Skip to content
Back to home

Personal Data Processing Notice for Estimate Requests and Enquiries

Draft

This text is a draft. Highlighted fields have not yet been confirmed, and the text does not take effect until legal review is complete.

This notice is provided under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains how your personal data is processed when you send an estimate request through the form on kaylora.com.tr or contact us by email. This notice is not a request for explicit consent. The estimate request form is currently closed; the sections about the form describe the processing that will apply once it is opened.

Last updated: To be confirmed: publication date

1. Data controller

KAYLORA DİJİTAL is a brand name. The data controller for these requests is To be confirmed: name or title of the data controller, legal status and address.

Contact channel for the data controller: To be confirmed: contact address for KVKK requests.

2. Personal data we process

The estimate request form collects the following data:

  • Identity: full name.
  • Contact details: email address and, optionally, phone number.
  • Request details: whether you apply as an individual or a company, the company name for company requests, the service you are interested in, optionally an estimated budget and target delivery date, your project description, the form language and the reference number assigned to your request.
  • Transaction security: your IP address. It is used only to block large numbers of submissions in a short period (rate limiting). It is not kept in readable form; only an irreversible hash is held temporarily in server memory and is cleared when the server restarts.

The form does not ask for special categories of personal data (for example health, religion or criminal records). Please do not include such information in your project description.

Technical access logs that may be created on the hosting provider's servers when you visit the site: To be confirmed: to be determined based on the hosting provider.

3. Purposes of processing

  • To assess your estimate request and contact you about it.
  • To prepare and send you a tailored, non-binding estimate.
  • To keep the request process secure and block automated or abusive submissions.

Your personal data is not used for marketing, profiling or advertising.

4. Method of collection and legal basis

Your personal data is collected directly from you, electronically, when you complete the estimate request form on the website or send us an email.

Legal basis for each purpose: To be confirmed: to be confirmed through legal review; bases under consideration are KVKK Art. 5(2)(c) "directly related to the establishment or performance of a contract" and, for security processing, Art. 5(2)(f) "legitimate interest of the data controller".

5. Transfers of personal data

Information submitted through the form is delivered by email to the data controller's mailbox. Service providers used for this delivery and for running the website: To be confirmed: names and countries of the email and hosting providers.

Transfers abroad: To be confirmed: whether any will take place and, if so, the basis under KVKK Art. 9.

Apart from this, your data is not sold or rented to third parties. It may be disclosed only to authorities legally entitled to request it, where required by a legal obligation.

6. Retention

Form content is not stored on the website or in a database; it is only delivered by email. Retention period in the mailbox: To be confirmed: retention period and deletion method at the end of the period.

7. Your rights under KVKK Article 11

Under Article 11 of KVKK, you may apply to the data controller to:

  • learn whether your personal data is processed;
  • request information about the processing if it has taken place;
  • learn the purpose of the processing and whether the data is used in line with that purpose;
  • know the third parties in Türkiye or abroad to whom your data is transferred;
  • request correction if your data is incomplete or inaccurate;
  • request deletion or destruction of your data under the conditions set out in Article 7 of KVKK;
  • request that third parties to whom your data was transferred be notified of any correction, deletion or destruction;
  • object to a result against you arising from analysis of your data exclusively by automated systems;
  • claim compensation if you suffer damage due to unlawful processing of your personal data.

8. How to apply

You may submit requests regarding your rights to To be confirmed: application address using the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller: in writing; via registered electronic mail (KEP), secure electronic signature or mobile signature; or from an email address you have previously provided to the data controller and that is recorded in its systems.

Requests are concluded free of charge as soon as possible and within 30 days at the latest, depending on their nature. If the action requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your request is rejected, you find the response insufficient, or no response is given in time, you may file a complaint with the Board under Article 14 of KVKK.