Last updated: 3 September 2026
This is an English translation provided for information. The legally binding text is the Turkish original, prepared under Turkish Personal Data Protection Law no. 6698 (KVKK). In the event of any discrepancy, the Turkish version prevails.
This notice has been prepared by Deha Altyapı A.Ş. as data controller, under Article 10 of Turkish Personal Data Protection Law no. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It is addressed to individuals who visit www.dehaaltyapi.com.tr, use the contact form, or contact us by e-mail.
1. Data controller
Company: Deha Altyapı A.Ş.
Address: Mevlana Bulvarı, Ege Plaza No:182/60, Balgat / Çankaya / Ankara, Türkiye
Telephone: +90 312 442 27 40
E-mail: info@dehaaltyapi.com.tr
Registered electronic mail (KEP): dehaaltyapi@hs01.kep.tr
2. Personal data we process
The following personal data is processed through our website. The site has no membership, account, payment or comment functionality.
| Category | Personal data | Collected through |
|---|---|---|
| Identity | Name, surname | Contact form, e-mail, job application |
| Contact | E-mail address, telephone number | Contact form, e-mail, job application |
| Customer transaction | Subject of your enquiry and message content | Contact form, e-mail |
| Transaction security | IP address, date and time of submission, consent record, cookie preference | Contact form, server logs, cookie |
| Professional experience | Education, work experience, certificates, references and similar information included in your CV | Job application by e-mail |
We ask that you do not include special categories of personal data in your CV — health, criminal conviction, membership of associations or unions, religion or sect. Such data is not required to assess your application, and your application is evaluated without regard to it.
3. Purposes of processing
- Responding to and following up enquiries, questions, proposals and partnership requests sent through the contact form or by e-mail
- Holding preliminary discussions with prospective suppliers, subcontractors and business partners, and conducting pre-contractual processes
- Receiving and assessing career applications and conducting recruitment processes
- Managing press and corporate communications enquiries
- Maintaining the security of the website and preventing misuse and automated (bot) submissions
- Fulfilling our legal obligations and responding to requests from competent authorities
- Establishing, exercising and protecting our rights in the event of a dispute
4. Method of collection and legal grounds
Your personal data is collected by partly automated means through the contact form on our website, e-mails you send us, telephone conversations, and the log records kept automatically by the server while the site operates.
Data is processed on the legal grounds set out in Article 5 of the KVKK:
| Processing activity | Legal ground (KVKK art. 5) |
|---|---|
| Responding to your enquiry | Directly related to the conclusion or performance of a contract (art. 5/2-c); our legitimate interest in responding to your enquiry (art. 5/2-f) |
| Assessing your job application | Necessary for the conclusion of an employment contract (art. 5/2-c) |
| Retaining your application for future vacancies | Your explicit consent (art. 5/1) |
| Recording IP address and time of submission | Provided for by law (art. 5/2-a) and our legitimate interest in site security (art. 5/2-f) |
| Keeping the consent record | Fulfilment of our legal obligation (art. 5/2-ç) |
| Responding to requests from competent authorities | Fulfilment of our legal obligation (art. 5/2-ç) |
The consent box on the contact form is used to record that you have read this notice and accept the processing of your data for the purpose of responding to your enquiry. Where processing is based on explicit consent, you may withdraw that consent at any time; withdrawal does not affect the lawfulness of processing carried out before that date.
5. Transfer of personal data
Your personal data may be transferred only to the following categories of recipient, limited to the purposes above and in accordance with Article 8 of the KVKK:
- Competent public authorities: upon the request of legally authorised courts, prosecutors and administrative bodies
- Service providers: the suppliers providing the server and e-mail infrastructure on which the website is hosted (only to the extent required by the service, and as data processors)
- Group companies: where the subject of your enquiry concerns another of our group companies, so that it reaches the right unit
- Legal and financial advisers: in the event of a dispute or legal obligation
Your personal data is not transferred abroad. Our website uses no third-party analytics, advertising or social media plug-ins.
6. Retention periods
| Data | Retention period |
|---|---|
| Contact form messages | 2 years from conclusion of the enquiry |
| Job applications (CVs) | 1 year from the end of the assessment process; up to 2 years where explicit consent has been given |
| Enquiries that become a contractual relationship | 10 years from the end of the contract (limitation period under Turkish Code of Obligations no. 6098) |
| Server access logs (IP, time) | At least 1 and at most 2 years under Law no. 5651 |
| Cookie preference | 180 days (stored in your browser) |
At the end of the period, your data is erased, destroyed or anonymised in accordance with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.
7. Your rights as a data subject
Under Article 11 of the KVKK you have the right to apply to the data controller and:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether the data is used in accordance with that purpose
- Know the third parties to whom the data has been transferred, in Türkiye or abroad
- Request correction if the data is incomplete or inaccurate
- Request erasure or destruction under the conditions in Article 7 of the KVKK
- Request that correction, erasure and destruction be notified to third parties to whom the data was transferred
- Object to an adverse outcome arising from analysis carried out solely by automated systems
- Claim compensation if you suffer loss as a result of unlawful processing
8. How to apply
You may submit requests concerning your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, by the following means:
- In writing: in person or through a notary to “Mevlana Bulvarı, Ege Plaza No:182/60, Balgat / Çankaya / Ankara, Türkiye”, together with documents establishing your identity
- By registered electronic mail (KEP): from your own KEP address to dehaaltyapi@hs01.kep.tr
- By e-mail: from the e-mail address you have previously notified to us and which is registered in our system, to info@dehaaltyapi.com.tr, writing “KVKK Application” in the subject line
Your application must include your name and surname, signature (for written applications), Turkish identity number (passport number for foreign nationals), address for notification, e-mail or telephone for reply, and the subject of your request. Your application will be concluded free of charge within 30 days at the latest; where the process requires additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
9. Changes
This notice may be updated in line with changes in legislation or in our processing activities. The current version is published on this page; the date at the top shows the last update.
Related documents: Cookie Policy · Privacy Policy