Last updated:
Data controller and contact details
Under Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller is Alkur Kapı Sistemleri Anonim Şirketi (“Alkur”).
- Address: Mimar Sinan Mah. Üsküdar Cad. Yedpa No: 1 H/1 (Pasaj 2) İç Kapı No: 111 34779 Ataşehir / İstanbul
- E-mail: info@alkur.com.tr
- Registered electronic mail (KEP): alkurkapi@hs02.kep.tr
This notice explains the actual personal-data processing activities on alkur.com.tr. For details of cookies and similar technologies, please see the Cookie Policy.
What data do we process, for what purpose and on what legal ground?
| Activity | Categories of personal data | Purpose and legal ground |
|---|---|---|
| Contact, quotation and measurement requests | Name and surname, e-mail, telephone, company, country, province/city/region, subject of the request, message, selected products, and measurement/request information submitted by the user | Responding to and assessing the request and taking steps before a quotation or contract: Article 5(2)(c) of the KVKK. Managing the request record, communications and potential disputes: Alkur’s legitimate interest under Article 5(2)(f) of the KVKK, provided that fundamental rights and freedoms are not harmed. |
| Security, abuse prevention, rate limiting and Cloudflare Turnstile verification | IP address, request time, browser/device signals, form and verification results, and similar transaction-security data | Protecting forms, the Site and information systems against bots, spam and unauthorised use: Alkur’s legitimate interest under Article 5(2)(f) of the KVKK, provided that fundamental rights and freedoms are not harmed. |
| Same-origin CSP/JavaScript error telemetry | Visited path, IP address, user agent, error type and limited technical error details | Protecting Site integrity and detecting security violations and software errors: Alkur’s legitimate interest under Article 5(2)(f) of the KVKK, provided that fundamental rights and freedoms are not harmed. |
| Google Analytics | Page address, visit and interaction data, browser/device information and analytics identifiers | Measuring Site use and improving performance: only with your explicit consent for the analytics category under Article 5(1) of the KVKK. |
| Meta Pixel | Page/event data, browser and device information, and marketing identifiers | Measuring advertising and campaign performance: only with your explicit consent for the marketing category under Article 5(1) of the KVKK. |
| YouTube video or Google Maps content loaded by the user | IP address, browser/device information, and technical data relating to the page and requested content | Providing the map or video that you expressly select: with your explicit consent under Article 5(1) of the KVKK. This content is not activated before you press the load or play control; processing details are explained in this notice and the Cookie Policy. |
If you initiate contact with Alkur by telephone, e-mail, WhatsApp or another external platform, the contact and request information you submit through that channel is processed for the contact/request purposes above. When you open an external link, the relevant platform’s own privacy notice and data-processing terms apply.
Collection method
Data is collected directly from you through form fields, e-mail, telephone or an external communication channel that you select; and electronically and automatically through HTTP requests to the Site, security records, browser storage and scripts belonging to categories to which you have consented. Correspondence and records created while Alkur employees follow up your request may also be processed by non-automatic means.
Recipient groups and transfer purposes
Personal data may be shared, only to the extent necessary for the relevant purpose, with the following recipient groups:
- Alkur departments and authorised employees responsible for responding to the request and conducting the commercial process;
- suppliers providing hosting, CDN/security and e-mail-delivery services to operate the Site and communication flow;
- Cloudflare for form security; subject to your separate choices, Google for analytics and user-requested content, and Meta for marketing measurement;
- authorised public bodies, judicial authorities and legal advisers where necessary to comply with a legal obligation or official request, or to establish, exercise or protect a right.
Transfers abroad
The infrastructure of Cloudflare, Google, Meta and other external platforms selected by the user may be located abroad or may process data abroad. Personal data may therefore be transferred abroad when the relevant service is activated, and that transfer is subject to the regime in Article 9 of the KVKK.
This privacy notice does not represent that an adequacy decision exists for a particular country or that particular standard contractual clauses have been notified to the Authority. The transfer mechanism and safeguards used are determined in separate operational and legal records before the relevant service is activated; no transfer should be made unless the conditions of Article 9 of the KVKK are met.
Retention and disposal
- Contact, quotation and measurement requests are retained only for as long as necessary to conclude the request, conduct the commercial relationship and comply with applicable statutory retention and limitation periods.
- Rate-limiting and security records are retained for short technical periods limited to the need to prevent abuse and investigate incidents.
- CSP/JavaScript error telemetry is held in capacity-limited, rotating technical logs; older records are deleted as the capacity is reached.
- The cookie preference is retained on your device for 180 days; the durations of analytics and marketing technologies are explained in the Cookie Policy.
When the purpose and legal ground for processing cease to exist, data is deleted, destroyed or anonymised in accordance with applicable legislation and Alkur’s retention and disposal rules. The provider-side retention period of data transferred to an external provider is subject to the relevant service settings, contract and provider policy.
Your rights under the KVKK
Under Article 11 of the KVKK, you may apply to Alkur to learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether it is used for that purpose; know the third parties to whom it is transferred in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction under the conditions in the law; request that correction, deletion or destruction be notified to third parties to whom the data was transferred; object to an outcome against you arising exclusively from analysis by automated systems; and request compensation for damage caused by unlawful processing.
Application method
You may exercise your rights by submitting an application through one of the following methods:
- in writing, by hand or by post, to Alkur’s address above;
- from your registered electronic mail account to alkurkapi@hs02.kep.tr;
- using a secure electronic signature or mobile signature;
- from an e-mail address that you previously notified to Alkur and that is registered in Alkur’s systems, to info@alkur.com.tr;
- through software or an application accepted by the Board and developed for application purposes.
The application must include your name and surname; signature for a written application; Turkish identity number for citizens of the Republic of Türkiye, or nationality and passport number or, where available, identification number for foreign nationals; residential or workplace address for notices; e-mail address, telephone and fax number for notices, where available; the subject of the request; and information/documents supporting the request.
Alkur responds to the application free of charge as soon as possible and no later than 30 days, depending on the nature of the request. If the operation requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may apply.