Skip to content
VISTACERT

Privacy notice

This notice explains how personal data is processed when you visit vistacert.tech, contact us or receive an outreach e-mail from VistaCert Danışmanlık.

Last updated:

This is a translation provided for convenience. The binding version is the Turkish text.

  1. 1. Data controller

    Under Turkish Personal Data Protection Law no. 6698 (“KVKK”), the data controller is the company identified below.

    Data controller
    VistaCert Eğitim ve Danışmanlık Ltd. Şti.
    E-mail
    feyza@vistacert.tech
    Phone
    +90 212 951 01 55
    Address
    Göksu Evleri, Göztepe Mah. Hürrem Sok. Salıncak Çıkmazı No:2, B265A Villa, Anadolu Hisarı, Beykoz / İstanbul

  2. 2. Data processed and how it is obtained

    When you visit the site, technical data such as your IP address, request time, page visited, browser and language information is processed automatically through Cloudflare. If you choose a language, the vistacert_locale preference cookie is kept for one year. The site has no contact form, advertising pixel or behavioural analytics tool.

    When you contact us by e-mail or telephone, we process the name, work contact details, company and information you provide in your message or conversation.

    For outreach e-mails we use company and certificate details and business contact information. Where a record identifies a person, it may also include their name, role and work e-mail address. Information is obtained manually or by automated tools from company sites, public certificate checkers and public professional pages, then stored in a contact list; list preparation and e-mail drafting are partly automated.

  3. 3. Purposes of processing

    • To provide the site, remember your language choice and maintain technical security.
    • To answer questions and quote requests and follow up conversations with you.
    • To introduce management system and certification readiness consultancy services to relevant companies.
    • To handle opt-out requests and KVKK applications and prevent further outreach e-mails.

  4. 4. Legal grounds

    • For site operation, security, language preferences and replies to your requests: KVKK article 5(2)(f), legitimate interests that do not harm your fundamental rights and freedoms.
    • Where outreach uses work information that identifies a person, KVKK article 5(2)(f) applies only to necessary and proportionate use. Online availability alone does not mean that the person made the data public under article 5(2)(d).
    • For handling opt-outs and statutory applications: KVKK article 5(2)(ç), the controller’s legal obligation.

  5. 5. Transfers

    We use Cloudflare to operate and secure the site and Google Workspace for e-mail and correspondence. Website technical data is shared with Cloudflare, and e-mail addresses and correspondence with Google Workspace, to provide these services. Data may be shared with competent public authorities where required by law. Personal data is not sold.

    These services may involve access from outside Turkey or processing abroad. The conditions of KVKK article 9 apply separately to international transfers.

  6. 6. Retention and deletion

    Personal data is kept for the time needed for the relevant purpose and applicable legal retention duties. When processing conditions end, it is erased, destroyed or anonymised.

    The language preference cookie lasts one year from your choice. If you reject outreach e-mails, your contact record is no longer used for outreach; only the minimum opt-out record needed to prevent another send is kept.

  7. 7. Stopping outreach e-mails

    Reply to an outreach e-mail with “İLETİŞİM İSTEMİYORUM”. You need not give a reason, fill in a form or click a link. Outreach stops after your request.

  8. 8. Your rights under KVKK art. 11

    By applying to the data controller you may:

    • Learn whether your personal data is being processed
    • Request information about it if it has been processed
    • Learn the purpose of processing and whether the data is used accordingly
    • Know the third parties in Turkey or abroad to whom it has been transferred
    • Request correction if it has been processed incompletely or inaccurately
    • Request erasure or destruction under the conditions in KVKK art. 7
    • Request that correction, erasure or destruction be notified to the third parties it was transferred to
    • Object to a result reached against you through analysis carried out solely by automated systems
    • Claim compensation if you suffer loss because the data was processed unlawfully

  9. 9. How to apply

    Under the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request in writing to the address above, or by e-mail to the address above from the e-mail address registered in our records. Your application is answered as soon as possible and within thirty days at the latest.

    If your application is rejected or you find the response insufficient, you may complain to the Turkish Personal Data Protection Board within thirty days of learning the response and in any case within sixty days of the application.

VistaCert Danışmanlık · VistaCert Eğitim ve Danışmanlık Ltd. Şti.