This notice is prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. It explains how the personal data of visitors to spectracerd.com and of people who contact us is processed.
1. Identity of the data controller
Your personal data is processed by Spectrace Teknoloji as data controller, within the scope described below.
- Address: Medeniyet Teknopark Üsküdar Campus, Ünalan Mahallesi, Ünalan Caddesi No:1, Block A D: 2-D, Üsküdar / İstanbul, Türkiye
- Email: info@spectracerd.com
- Phone: +90 216 606 45 55
- Website: spectracerd.com
2. Personal data we process
We process only the data you share with us and the technical data that arises from your use of the site. What we process depends on which form you complete:
| Channel | Data category | Data processed |
|---|---|---|
| Contact form (/en/contact) | Identity, contact, professional experience | Full name, company, email, phone, subject, message content |
| Meeting request (/en/request-a-meeting) | Identity, contact, professional experience | Full name, job title, company, company size, email, phone, subject, message content |
| Brochure request (/en/brochure) | Identity, contact, professional experience | Full name, company, email |
| Job application (/en/careers) | Identity, contact, professional experience, personnel | Full name, email, area of interest, message content, information you include in your CV |
| Site usage | Transaction security | IP address, browser and device information, pages visited, referring address, cookie identifiers |
We recommend that you do not include special categories of personal data such as health, criminal conviction, belief or membership in your CV; such data is not needed to assess your application.
3. Purposes of processing
- Receiving, assessing and concluding your applications, requests and questions
- Contacting you and providing the information your request calls for
- Introducing our solutions and services and conducting pre-contractual discussions
- Assessing job applications and running recruitment processes
- Keeping the site secure and preventing automated or malicious form submissions
- Measuring site usage and improving content (only with your explicit consent)
- Meeting legal obligations and responding to requests from authorised public bodies
4. Legal grounds for processing
Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:
| Processing | Legal ground (KVKK Art. 5) |
|---|---|
| Handling contact, meeting and brochure requests | 5/2-c: directly related to the conclusion or performance of a contract; 5/2-f: legitimate interest |
| Assessing a job application | 5/2-c: directly related to the conclusion of a contract |
| Keeping the site and forms secure | 5/2-f: legitimate interest of the data controller |
| Analytics cookies and visit measurement | 5/1: explicit consent (given through the cookie banner, withdrawable at any time) |
| Promotional and marketing messages | 5/1: explicit consent |
| Statutory retention and responding to authorities | 5/2-a: expressly provided for by law; 5/2-ç: legal obligation |
5. Method of collection
Your data is obtained directly from you when you complete a form on spectracerd.com, send us an email or call us; technical data is obtained automatically through cookies and server logs while you use the site.
6. Transfer of personal data
Your personal data is not sold or rented to third parties. It is shared only within the scope below, in line with Articles 8 and 9 of the KVKK.
Transfers within Türkiye
- Our lawyers in the event of a legal dispute, and the firms from which we receive independent audit or financial advisory services
- Public authorities and judicial or administrative bodies authorised by law
Transfers abroad
The service providers below, which we use to run the site, may host their servers outside Türkiye; your technical data may therefore be processed abroad by them. Under Article 9 of the KVKK, transfers for analytics rely on your explicit consent; the others rely on the transfer being necessary for the performance of a contract or for a legitimate interest.
| Service provider | Purpose | Data transferred | Basis |
|---|---|---|---|
| Cloudflare, Inc. (USA) | Hosting, delivery and security of the site; form verification (Turnstile) | IP address, browser and device information, request logs | Legitimate interest (Art. 5/2-f) |
| Google Ireland Ltd. / Google LLC (EU, USA) | Measuring visit statistics (Google Analytics 4) | Cookie identifier, truncated IP address, device and usage data | Explicit consent (Art. 5/1) |
| Google LLC (USA) | Playing embedded videos (youtube-nocookie.com) | IP address, device and playback data | Only if you start the video; legitimate interest (Art. 5/2-f) |
| Google LLC (USA) | Office location map on the contact page (Google Maps) | IP address, browser and device information | Legitimate interest (Art. 5/2-f) |
All photographs on the site are served from our own servers; no third-party server is contacted to load an image. If you do not consent to analytics cookies, Google Analytics is not loaded and no transfer abroad takes place on that basis. You can withdraw your consent at any time through the Cookie preferences link in the footer. See our Cookie policy for details.
7. Retention periods
Your personal data is kept for as long as the purpose of processing requires and for the limitation periods set out in the relevant legislation; at the end of that period it is deleted, destroyed or anonymised.
| Data | Retention period |
|---|---|
| Contact, meeting and brochure requests | 2 years from conclusion of the request |
| Job applications and CVs | 1 year from the date of application |
| Records of discussions that lead to a commercial relationship | 10 years from the end of the relationship (limitation period under the Turkish Code of Obligations) |
| Cookie consent record | 1 year |
| Server and security logs | 12 months at most |
| Analytics data (Google Analytics) | 14 months at most |
8. Data security
Under Article 12 of the KVKK we apply administrative and technical measures to protect your personal data against unauthorised access, loss and unlawful processing: encrypted communication over HTTPS across the site, bot verification on forms, access limited to team members who need it for their role, confidentiality undertakings with our service providers, and access logging.
9. Your rights as a data subject
Under Article 11 of the KVKK you may apply to the data controller to exercise the following rights:
- To learn whether your personal data is processed
- To request information if it has been processed
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom your data is transferred, in Türkiye or abroad
- To request correction if the data is incomplete or inaccurate
- To request deletion or destruction within the conditions set out in the law
- To request that correction, deletion and destruction be notified to the third parties to whom the data was transferred
- To object to a result reached against you solely through automated analysis
- To claim compensation if you suffer damage because of unlawful processing
10. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests regarding your rights through the channels below. Your application must state your full name, your signature (for written applications), your Turkish ID number (nationality and passport number for foreign nationals), your address for notification, your email and phone if any, and the subject of your request.
- In writing: by wet-signed petition delivered in person or through a notary to Medeniyet Teknopark Üsküdar Campus, Ünalan Mahallesi, Ünalan Caddesi No:1, Block A D: 2-D, Üsküdar / İstanbul, Türkiye
- By email: from the email address registered in our systems to info@spectracerd.com
- With a secure electronic signature or mobile signature: send your signed application to info@spectracerd.com
Your application is concluded free of charge as soon as possible and in any case within thirty days, depending on the nature of the request. If the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, you find the response insufficient or no response is given in time, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning the response and in any case within sixty days of the application date.
11. Cookies
The cookies used on the site, their types, durations and how to manage your consent are explained in detail on the Cookie policy page. For the general principles on processing your personal data, see the Privacy policy page.
12. Changes to this notice
This notice may change in line with amendments to legislation or updates to our processing activities. The current version is always published on this page; the date at the top of the page shows when it was last updated.