Data Protection & Privacy Notice (KVKK Compliance)
At TruthTec, we place the utmost importance on safeguarding your personal data. In line with the Law on the Protection of Personal Data No. 6698 (KVKK), we process and protect personal information in a lawful, fair, and transparent manner.
This notice explains how we collect, process, store, and protect your personal data, as well as the rights you are entitled to as a data subject.
1. Data Controller
- Data Controller: TruthTec
- Address: Anbar Mah. 54. Cad. No:47/A, Melikgazi, Kayseri / Turkey
- E-mail: info@truthtec.com.tr
- Phone: +90 352 513 38 04
2. Purposes of Processing Personal Data
We may process your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Service delivery and technical support | Preparing quotations, managing orders, providing maintenance and support |
| Contractual obligations and compliance | Establishing, executing, and monitoring contracts; fulfilling legal requirements |
| Customer communication | Notifications, inquiries, complaints, feedback, and customer satisfaction management |
| Business process improvement | Operational efficiency, quality assurance, and internal process optimization |
| Billing and financial operations | Invoicing, collections, and accounting procedures |
| Compliance with legal obligations | Sharing information with authorities as required by law or regulation |
| Marketing and promotional activities* | Campaign announcements, newsletters, digital marketing (only with your explicit consent) |
* For marketing purposes, we always obtain your explicit consent. You may withdraw your consent at any time.
3. Categories of Personal Data Processed
The personal data we may collect and process includes:
- Identity data: Full name, title, Turkish ID number, date of birth
- Contact data: Address, phone number, e-mail address
- Corporate data: Company name, tax number, registration details
- Technical data: IP address, browsing logs, system usage records
- Financial and legal data: Billing information, bank account details, payment history
- Business data: Contracts, correspondence, proposals, project documentation
- Marketing and preference data: Communication consents, preferred contact channels
4. Transfer of Personal Data
Your personal data may be shared, in compliance with KVKK Articles 8 and 9, with:
- Subsidiaries, affiliates, and group companies
- Business partners, suppliers, and service providers (e.g., logistics, IT support, accounting)
- Competent authorities, regulators, and courts, where legally required
- International partners or contractors, provided that adequate safeguards are ensured
We require all third parties with whom we share data to adopt strict confidentiality and data protection measures.
5. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes described above, or as required by law. After this period, data is securely deleted, anonymized, or destroyed.
For example:
- Contractual data is retained until the statute of limitations or contractual obligations expire.
- Financial and tax records are retained for the legally required retention period (e.g., 5 years).
- Marketing data is kept until consent is withdrawn.
6. Rights of Data Subjects
Under Article 11 of the KVKK, you are entitled to the following rights:
- To learn whether your personal data is being processed
- To request information about the processing, if applicable
- To understand the purposes of processing and whether your data is being used accordingly
- To know the domestic or international third parties to whom data is transferred
- To request the correction of incomplete or inaccurate data
- To request deletion or destruction of data, where legally permissible
- To object to data processing in certain circumstances
- To claim compensation in case of unlawful processing or damages
You may exercise your rights by contacting us at info@truthtec.com.tr or by submitting a written application to our registered address.
7. Consent and Transparency
- Where required, we will always seek your explicit consent before collecting and processing personal data.
- Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
- Even after consent is withdrawn, we may continue to process data only if legally required.
8. Data Security
We implement strict technical and organizational measures to ensure the security of personal data, including but not limited to:
- Access control and authorization systems
- Encryption and secure data transfer protocols (SSL/TLS)
- Regular back-ups and disaster recovery planning
- Firewalls, anti-virus, and intrusion detection systems
- Staff training and awareness programs
- Internal audits and compliance procedures
9. Updates to This Notice
TruthTec reserves the right to amend this Privacy & Data Protection Notice in line with legislative updates or internal policy changes. Any updates will be published on our official website.