Privacy and personal data

Scope and information collected

This notice covers visitors to the SEZHEL website and people enquiring about our software or consulting services. The form contains your name, company, email address, optional phone number, area of interest and message. We do not request identity documents, health information or other special categories of personal data. Please do not include such information in your message.

When you visit the site, connection information such as your IP address, request time and requested page reaches the server. It is processed as necessary to serve the site and prevent abuse. An enquiry reference and the relevant privacy notice version are used alongside the information you provide.

Purposes and legal grounds

Service and quotation enquiries are assessed under Article 5/2(c) of Turkish Law No. 6698 where processing is necessary and directly related to entering into or performing a contract. Business representative correspondence and responses to general enquiries are assessed under Article 5/2(f), based on the legitimate interest in handling communications, provided your fundamental rights and freedoms are not harmed.

Technical data necessary to secure the website and prevent abuse is assessed under Article 5/2(f). Records required to establish, exercise or protect a specific legal claim are assessed under Article 5/2(e). Data is processed only to the extent necessary for the relevant purpose. Submitting an enquiry is not treated as permission for advertising or bulk marketing.

Collection and recipients

Information is collected electronically through the contact form, direct email correspondence and website access, using fully or partly automated methods. You choose the information you submit. If you do not provide the contact details needed to respond, we may be unable to handle your enquiry.

The website is hosted on the company server in Türkiye. SEZHEL personnel responsible for handling and responding to enquiries may access the information. Google Workspace provides email delivery and mailbox services; messages are received at [email protected]. Data is shared with Google and its subprocessors as necessary to provide those services. Where legally required, only the necessary information is provided to authorised public bodies or judicial authorities.

Cloudflare provides secure access, content delivery and protection against attacks. Page requests, your IP address and information entered in the contact form pass through Cloudflare to the company server. HTTPS terminates at Cloudflare and the connection to the company server continues through an encrypted tunnel. Cloudflare and subprocessors necessary to provide the service may process data for these purposes.

Hosting the web server in Türkiye does not mean that all processing through Google Workspace and Cloudflare takes place in Türkiye. These providers' service terms and account settings may involve processing at facilities outside Türkiye.

Retention and deletion

Enquiries that do not lead to a contract, together with related correspondence, are retained for 6 months after the enquiry is resolved and are then deleted. For enquiries that lead to a contract, only records necessary to perform the contract and meet applicable legal retention obligations are kept, limited to the relevant purposes and periods.

Records needed to establish, exercise or protect a specific legal claim are retained solely for that purpose until the need ends. Once the reason for retention no longer applies, data is deleted, destroyed or anonymised. Unnecessary copies and attachments are not kept separately. The service provider's backup and deletion processes are also considered when handling erasure.

The web application does not save form messages in a separate database or permanent application logs. Technical data is limited to what is necessary for security and for as long as needed. Temporary abuse-prevention and duplicate-request records are managed separately from messages held in the company mailbox.

The application uses a 15-minute IP rate-limit window. Duplicate-request records expire after 15 minutes and are cleaned up on subsequent requests once any pending operation has completed. They are held in temporary memory and disappear when the service restarts. These periods do not define how long emails are retained.

Cookies and similar technologies

With your permission, Google Analytics 4 measures page visits, the start of form use, successfully accepted enquiries and email- and phone-link clicks. Analytics cookies and measurement rely on your explicit consent (Article 5/1 of Turkish Law No. 6698). Refusal does not prevent using the site or sending a form. You can withdraw permission using Cookie preferences in the footer.

Cookie identifiers, visited pages, timestamps, browser and device information may be processed by Google Ireland Limited and Google entities and subprocessors needed to provide the service. Connections to Google also include your IP address. Processing may take place outside Türkiye. Form names, companies, email addresses, phone numbers, messages and enquiry references are not sent to Analytics. Query strings and fragments are excluded from measured page addresses. Only the source, medium, name and ID of predefined campaigns may be sent as separate measurement fields; free-form search terms and ad copy are not transmitted. Only the origin of recognised search engines and LinkedIn may be used for referral information. Phone and email clicks do not establish that a conversation or a message delivery occurred.

Before consent, the Analytics script is not loaded and no measurement request is sent to this service. Advertising personalisation and Google Signals are disabled. Withdrawing permission stops subsequent measurement and deletes accessible Analytics cookies belonging to the site. This does not automatically delete data previously sent to Google. Use the contact method below to request deletion.

Your analytics choice is remembered for 180 days in browser local storage under sezhel.analytics-consent. First-party Analytics cookies named _ga and starting with _ga_ are created only with permission and configured to last no more than 180 days; your browser may delete them earlier. The retention setting for user-level and event-level Analytics data is 2 months. Standard aggregated reports are outside the scope of that retention setting. These periods are separate from the 6-month enquiry correspondence policy.

Theme and language preferences are not stored persistently. Fonts are served by this website; your browser does not connect to Google Fonts to load them.

Cloudflare may use technically necessary cookies during security checks, for example to remember that a challenge has been completed. SEZHEL does not use these cookies to build advertising profiles.

How Google uses data (new tab)

Your rights and requests

Under Article 11 of Turkish Law No. 6698, you may learn whether your personal data is processed, request information about processing, learn its purpose and whether it is used accordingly, and learn the third parties receiving it in Türkiye or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction where the legal conditions are met, and notification of these actions to recipients. You may object to a result against you arising from analysis exclusively through automated systems and seek compensation for damage caused by unlawful processing.

You may apply in writing to the registered address on our contact page, or email [email protected] from an address you previously supplied to us and that is registered in our systems. Other valid application methods provided by law remain available. Your request should include the information required by the applicable rules to identify you and your request. Do not attach identity documents to the general contact form.

Requests are handled as soon as possible, depending on their nature, and within 30 days at the latest. If the process requires an additional cost, only a fee allowed by the applicable statutory tariff may be charged.