Website Contact Form

Privacy Notice on the Processing of Personal Data

This notice was last updated on 4 October 2026. This English text is a translation; in case of any discrepancy, the Turkish text prevails.

1. Data Controller

Pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed, within the scope explained below, by Borz Global Mühendislik Çözümleri Sanayi ve Ticaret Anonim Şirketi (the "Company") acting as data controller. Address: OSTİM OSB Mah. 100. Yıl Bulvarı No: 55A İç Kapı No: 20, Yenimahalle / Ankara, Türkiye Email: info@borzengineering.com

2. Personal Data Processed

We process the full name and email address you send us through the contact form, the name of the institution/company you represent (optional), the information you share in the message, and the date and time the form was submitted. Your IP address is not stored with your message; it is processed only in an irreversibly hashed form and for a short period, in order to prevent misuse of the form. Please do not share special categories of personal data (health, criminal convictions, biometric data, etc.) in the message field.

3. Purposes of Processing

Your personal data is processed for the purposes of receiving and answering your requests, quotation requests and enquiries; communicating about our products and services; conducting pre-contractual negotiations and quotation processes; creating customer/supplier records if a business relationship is established; fulfilling legal obligations; and protecting rights in possible disputes.

4. Legal Grounds

Your personal data is processed under Article 5/2 of the KVKK on the following legal grounds: (c) processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract; (ç) processing is mandatory for the data controller to fulfil its legal obligation; (e) processing is mandatory for the establishment, exercise or protection of a right; and (f) processing is mandatory for the legitimate interests of the Company, provided that it does not harm your fundamental rights and freedoms.

5. Method of Collection

Your personal data is collected electronically, by automated means, when you fill in the contact form at www.borzengineering.com.

6. Transfers

Limited to the purposes above, your personal data may be transferred to the service provider of the Company's email and data storage infrastructure (Google Workspace), to the email delivery service provider that transmits form notifications (Resend), to the website hosting and database service providers (Vercel, Supabase), to authorised public institutions and organisations within the framework of our legal obligations, and, where necessary, to our legal and financial advisers. Because the servers of these service providers are located abroad, your data is transferred abroad under Article 9 of the KVKK, in compliance with the safeguards prescribed by the Personal Data Protection Board.

7. Retention Period

The message you send through the contact form is kept in the website's database for 12 months and is deleted automatically at the end of that period. The copy of the message forwarded to the Company's mailbox is kept for no more than 2 years after your request has been concluded. If a contractual relationship is established, your data is kept for the limitation and retention periods prescribed by the applicable legislation (10 years under the Turkish Commercial Code and the Tax Procedure Law); at the end of the period it is deleted, destroyed or anonymised.

8. Your Rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in line with that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to request rectification if it is incomplete or inaccurate; to request its erasure or destruction within the framework of Article 7 of the KVKK; to request that these operations be notified to the third parties to whom it was transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage due to unlawful processing.

9. Applications

You may send your requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing together with documents proving your identity to OSTİM OSB Mah. 100. Yıl Bulvarı No: 55A İç Kapı No: 20, Yenimahalle / Ankara, Türkiye, or from your email address registered in our system to kvkk@borzengineering.com. Your application is concluded free of charge within 30 days at the latest.