PDPL Privacy Notice

Last updated: 23 July 2026

1. Data Controller

This Privacy Notice has been prepared to provide information about the personal data processing activities carried out by HYPERDC DATA TEKN PAZ. VE DAN.İTH.İHR.SAN.TİC.AŞ.
Under the Turkish Personal Data Protection Law No. 6698 (the “Law”), personal data are processed by the following entity acting as the data controller:

Trade Name: HYPERDC DATA TEKN PAZ. VE DAN.İTH.İHR.SAN.TİC.AŞ.

Brand: HyperDC Data
Address: İçerenköy, Engin Sk. No: 6A İç Kapı No: 1, 34638 Ataşehir/İstanbul, Türkiye
E-mail: info@hyperdcdata.com
Registered Electronic Mail (KEP): hyperdcdata@hs09.kep.tr
Personal data are processed within the scope described below.

2. Who Is Covered?

This Privacy Notice applies to:

• Visitors to the hyperdcdata.com website
• Individuals who submit a contact or project consultation form
• Individuals who contact HyperDC Data by email, telephone, or other communication channels

3. Personal Data Processed

Depending on the nature of the interaction with HyperDC Data, the following categories of personal data may be processed:

Identity information: First name and surname.
Contact information: Email address and telephone number.
Professional and corporate information: Company or institution name, position, and job title.
Request and transaction information: Solutions of interest, subject of communication, project details, message content, and quotation requests.
Transaction security information: IP address, connection date and time, browser and device information, and security and system logs.
Cookie and similar technology data: Cookie identifiers, session information, preferences, and, where permission has been granted, performance or usage data.

Please do not submit special categories of personal data or personal information that is not necessary for evaluating a request through contact or project consultation forms.

4. Purposes of Processing Personal Data

Personal data may be processed for the following purposes:

• Receiving and responding to communication and project consultation requests
• Assessing requirements and managing solution or quotation processes
• Managing pre-contractual discussions and customer relations
• Maintaining communication records and request histories
• Ensuring the security of the website, contact forms, and information systems
• Preventing spam, misuse, and unauthorized access attempts
• Complying with legal obligations
• Establishing, exercising, or protecting legal rights in potential disputes

Personal data are not used for advertising or marketing purposes unless such communication has been expressly requested or separately authorized. Where commercial electronic communications require separate permission, the relevant consent process is conducted independently.

5. Legal Bases for Processing Personal Data

Depending on the nature of the processing activity, personal data are processed based on one or more of the legal grounds set out in Article 5 of the Law:

• Processing is directly related to the establishment or performance of a contract.
• Processing is necessary for the data controller to comply with a legal obligation.
• Processing is necessary for the establishment, exercise, or protection of a legal right.
• Processing is necessary for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the data subject.

Where explicit consent is required for non-essential cookies or another personal data processing activity, the request for explicit consent is presented separately from this Privacy Notice.

6. Methods of Collecting Personal Data

Personal data may be collected electronically through:

• Contact and project consultation forms on the website
• Email and telephone communications
• Server and security logs
• Cookies and similar internet technologies

Personal data may be collected through fully or partially automated means.

7. Transfer of Personal Data

Personal data may be shared with the following recipient groups, strictly to the extent necessary for the relevant processing purposes:

• Authorized HyperDC Data employees and relevant departments
• Web hosting, email, information technology, cybersecurity, maintenance, and support service providers
• Financial advisers, legal advisers, auditors, and audit service providers
• Authorized public institutions, regulatory bodies, and judicial authorities

Microsoft 365 email infrastructure is used for web form notifications, Cloudflare Turnstile is used for bot and abuse prevention, and Hostinger services are used for the provision of technical infrastructure.

Where personal data are transferred to a data controller or data processor located outside Türkiye, such transfers are carried out in accordance with the conditions and appropriate safeguard mechanisms set out in Article 9 of the Law.

8. Retention Periods

Personal data are retained for the period required by the relevant processing purposes and in accordance with the limitation and retention periods prescribed under applicable legislation.

• Communication and project request records: Three years from the completion of the request or the date of the most recent communication.
• Quotation and pre-contractual discussion records: Five years from the completion of the process. Where a contract is concluded, the relevant records are retained for the periods required under the contract and applicable legislation.
• Form email transmission logs: 14 days.
• System and security logs: Six months from the date on which the record is created. Where a security incident or legal review is in progress, the relevant records may be retained until the process has been completed.

9. Rights as a Data Subject

Under Article 11 of the PDPL, you have the right to learn whether your personal data are being processed, request information about processed data, learn the purposes of processing and the parties to whom the data are transferred, request the correction of incomplete or inaccurate data, request deletion or destruction where the applicable conditions are met, and claim compensation for damages arising from unlawful processing.

10. How to Submit a Request

Requests concerning rights under the Law may be submitted through one of the following methods:

• By signed written petition:
  İçerenköy, Engin Sk. No: 6A, Interior Door No: 1, 34638 Ataşehir, Istanbul, Türkiye
• Through Registered Electronic Mail (KEP):
  hyperdcdata@hs09.kep.tr
• Using a secure electronic signature or mobile signature:
  hyperdcdata@hs09.kep.tr
• Using an email address previously provided to and registered with the Company:
  info@hyperdcdata.com

Requests must include sufficient information to verify the applicant’s identity and identify the nature of the request.