GDPR / KVKK Notice

1. Data Controller

The data controller under Law No. 6698 on the Protection of Personal Data (KVKK):

2. Personal Data Processed

The following personal data is processed:

• Name and surname — from contact form
• Email address — from contact form or direct email
• Company name — from contact form (optional)
• Message content — from contact form
• Anonymous technical data — via Google Analytics (IP anonymised)

3. Purposes of Processing

• Responding to consulting inquiries
• Scheduling preliminary meetings
• Measuring and improving website performance anonymously

4. Legal Basis

Your personal data is processed on the following KVKK provisions:

• Art. 5/2-(c): Necessary for the establishment or performance of a contract
• Art. 5/2-(f): Legitimate interest (anonymous analytics)

5. Data Transfers

Your personal data is shared with a third party only in the following case:

• Google LLC (Google Analytics) — anonymous visitor statistics. Google is a US-based company; data transfer is made under Standard Contractual Clauses.

No data sharing with any other third party or institution is made.

6. Retention Periods

• Contact form data: until the business discussion concludes, or immediately upon your request
• Google Analytics data: 26 months per Google's policy (anonymous)

7. Your Rights (KVKK Art. 11)

You have the following rights regarding your personal data:

• Learning whether your personal data is processed
• Requesting information if processed
• Learning the processing purpose and whether it is used accordingly
• Knowing the third parties to whom data is transferred
• Requesting correction of incomplete or inaccurate data
• Requesting deletion or destruction
• Objecting to processing
• Claiming compensation for damages

8. How to Apply

To exercise your rights, you may apply to us in writing or via the email address below. Applications will be answered within 30 days.

info@sardesconsulting.com

Please include 'KVKK Application' in the subject line.