Version 1.0 · Effective Date: October 4, 2026
1. Data Controller
This information notice has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 by Kayentech Endüstriyel Hizmetler A.Ş. and Kayentech Teknoloji ve Dış Ticaret A.Ş. (collectively referred to as 'KAYEN TECH') acting as data controllers.
2. Processed Personal Data
Through the contact and quote request channels provided on our website, personal data are processed within the following categories:
- Identity Information: First name, last name.
- Contact Information: Corporate/personal email address, phone number, company/institution name.
- Request and Transaction Information: NDT/PWHT product and service categories of interest, quote list items, subject, and message content.
- Transaction Security and Technical Data: Website access logs, IP address, request timestamps, and form abuse control counters.
Important Note: Special categories of personal data (health, biometric, political opinions, etc.) are not collected through our website. Please do not share such information in form submissions.
3. Purposes of Processing Personal Data
Your personal data are processed in a limited, relevant, and proportionate manner for the following purposes:
- Responding to your inquiries and technical questions regarding products and services,
- Preparing product quotes, evaluating technical specifications, and managing commercial sales processes,
- Planning post-sales support (repair, maintenance, calibration) or mobile PWHT field service operations,
- Ensuring website security, preventing unauthorized access, bot attacks, and spam transmissions,
- Fulfilling information requests from authorized public institutions and complying with legal obligations.
4. Method of Data Collection and Legal Grounds
Your personal data are collected automatically through electronic means when you complete the Contact and Quote List forms on our website.
These data are processed based on the following legal grounds set forth in Article 5, Paragraph 2 of the KVKK:
- c) Processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract,
- ç) It is mandatory for the data controller to fulfill its legal obligations,
- f) Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (information security, form spam prevention, service quality).
5. Transfer of Personal Data and International Transfers
Your collected personal data are never sold, rented, or shared with third parties for advertising, marketing, or profiling purposes.
Your data may only be transferred to the following parties strictly within the specified scopes:
- Technical Infrastructure and Service Providers: Data are transferred to our hosting infrastructure provider Vercel Inc. (USA) and our transactional email delivery provider Resend Inc. (USA) strictly for the technical delivery of the website and form notifications, in compliance with Article 9 of the KVKK.
- Authorized Authorities: Data may be shared with authorized judicial, administrative, and law enforcement authorities when required by applicable law.
6. Retention Periods and Security Measures
The KAYEN TECH website does not persist form or personal data in a database (no-DB request architecture). Inquiries submitted through forms are transmitted directly and securely to our authorized corporate mailbox.
Your personal data are retained in our corporate systems for the statutory limitation periods stipulated under the Turkish Commercial Code and the Turkish Code of Obligations (up to 10 years). Upon expiration, data are securely deleted, destroyed, or anonymized.
Technical security: Your data are protected against unauthorized access through end-to-end TLS/HTTPS encryption, strict Content Security Policy (CSP), HSTS, and honeypot mechanisms.
7. Rights of the Data Subject (KVKK Article 11)
Pursuant to Article 11 of the KVKK, as a data subject you have the following rights by applying to our company:
- To learn whether your personal data are processed,
- To request information if your personal data have been processed,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data are transferred domestically or internationally,
- To request correction of personal data if they are incomplete or incorrectly processed,
- To request deletion or destruction of personal data under the conditions provided in Article 7 of the KVKK,
- To object to any unfavorable result arising from the analysis of processed data exclusively through automated systems,
- To claim compensation for damage arising from unlawful processing of personal data.
8. Application Method and Contact
To exercise the rights stated above, you may deliver your written application with identity verification documents in person to 'Alaaddinbey Mah. 626. Sk. B Blok No: 10 B A, Nilüfer / Bursa / Türkiye', send it via notary public, or submit it in writing from your registered email address previously communicated to our company.
Your requests will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request.