KVKK Data Protection Notice
Statutory disclosure regarding the collection, processing, retention, and subject rights concerning personal data pursuant to Law No. 6698 (KVKK).
As Natustech Teknoloji A.Ş., we enforce enterprise-grade data privacy, cybersecurity, and regulatory governance across all digital operations.
🛡️ Statutory Compliance & Privacy Commitment
Natustech strictly processes personal data solely for legitimate statutory business purposes. We never commercialize or sell personal data to third parties, and all digital assets are protected under audited ISO 27001 enterprise security standards.
1. Identity of the Data Controller
Pursuant to the Law on the Protection of Personal Data No. 6698 ("KVKK"), Natustech Teknoloji Anonim Şirketi ("Natustech") acts as the data controller and is committed to ensuring full legal compliance, confidentiality, and transparency regarding all personal data processed through our corporate websites and digital channels.
2. Categories of Processed Personal Data
Depending on your interaction with our platforms and inquiry forms, we may process:
- ✓Identity Details: Full name, title, corporate affiliation, and department.
- ✓Contact Details: Business email address, telephone number, and corporate office location.
- ✓Inquiry & Consultation Details: Project scope, architectural requirements, and business context submitted via demo and contact forms.
- ✓Technical & Security Logs: IP addresses, session identifiers, timestamps, browser metadata, and server audit logs.
3. Purposes of Processing Personal Data
Your personal data is processed strictly for:
- ✓Evaluating and responding to inquiries regarding enterprise workflow platforms (BPM), quality management (QMS), and SaaS solutions,
- ✓Preparing technical architecture proposals and scheduling client discovery sessions,
- ✓Maintaining information security, threat prevention, and high-availability server operations,
- ✓Fulfilling statutory audit, reporting, and regulatory legal compliance obligations.
4. Collection Methods and Legal Grounds
Personal data is collected through electronic forms, direct communications, and automated system logs on natustech.com. Processing operations rely on the statutory grounds set forth in Article 5 of Law No. 6698:
- ✓Directly related to the conclusion or performance of a contract (Art. 5/2-c): Managing project inquiries and advisory proposals.
- ✓Mandatory for compliance with legal obligations (Art. 5/2-ç): System access logging under Law No. 5651.
- ✓Legitimate interests of the data controller (Art. 5/2-f): Maintaining cybersecurity, platform resilience, and service excellence without infringing upon fundamental rights.
5. Transfers of Personal Data & Third Parties
Natustech never sells, monetizes, or commercializes personal data to third parties. Data is shared exclusively with authorized regulatory bodies upon lawful request, or with ISO 27001 certified cloud infrastructure partners under strict confidentiality agreements.
6. Data Retention and Secure Disposal
Personal data is retained only for the duration required by statutory retention periods under the Turkish Commercial Code and applicable laws. Upon expiration of the required period or elimination of processing grounds, data is irreversibly purged, destroyed, or anonymized in accordance with statutory disposal regulations.
7. Rights of the Data Subject (Article 11)
Under Article 11 of the KVKK and international privacy norms, data subjects have the right to learn whether data is processed, request information, learn processing purposes, request rectification or erasure, object to adverse automated outcomes, and claim compensation for unlawful processing.
8. Application Procedure and DPO Contact
You may submit your statutory requests along with identity verification documents to info@natustech.com via secure electronic signature, or in writing to our corporate headquarters. All formal applications are resolved free of charge within a maximum of 30 days.