Privacy Policy and KVKK Notice

1. Identity of the Data Controller

Pursuant to KVKK Art. 10, the data controller is EZO VEGA Yazılım ve Otomasyon. Address: Kızılırmak Mah. 1450. Sok. No:9/23, Ulusoy Plaza Çukurambar, Çankaya / Ankara. Request email: info@ezovega.com. Phone: +90 501 001 21 12.

2. Scope

• This notice applies to the corporate Site (marketing pages, contact form and public content).
• Data processed in the Santrals product application is governed by that product's privacy policy and customer agreements.
• This general notice does not replace activity-specific notices that may be required in particular contexts.

3. Categories of Personal Data

• Identity and contact: name, email address, phone number, company name (if you provide them).
• Communication content: message text, subject selection and related enquiry details.
• Security of processing: IP address, browser information (user-agent), access time and technical logs.
• Preferences: functional preferences such as language selection.

4. Purposes of Processing

• Receiving, evaluating and responding to contact and proposal requests.
• Maintaining Site security, preventing abuse and resolving technical issues.
• Complying with legal obligations and preserving rights and evidence in disputes.
• Improving the Site experience (limited to necessary technical data).

5. Collection Method and Legal Bases

Personal data may be obtained wholly or partly by automated means via the contact form, email and the Site's technical logs. Legal bases include:

• Art. 5/2(c) — necessary for establishing or performing a contract: evaluating your request and responding.
• Art. 5/2(f) — legitimate interests, provided fundamental rights are not harmed: information security, abuse prevention and service quality.
• Art. 5/2(ç) — compliance with a legal obligation: retention duties and responses to competent authorities.
• Art. 5/2(e) — establishment, exercise or protection of a right: evidence in disputes.
• Special categories of personal data are not requested; data falling under KVKK Art. 6 should not be submitted via the form.

6. Cookies and Local Storage

• The Site does not use advertising or behavioural tracking cookies.
• Functional cookies or local storage may be used for preferences such as language.
• Theme preference may be stored in your browser's local storage.

7. Transfers and Recipient Groups

Personal data may be transferred, limited to the purposes above, to the following recipient groups.

• Hosting and content delivery: the Site is served on Vercel infrastructure.
• Domain and DNS services: Google Cloud DNS.
• Email infrastructure: systems used to respond to your requests.
• Competent public authorities and, where required, legal advisors.

8. International Transfers

Because hosting and CDN infrastructure may be located outside Türkiye, transfers are carried out under the conditions of KVKK Art. 9 with appropriate contractual safeguards.

9. Retention Periods

Personal data is retained for as long as required by the processing purpose and for any longer period mandated by law or limitation periods.

• Contact form records: until the request is concluded and for a reasonable follow-up period; then deleted or anonymised.
• Technical security logs: for short to medium periods as needed for information security.
• When the period ends, data is deleted, destroyed or anonymised.

10. Data Security

• TLS encryption is used for data in transit.
• Access is limited to authorised personnel.
• Despite measures taken, absolute security of internet transmissions cannot be guaranteed.

11. Rights of the Data Subject

Under KVKK Art. 11, you may apply to the data controller to exercise the following rights.

• Learn whether your personal data is processed.
• Request information if it has been processed.
• Learn the purpose of processing and whether it is used accordingly.
• Know the third parties to whom data is transferred domestically or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction under the conditions of KVKK Art. 7.
• Request that correction, deletion or destruction be notified to third parties to whom data was transferred.
• Object to a result against you arising from exclusive analysis by automated systems.
• Claim compensation for damage caused by unlawful processing.

12. How to Apply

• You may submit requests in writing to Kızılırmak Mah. 1450. Sok. No:9/23, Ulusoy Plaza Çukurambar, Çankaya / Ankara or to info@ezovega.com, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.
• Applications should include your name, contact details, the subject of the request and any supporting documents.
• Applications are answered free of charge within 30 days at the latest; if the process incurs an additional cost, the fee set by the Board may apply.

13. Children's Data

The Site is publicly accessible but is not directed at persons under 18. If we become aware that such data has been processed, it will be deleted.

14. Changes to this Policy

This notice may be updated to reflect legal or Site changes. The current version is published on this page with an updated effective date.