Privacy Policy
How we process your personal data and your rights under the GDPR.
Last updated: 21 October 2026
1. Controller
Arastatek Elektronik Yazılım A.Ş., Oruçreis Mah. Tekstilkent Cad. B14 Blok No:74, 34235 Esenler / İstanbul, Türkiye. E-mail: [email protected], Phone: +90 212 302 31 25.
Contact for data protection requests: [email protected]
2. Personal data we process
- Quote form and e-mail correspondence: first and last name, e-mail address, company, country, project details and any files you send. Quote form submissions and uploaded files are transmitted over an encrypted connection to our own server, stored there and forwarded to us by e-mail. To protect the form against spam we also record the submission time, IP address and browser. Retention: 2 years; after that, requests and files are deleted from our server automatically.
- Server logs: when you visit the website our web server logs your IP address, date/time, requested page, browser and operating system. Retention: up to 90 days.
- Phone, WhatsApp and video calls: information you share when you contact us through these channels.
3. Purposes and legal bases
- Preparing quotations and pre-contractual communication — Art. 6(1)(b) GDPR.
- Secure operation of the website (server logs) — legitimate interest, Art. 6(1)(f) GDPR.
- Displaying Google Maps content — consent, Art. 6(1)(a) GDPR.
- Legal obligations (e.g. retention of business records) — Art. 6(1)(c) GDPR.
4. Recipients and international transfers
Our website runs on the servers of a hosting provider and is delivered through Cloudflare, Inc. (content delivery and security); these providers process data only on our behalf. E-mail provider: Google Workspace. If you choose to load the map: Google Ireland Ltd. / Google LLC.
We are based in Türkiye. Data you send us from the EU/EEA is processed in Türkiye to answer your request and to take pre-contractual steps (Art. 49(1)(b) GDPR). Our service providers process data under their own data processing agreements.
5. Retention
We keep personal data only for as long as it is needed for the purpose it was collected for and for as long as statutory retention obligations require. Quote form records and uploaded files are kept for 2 years, server logs for up to 90 days. Correspondence that leads to a customer relationship and business records are kept for the periods required by Turkish commercial and tax law. When the period ends, the data is deleted, destroyed or anonymised.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, objection, data portability and to withdraw consent at any time (Art. 15–21 GDPR). You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence.
7. Cookies and external content
This website does not use analytics, advertising or tracking cookies. Your consent choice is stored in your browser (localStorage), which is strictly necessary.
The map on the contact page is provided by Google Maps and only loads after you consent. When loaded, Google may set cookies and your IP address is transmitted to Google. You can change your choice at any time in the cookie settings.