Privacy Notice (KVKK)
Last updated: 15 October 2026
This is an English translation provided for information. In case of any discrepancy, the Turkish version prevails.
This privacy notice has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about your personal data processed through the ozeracar.com website (the "Site").
1. Data controller
Özer Acar Danışmanlık — Özer Acar, Procurement and Tendering Consultant
- Address: Keçiören, Ankara, Türkiye
- Tax office: Dışkapı
- Email: acarozer@gmail.com
2. Personal data processed, purposes and legal grounds
| Processing | Data processed | Purpose | Legal ground (KVKK Art. 5) |
|---|---|---|---|
| Request form | Full name, organisation, type of organisation, email, phone, procurement framework, subject, whether a tender deadline is running and the deadline date, message, time of submission and the page the form was sent from | Assessing your request, getting back to you, and carrying out the proposal and service process | Directly related to the conclusion or performance of a contract (Art. 5/2-c) |
| Newsletter subscription | Email address, the explicit consent text you confirmed, time of request and confirmation, where you subscribed | Sending the newsletter and evidencing your consent | Explicit consent (Art. 5/1) |
| Document request | Email address, requested document, time of request | Sending the download link to your email | Directly related to the conclusion or performance of a contract (Art. 5/2-c) |
| Security and abuse prevention | A one-way, salted hash of the IP address (the IP address itself is not stored); browser and device signals during the bot check | Blocking spam and automated submissions, limiting many submissions in a short time | Legitimate interest (Art. 5/2-f) |
| Visit statistics | Page viewed, referring site, browser and device type, country (in aggregate; no cookies are used) | Understanding how the Site is used and improving it | Legitimate interest (Art. 5/2-f) |
You do not need to fill in any form simply to visit the Site. The Site does not use advertising tools or tools that track individual visitors. Visits are measured only as aggregate statistics with Cloudflare Web Analytics, which does not use cookies; no identifier or profile that recognises a visitor is created.
3. Recipients and transfers abroad
Your personal data is transferred only for the purposes above and to the extent required by the service, to the following service providers (data processors):
- Cloudflare, Inc. (USA): Hosting of the Site, visit statistics (Web Analytics), the database storing form data, bot verification (Turnstile) and access protection of the admin page. The database is located in the Western Europe region.
- Resend, Inc. (USA): Sending request notifications, "request received" emails, document links and newsletter confirmation emails.
- Brevo SAS (France): The list of confirmed newsletter subscribers and sending the newsletter.
- Google LLC (USA): The email account (Gmail) receiving request notifications.
As some of these providers are located abroad, your data is transferred abroad. Transfers abroad are carried out in accordance with Article 9 of the KVKK.
Your personal data may be shared with legally authorised public institutions and organisations upon their request and where there is a legal obligation.
4. Method of collection
Your personal data is collected electronically and by automated means through the forms on the Site. Visit statistics are collected automatically by Cloudflare when a page is viewed.
5. Retention periods
- Request form records: Retained indefinitely.
- Newsletter subscription: Until you unsubscribe; consent records are retained indefinitely. Unconfirmed subscription requests are automatically deleted after 30 days.
- Document requests: Retained indefinitely.
- IP hashes kept for submission limits: Automatically deleted within 24 hours.
You may request the erasure or destruction of your personal data at any time using the application method below.
6. Your rights under Article 11 of the KVKK
By applying to the data controller, you have the right to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether it is used in line with that purpose,
- know the third parties to whom it is transferred in Türkiye or abroad,
- request rectification if it is incomplete or inaccurate,
- request erasure or destruction under the conditions in Article 7 of the KVKK,
- request that rectification, erasure or destruction be notified to third parties to whom the data was transferred,
- object to a result against you arising from analysis of the data exclusively by automated systems,
- claim compensation for damage arising from unlawful processing.
7. How to apply
You can send your application in writing, with information identifying you, to the address above or to acarozer@gmail.com. Applications are concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request.
You can unsubscribe from the newsletter at any time using the link at the bottom of each email.