LEGAL

Privacy notice (KVKK)

Last updated: 30 October 2026

This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) to inform visitors of upsterra.com and people who fill in our forms. The Turkish version is the binding text; this English version is a translation for convenience.

Data controller

[DATA CONTROLLER NAME] ("Upsterra"), [FULL ADDRESS], İzmir, Türkiye. MERSİS/Tax ID: [MERSİS / TAX ID]. Email: info@upsterra.com

What data we process

Category	Data	Source
Identity	Full name	Contact and Free Audit forms
Contact	Email address	Forms
Professional	Company name, company website, sector	Forms
Request content	Whatever you write in the message field	Forms
Security	IP address, browser and device information, time of access	Our hosting infrastructure, automatically

We do not ask for special categories of personal data (such as health, religion or biometric data). Please do not include this kind of information in the message field.

Why we process it and on what legal basis

Purpose	Legal basis (KVKK Art. 5/2)
Replying to your request, preparing your free audit, sending a proposal	(c) Necessary to enter into or perform a contract
Keeping a record of our correspondence and using it as evidence in a possible dispute	(e) Establishing, exercising or protecting a right
Keeping the website secure and preventing abuse (spam, attacks)	(f) Our legitimate interest, provided it does not harm your fundamental rights and freedoms
Meeting legal retention duties and responding to requests from authorities	(ç) Complying with our legal obligations

None of these purposes requires your explicit consent. The checkbox on our forms is there for you to confirm that you have read this notice.

Who we share it with

Recipient	Why	Location
Web3Forms (form delivery service)	Delivering form submissions to our inbox	USA
Vercel Inc. (hosting)	Serving the website and keeping access logs	USA and global servers
Our email provider [PROVIDER NAME]	Storing correspondence	[COUNTRY]
Competent public authorities	Legal obligation	Türkiye

Transfers abroad are made under Article 9 of the KVKK. [TRANSFER BASIS]

How long we keep it

Data	Period
Form requests that do not lead to a proposal or project	2 years from our last correspondence
Requests from people who become clients	The term of the contract plus 10 years
Server access logs	As long as the hosting provider keeps them, up to [X] days

When the period ends, the data is deleted, destroyed or anonymised.

Your rights

Under Article 11 of the KVKK, you can ask Upsterra to:

tell you whether we process your personal data, and give you information about it if we do,
tell you why it is processed and whether it is used for that purpose,
tell you who it has been shared with in Türkiye or abroad,
correct it if it is incomplete or inaccurate,
delete or destroy it when the conditions in Article 7 of the KVKK are met,
notify the third parties it was shared with of any correction or deletion,
reconsider a decision against you that results solely from automated analysis,
compensate you for damage caused by unlawful processing.

How to make a request

Method	Address
Email	info@upsterra.com (from the email address you previously gave us)
Registered email (KEP)	[KEP ADDRESS]
In writing	[FULL ADDRESS] (signed, with "KVKK Information Request" written on the envelope)

Your request should include your full name, Turkish ID number (for foreign nationals: nationality and passport number), postal address, email address and a clear description of what you are asking for. If you are applying on someone else's behalf, please attach a power of attorney.

We answer requests free of charge within 30 days at the latest. We do not share any data until we have verified your identity. If your request is refused or not answered, you can complain to the Turkish Personal Data Protection Board (KVK Kurulu) within 30 days.