the subject line of the e-mail.

We conclude your application free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. If the process requires a separate cost, we may charge the fee in the tariff set by the Personal Data Protection Board. If your application is rejected, the response is insufficient, or no response is given in time, you may file a complaint with the Personal Data Protection Board within 30 days of learning our response and in any case within 60 days of the application date.

9. Changes to this notice

We may update this notice in line with changes in legislation and in our services. The current text is published on this page; the date at the top of the page is the last update date.

This notice is published in Turkish and English. In case of any discrepancy between the two, the Turkish version prevails.