This Privacy Policy and Notice explains how personal data of people who visit www.aquasan.com.tr (the “Site”) and contact us is processed. It is provided in accordance with Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and, for visitors from the European Union and the European Economic Area, the General Data Protection Regulation (“GDPR”).
1. Data Controller
The data controller for your personal data is AQUASAN GROUP A.Ş. (“Aquasan”, “we”, “us”).
- Address: 1st Organized Industrial Zone, 8th Street No:45, Yeşilyurt / Malatya, Turkey
- Email: info@aquasan.com.tr
- Phone: +90 422 502 04 00
2. What Personal Data Do We Process?
| Data category | Examples | How we obtain it |
|---|---|---|
| Contact and quote form data | Full name, email address, phone number, company/organization name, delivery time, the content of your message | From you, when you submit the form |
| Direct communication data | Information you send us by phone, WhatsApp, Telegram, Viber or email (name, number, message content) | When you contact us through these channels |
| Site usage data | Pages viewed, visit duration, device and browser information, approximate location (country/city), how you reached the Site, clicks on forms/WhatsApp/phone | Only if you accept cookies (Google Analytics, Google Ads) |
| Technical and security logs | IP address, date and time of access, requested page, browser type | When you visit the Site, in server logs |
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Responding to your quote, information and technical support requests; conducting pre-contractual discussions | Necessary for the establishment or performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)) |
| Keeping the Site secure, preventing abuse and spam, maintaining technical operation | Legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)) |
| Measuring and improving Site usage; measuring the results of advertising campaigns | Consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)). Given through your cookie choice and can be withdrawn at any time |
| Meeting our legal obligations; establishing, exercising or defending legal claims | Legal obligation and establishment, exercise or protection of a right (KVKK Art. 5/2-ç and 5/2-e; GDPR Art. 6(1)(c) and (f)) |
4. Sharing and International Transfers
Your personal data may be shared, limited to the purposes above and only as necessary, with the following recipients:
- Service providers for hosting, infrastructure, email and security (e.g. server and email services, Cloudflare);
- Site usage and advertising measurement services (Google Analytics, Google Ads), only if you give consent;
- Google/YouTube content such as maps, fonts and videos (see the Cookie Policy);
- Depending on your request, our group companies, business partners and authorized service points;
- Competent public authorities where legally required.
Some of these providers (e.g. Google, Cloudflare) may process data outside Turkey (e.g. in the European Union or the United States). Such transfers are carried out in accordance with the conditions in Article 9 of KVKK and, where applicable, the GDPR. Your personal data is not shared with third parties other than for the purposes set out in this policy.
5. Retention
Personal data is kept for as long as the processing purpose requires and for the limitation and retention periods set by applicable law; after that it is deleted, destroyed or anonymized. Cookie lifetimes are listed in the Cookie Policy.
6. Cookies
Cookies used to measure Site usage and advertising results are enabled only with your consent. See the Cookie Policy for details and for how to change your choice.
7. Your Rights under KVKK
Under Article 11 of KVKK you may apply to the data controller to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether it is used in line with that purpose,
- know the third parties to whom your data is transferred in Turkey or abroad,
- request correction if the data is incomplete or inaccurate,
- request deletion or destruction under Article 7 of KVKK, and request that this be notified to third parties to whom the data was transferred,
- object to a result against you arising from analysis of your data exclusively by automated systems,
- claim compensation if you suffer damage due to unlawful processing.
You can send your application in writing to the address above or to info@aquasan.com.tr. Depending on its nature, your request is concluded within thirty days at the latest. You also have the right to complain to the Turkish Personal Data Protection Board.
8. Visitors from the EU / EEA (GDPR)
If you visit the Site from the European Union or the European Economic Area, you also have the right under the GDPR to access your personal data, request its correction or erasure, request restriction of processing, data portability, and to object to processing. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before it. You may also lodge a complaint with your local data protection authority. To exercise your rights, contact us using the details above.
9. Security
We take reasonable technical and organizational measures to prevent unlawful processing of and access to your personal data (e.g. encrypted connections (HTTPS), access limited to authorized people). However, transmission over the internet cannot be guaranteed to be completely secure.
10. Third-Party Links and Children
The Site may contain links to, or content from, third-party services such as LinkedIn, Instagram, WhatsApp, YouTube and Google Maps. We are not responsible for the privacy practices of those services and recommend reading their own policies. The Site is not directed to persons under 18 and we do not knowingly collect personal data from children.
11. Changes
We may update this policy when necessary. The current version is published on this page and identified by the “Last updated” date above.