NESILGRUP BILISIM TEKNOLOJI TICARET ANONIM SIRKETI
Contact Channel Privacy Notice

This Privacy Notice has been prepared by NESILGRUP BILISIM TEKNOLOJI TICARET ANONIM SIRKETI (“Nesil Teknoloji” or the “Company”) in its capacity as data controller, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law”) and the Communiqué on the Principles and Procedures to Be Followed in Fulfilment of the Obligation to Inform. The following information is provided to inform the data subjects (requesters) who contact us through the contact form on our website.

1. Data Controller

Title: NESILGRUP BILISIM TEKNOLOJI TICARET ANONIM SIRKETI (“Nesil Teknoloji”)
MERSIS No: 0631172955000001
Trade Registry No: 478284
Tax Office/No: Baskent / 6311729550
Registered Address: Orucreis, Tekstilkent Cad., Tekstilkent Plaza D Blok, 34235 Esenler / Istanbul
KVKK Application E-mail: [email protected]
KEP Address: [email protected]

Note: This text is a process-specific privacy notice covering only the personal data processing activity carried out through our website contact form. For the general privacy notice covering all personal data processing activities of our Company, please see the Personal Data Processing Policy page.

2. Categories of Personal Data Processed

The following personal data is processed from the data subject through the contact form:

  • Identity Data: Name, surname
  • Contact Data: E-mail address, telephone number
  • Request / Complaint Information: Message content, subject line
  • Transaction Security Data: IP address, browser information, session identifiers, Google reCAPTCHA verification data (for bot detection)

Important Notice: Please refrain from sharing through the contact form any special categories of personal data defined in Article 6 of the Law (Turkish ID number, health data, criminal records, biometric data, religion, ethnic origin, trade union membership) or sensitive financial data (bank account / IBAN / card number, passwords). Even if such data is transmitted, it will not be processed by the Company and will be deleted immediately.

3. Purposes of Processing Personal Data

The personal data collected is processed for the following purposes, in accordance with the general principles set out in Article 4 of the Law and the processing conditions set out in Article 5:

  • Evaluating and responding to requests, questions, complaints and opinions submitted through the contact form,
  • Responding to proposal and information requests regarding our services (pre-contractual negotiation process),
  • Conducting business processes and managing customer relations,
  • Fulfilling legal obligations,
  • Conducting information security processes and preventing abuse attempts through the form (via Google reCAPTCHA).

4. Legal Grounds for Processing Personal Data

Your personal data is processed on the basis of the following legal grounds set out in paragraph 2 of Article 5 of the Law:

  • 5/2-c: Processing of personal data belonging to the parties to a contract being necessary, provided that it is directly related to the conclusion or performance of the contract (proposal / information request processes),
  • 5/2-ç: Processing being mandatory for the data controller to fulfil its legal obligations,
  • 5/2-e: Processing being mandatory for the establishment, exercise or protection of a right,
  • 5/2-f: Processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

5. Transfer of Personal Data

Your personal data may be transferred to the following parties:

  • Authorised public institutions and bodies: Where requested due to a legal obligation,
  • Third parties from whom we receive legal, financial advisory and consultancy services: In their capacity as data processors, only to the extent required by the service,
  • Information security and infrastructure providers (domestic): Within the scope of website hosting and cybersecurity services,
  • Google LLC (abroad): Only IP address and browser data within the scope of the Google reCAPTCHA bot verification service, transferred within the framework of Article 9 of the Law.

6. Method of Collecting Personal Data

Your personal data is collected electronically, through non-automatic / partially automatic means, by being entered directly by you into the contact form on our website.

7. Retention Period of Personal Data

Personal data collected through the contact form is retained within the framework of our Company’s Personal Data Retention and Destruction Policy, for the duration of responding to the relevant request and the subsequent statutory limitation periods (generally 10 years under Article 146 of the Turkish Code of Obligations). At the end of the period, it is deleted, destroyed or anonymised in accordance with Article 7 of the Law.

8. Your Rights as a Data Subject (KVKK Art. 11)

By applying to the data controller, you have the right, with respect to yourself, to:

  • Learn whether your personal data is processed,
  • Request information if it has been processed,
  • Learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
  • Know the third parties to whom it is transferred, in Türkiye or abroad,
  • Request rectification if it is incomplete or inaccurately processed,
  • Request its deletion or destruction under the conditions set out in Article 7 of the Law,
  • Request that your rectification, deletion and destruction requests be notified to the third parties to whom the data has been transferred,
  • Object to a result arising to your detriment from the analysis of the processed data exclusively by automated systems,
  • Claim compensation for damage suffered as a result of unlawful processing.

You may exercise these rights in accordance with the Communiqué on the Principles and Procedures of Application to the Data Controller, by applying to the [email protected] e-mail address via registered electronic mail (KEP) or secure electronic signature, or in writing to our Company address. Applications are concluded within 30 (thirty) days at the latest, depending on the nature of the request, pursuant to Article 13 of the Law.

9. Processes Outside the Scope of This Privacy Notice

Personal data received through the contact form is, by default, processed solely for the purpose of evaluating your request, within the scope of paragraph 2 of Article 5 of the Law. The process of sending you commercial electronic messages for promotional, campaign and marketing purposes is subject to separate explicit consent pursuant to KVKK Art. 5/1 and Art. 6 of Law No. 6563 (E-Commerce Law), and is conducted via the separate checkbox in the contact form. Pursuant to the Principle Decision of the Personal Data Protection Board dated 10.07.2025, the fulfilment of the obligation to inform and the obtaining of explicit consent are conducted independently of each other, and this privacy notice does not constitute an explicit consent declaration.

Effective date: 13.05.2026