Privacy notice under Turkish law (KVKK)

Data controller

• VECTA OTOMOTİV DİJİTAL PAZARLAMA LİMİTED ŞİRKETİ (“we”)
• Address: Dumlupınar Mah. Şehit Turgut Çiçek Cad. Altek Plaza A Blok Kapı No:1A Daire No:26 Kartepe / Kocaeli
• MERSIS no.: 0627106002400001

Scope of this notice

This notice covers processing for which we are the data controller: website visits, the site question tool and quote requests.

In the Digitium mobile app and admin panel, the institution is the data controller for its student, parent and teacher data, and we process that data as a data processor. The institution provides the privacy notice for that data. General information about processing in the app is in our privacy policy.

• Privacy policy

Personal data we process

• Identity: full name.
• Contact: phone number, email address (optional).
• Request details: institution name and type, student count range, your message (optional).
• Question tool: the question you type into the “Ask a question” tool.
• Security: server logs kept by our hosting provider when you visit the site (IP address, browser details, requested page and time).

Purposes and legal grounds

• Responding to your quote request, contacting you by phone or WhatsApp and preparing a quote: processing directly related to entering into a contract (KVKK Art. 5(2)(c)).
• Answering questions typed into the site question tool: our legitimate interest (Art. 5(2)(f)).
• Keeping the website secure and preventing abuse: our legitimate interest (Art. 5(2)(f)).

How we collect data

Form data is collected directly from you, electronically, when you submit the quote form. Server logs are created automatically when you visit the site. The site uses no cookies.

Who we transfer data to

• Our hosting provider Render (US-based; server region Frankfurt, Germany): server logs of website visits.
• AI providers (Groq, USA; Cloudflare as backup): the text of the question typed into the question tool.
• Our email provider Resend (Plus Five Five, Inc., USA): form details and the notification email, which reach our team's mailbox this way.
• Authorised public bodies, when legally required.

Because these providers are outside Türkiye, this data is transferred abroad. Form details are not stored in a database.

Retention

The notification email stays in our team's mailbox for at most 1 year from the request. The email provider's message record is deleted after 30 days and the hosting provider's server logs after 7 days. If your request leads to a contract, contact details are kept separately under that contract.

Your rights

Under Article 11 of the KVKK, you may apply to the data controller to:

• find out whether your personal data is processed,
• request information about the processing,
• learn the purpose of processing and whether data is used accordingly,
• know the third parties in Türkiye or abroad to whom data is transferred,
• request correction of incomplete or inaccurate data,
• request erasure or destruction of data under the conditions in Article 7 of the KVKK,
• request that third parties who received the data be notified of any correction, erasure or destruction,
• object to a result against you arising solely from automated analysis of your data,
• claim compensation for damage caused by unlawful processing.

How to apply

You can send your request in writing to Dumlupınar Mah. Şehit Turgut Çiçek Cad. Altek Plaza A Blok Kapı No:1A Daire No:26 Kartepe / Kocaeli, in line with the Communiqué on the Procedures and Principles for Applications to the Data Controller.

We respond free of charge within 30 days at the latest. If the request involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.