Privacy Notice (KVKK)
Last updated: 30 August 2026
Data controller
This notice is provided by Beyaz Ulaşım ve Enerji Sistemleri Ltd. Şti. as data controller, under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").
- Address: Saray Mah. Küçüksu Cad. Antasya Residence No: 64/A K: 7 / 110, Ümraniye / İstanbul
- Email: [email protected]
- Phone: +90 (216) 504 47 22
What personal data we process
1) Contact and quote form. When you submit the form we process:
- First and last name
- Email address
- Phone number
- The subject of your enquiry and the content of your message
- The IP address you submitted from, the submission time and the page language — these are not entered by you; they are recorded automatically as a security and abuse-prevention measure
2) Job applications. When you send us your CV by email, we process the identity, contact, education and professional experience data it contains. You decide what your CV contains; we recommend not including special categories of personal data (health, religion, union membership and similar) that are not needed for recruitment.
Strictly necessary — no consent required. Visit statistics are measured with Cloudflare Web Analytics, which does not create an identifier for individual visitors and uses no cookies. The bot protection on the contact page (Cloudflare Turnstile) may set technical cookies for security purposes only. In addition, two entries are kept in your browser's session storage so the help assistant's introduction bubble is shown only once per session; they are deleted when you close the tab and are never sent to a server.
Optional — only if you agree. If you choose
"Accept" on the banner shown when you first open the site, a
measurement tool called Microsoft Clarity is enabled. If you decline,
or make no choice at all, the script is never loaded
and not a single cookie belonging to this tool is created. If you
accept, the cookies created are: _clck (1 year, to distinguish
visitors), _clsk (1 day, for the session). You can change
your choice at any time; when you withdraw it we delete these
two cookies. Microsoft may also keep cookies named
CLID, MUID, ANONCHK,
MR and SM on its own domains; as third-party
cookies we cannot technically delete those — you can clear them from
your browser settings.
What you type into the form does not appear in recordings. Clarity masks the contents of form fields in session recordings; your name, email address, phone number and message are not visible. This is the tool's default behaviour and cannot be switched off; in addition, we have explicitly marked the five fields of our contact form to be masked. We also do not permit advertising storage — we signal this preference to Clarity on every visit.
No cookies are used for advertising, profiling or transfer to advertising networks.
Purposes of processing
- To assess your enquiry, respond to you and prepare a quotation
- To carry out the process for the products and services you request
- To prevent automated abuse of the form and to maintain system security
- To evaluate your job application and contact you when a suitable position opens
Your data is not used for marketing, not sold to third parties and not shared for advertising purposes.
Legal basis
- Form data: KVKK Art. 5/2-(c) — directly related to the conclusion of a contract at your request; and Art. 5/2-(f) — our legitimate interest, provided your fundamental rights are not harmed.
- IP address and security records: KVKK Art. 5/2-(f) — legitimate interest (abuse prevention, system security).
- CV: KVKK Art. 5/1 — your explicit consent. By sending us your CV you consent to it being retained for evaluation in recruitment processes. You may withdraw this consent at any time.
How data is collected
Your personal data is collected by fully automated means in electronic form: through the contact form on this website, or through email you send us.
Transfers, including abroad
Your data is not transferred to business partners, dealers or advertising networks. It is processed only on the infrastructure of the service providers that make this site work:
- Cloudflare, Inc. — site hosting, storage of form records and bot protection (Turnstile). Servers are located outside Türkiye.
- Resend — delivery of your form message to us by email. Servers are located outside Türkiye.
- Google LLC / Google Ireland Ltd. — for two separate purposes: (a) our email infrastructure runs on Google Workspace, so messages sent through the contact form and CVs you send as job applications are stored in that mailbox; (b) the embedded map on our contact page sends your IP address and browser information to Google when the page is displayed. Servers are located outside Türkiye.
- Microsoft Corporation / Microsoft Ireland Operations Ltd. — only if you choose "Accept" on the cookie banner. Microsoft Clarity processes your page views, clicks, scrolling and mouse movements, screen size, browser information and IP address on Microsoft infrastructure so we can understand how the site is used. If you do not consent, this transfer never takes place. Servers are located outside Türkiye.
Your personal data is therefore transferred abroad within the meaning of KVKK Art. 9. Data may also be transferred to authorised public authorities where legally required (KVKK Art. 8/2-a).
Retention periods
- Form records: automatically deleted 180 days after submission. If your enquiry leads to a contractual relationship, the retention periods set out in the applicable legislation apply.
- Security counters: automatically deleted after 2 hours.
- CVs: retained for at most 2 years so that your application can be assessed and we can contact you when a suitable position opens; deleted at the end of that period. You may ask for earlier deletion by writing to the address below.
- Microsoft Clarity (only if you consented): the
lifetimes of the cookies in your browser are given above
(
_clck1 year,_clsk1 day — measured). How long Microsoft keeps data on its own servers cannot be verified from our code; it is subject to Microsoft's own retention policy. Once you withdraw consent, no new data is collected.
Your rights under KVKK Art. 11
By applying to the data controller you may:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom it is transferred, in Türkiye or abroad
- Request correction if it is incomplete or inaccurate
- Request erasure or destruction under the conditions set out in the law
- Request that correction, erasure and destruction be notified to third parties to whom the data was transferred
- Object to a result against you produced solely by automated analysis
- Claim compensation if you suffer damage due to unlawful processing
You can change your choice about optional cookies at any time:
How to apply
You may send your requests, together with information and documents establishing your identity, by email to [email protected] or in writing to the address above. Your application will be concluded as soon as possible and within 30 days at the latest.
If your application is rejected, you find the response insufficient or no response is given within the period, you have the right to lodge a complaint with the Turkish Personal Data Protection Board.
Changes to this notice
This notice may be updated in line with changes in legislation or in the data processed on this site. The current version is always published on this page.
