Privacy Policy

AGATA Enerji Sanayi ve Ticaret Limited Şirketi (“AGATA”, “we”, “us”) respects your privacy. This Privacy Policy explains what personal data we collect through www.agata.com.tr (the “Site”), why we collect it, who we share it with, how long we keep it, and what rights you have.

AGATA is established in Türkiye. We process personal data in accordance with Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and, where it applies to you, the EU General Data Protection Regulation (“GDPR”).

1.1. Data Controller

AGATA Enerji Sanayi ve Ticaret Limited Şirketi

Beytepe Mh. Enver Türkileri Sk. No:4/13, Çankaya, Ankara, Türkiye

Trade Registry No: 451976, Ankara Trade Registry Directorate

MERSIS No: 0009147954100001

Tax Number: 0009147954

Email: info@agata.com.tr

Telephone: +90 312 511 10 51

1.2. Personal Data We Collect

When you submit the contact form on the Site, we collect:

  • Name
  • Email address
  • Telephone number
  • Company or organisation name
  • The content of your message
  • Technical data captured automatically with the submission (IP address, browser type, timestamp)

Where you consent to analytics cookies, we also collect information about how you navigate the Site. See the Cookie Policy for details.

We do not knowingly collect special categories of personal data. Please do not include sensitive information in your message.

1.3. Why We Process Your Data and on What Legal Basis

Purpose

Legal basis (KVKK)

Legal basis (GDPR)

Responding to your enquiry

Necessary for steps preceding a contract, at your request (Art. 5/2-c)

Art. 6(1)(b)

Business development, proposals and tendering

Legitimate interest of the controller (Art. 5/2-f)

Art. 6(1)(f)

Site security and spam prevention

Legitimate interest (Art. 5/2-f)

Art. 6(1)(f)

Meeting legal and regulatory obligations

Legal obligation (Art. 5/2-a)

Art. 6(1)(c)

Analytics cookies

Explicit consent

Art. 6(1)(a)

 

1.4. Who We Share Your Data With

We share personal data only as far as necessary for the purposes above, with:

  • Our hosting and server provider
  • Google LLC, for website analytics (Google Analytics)
  • Cloudflare, Inc., for content delivery, security and abuse prevention
  • Our professional advisers (legal, accounting), where required
  • Competent public authorities, where we are legally obliged to disclose

We do not sell or rent personal data to third parties, and we do not use it for automated decision-making that produces legal effects for you.

1.5. International Transfers

Some of the service providers listed above are established outside Türkiye. Where personal data is transferred abroad, we do so in accordance with Articles 8 and 9 of the KVKK – on the basis of your explicit consent, an adequacy decision of the Turkish Personal Data Protection Board, or an approved transfer instrument such as standard contractual clauses. For transfers subject to the GDPR, we rely on the safeguards set out in Chapter V of the Regulation.

1.6. How Long We Keep Your Data

Data

Retention period

Contact form enquiries that do not lead to a business relationship

24 months from the date of last contact

Enquiries that lead to a contract or ongoing business relationship

Duration of the relationship, plus 10 years – in line with the record-keeping requirement of Article 82 of the Turkish Commercial Code and the general limitation period under the Turkish Code of Obligations

Server access logs

12 months

Analytics data

14 months (Google Analytics retention setting)

 

At the end of the applicable period, data is deleted, destroyed or anonymised in accordance with our retention and destruction procedure.

1.7. Your Rights

Under Article 11 of the KVKK you have the right to:

  • Learn whether your personal data is being processed
  • Request information if it has been processed
  • Learn the purpose of processing and whether the data is used accordingly
  • Know the third parties, in Türkiye or abroad, to whom the data has been transferred
  • Request correction of incomplete or inaccurate data
  • Request erasure or destruction of the data within the conditions of Article 7
  • Request that corrections and erasures be notified to third parties to whom the data was transferred
  • Object to a result reached solely through automated analysis that is to your detriment
  • Claim compensation for damage arising from unlawful processing

If the GDPR applies to you, you additionally have the rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time and the right to lodge a complaint with your national supervisory authority.

1.8. How to Exercise Your Rights

Submit your request in line with the Turkish Communiqué on the Procedures and Principles of Application to the Data Controller:

  • In writing to our registered address above, delivered in person or through a notary
  • By email to info@agata.com.tr, signed with a secure electronic signature or mobile signature

We will respond free of charge within thirty days at the latest, depending on the nature of the request.

1.9. Security

We apply reasonable technical and administrative measures to protect personal data against unauthorised access, loss and misuse, including encrypted transmission (HTTPS), access control on our systems and restriction of access to enquiry data to personnel who need it. No transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

1.10. Third-Party Links

The Site may link to third-party websites, for example LinkedIn. AGATA is not responsible for the privacy practices of those sites.

1.11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always published on this page, with the effective date shown above.