Privacy and Personal Data Protection Policy (KVKK)
Data Controller and Scope
Barut Group (Istanbul, Turkey), acting as the data controller pursuant to the Turkish Law on the Protection of Personal Data No. 6698 (KVKK) and applicable international privacy principles, is dedicated to safeguarding visitor and client data and maintaining full transparency in all data processing operations.
Collected Data and Processing Purposes
We process identity and contact information voluntarily submitted through our inquiry and onboarding forms (such as full name, phone number, email address, requested service, and project details), alongside technical data (IP address, browser type, language preferences). This data is processed to assess inquiries, provide business coordination and advisory services, and fulfill legal compliance obligations.
Legal Basis for Processing
Your personal data is processed pursuant to Article 5 and Article 6 of Law No. 6698 based on your explicit consent, the necessity for the establishment or execution of a service contract, compliance with legal and statutory obligations in Turkey, or our legitimate professional interests.
Data Transfers and Third Parties
We never sell, lease, or distribute your personal data to third parties for marketing purposes. Data is only shared with authorized infrastructure providers (secure cloud hosting, corporate email servers), authorized licensed professionals (coordinated SMMM accountants, trademark attorneys, or legal counsel), or competent public authorities where required by law.
Data Security and Retention
Advanced administrative and technical safeguards (including SSL/TLS encryption) are implemented to protect your data against unauthorized access, loss, or alteration. Data is retained only for the duration necessary to accomplish the stated purposes or as mandated by statutory commercial and tax retention regulations in Turkey.
Data Subject Rights (Article 11) and Contact
Under Article 11 of Law No. 6698, you have the right to ascertain whether your data is being processed, request information, request correction or deletion, and object to unlawful processing. To exercise your rights, please submit your request to our official compliance email: info@barutgroup.net.