GDPR Privacy Notice

Last Updated: 13 October 2026 · Version 2.1

This Notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"). It explains how the Ardasan Yıkım ve Geri Dönüşüm website, operated by İlyas Bektaş Tunçer as the data controller, processes personal data of data subjects located in the European Economic Area ("EEA") and the United Kingdom.

verified_user

Data Controller

For the purposes of the GDPR, the controller of your personal data is the natural person whose identity and contact details are set out below. You may direct any data-protection request or enquiry to these channels.

Controller (Full name)
İlyas Bektaş Tunçer
Trade name / Brand
Ardasan Yıkım ve Geri Dönüşüm
Telephone
+90 535 844 50 40

1. Controller and Contact

The controller is established in Türkiye and operates under the brand Ardasan Yıkım ve Geri Dönüşüm. For any question regarding this Notice or the exercise of your rights, please contact the controller at ibektuncer@gmail.com or +90 535 844 50 40.

Data Protection Officer (DPO): not appointed, as designation is not mandatory under Art. 37 GDPR for the controller's processing activities. Data-protection enquiries are handled directly by the controller via the contact details above.

2. Categories of Personal Data

  • Identity and contact data (name, telephone number, email address and any details you voluntarily provide);
  • Enquiry and transaction content (the message, quote, survey or complaint content you submit);
  • Technical data (IP address, browser/device information, cookie identifiers, session and log data);
  • Analytics and advertising-measurement data (subject to your consent);
  • Billing data (only where a service relationship is formed and to the extent required by Turkish tax law).

3. Purposes and Legal Bases (Art. 6 GDPR)

Purpose Legal Basis
Operating the website, session and security (strictly necessary cookies)Art. 6(1)(f) – legitimate interests
Website usage analytics (Google Analytics 4)Art. 6(1)(a) – consent
Heatmaps and session recordings (Microsoft Clarity; cookies _clck 1 year, _clsk 1 day)Art. 6(1)(a) – consent; transfer to the US under Art. 49(1)(a)
Advertising measurement (Google Ads conversion tags)Art. 6(1)(a) – consent
Responding to enquiries and providing services initiated by the visitorArt. 6(1)(b) – contract / pre-contractual steps
Statutory record-keeping (invoices)Art. 6(1)(c) – legal obligation

4. Consent and Cookies (Consent Mode v2)

Analytics and advertising-measurement cookies are governed by Consent Mode v2. Until you make a choice, these categories are treated as denied by default; only strictly necessary cookies operate. Your choice on the cookie banner ("Accept" / "Reject") is stored in your browser under the dd_consent_v2 key and passed to the Google Analytics, Google Ads and Microsoft Clarity tags, loaded through Google Tag Manager. Without consent, no request is sent to any of them. Clarity's processing is described in the Microsoft Privacy Statement. You may change or withdraw consent at any time via the "Çerez tercihleri" (cookie preferences) link in the footer (Art. 7(3)). See our Cookie Policy for details.

5. Source of Data (Art. 14)

Personal data is collected directly from the data subject — automatically via strictly necessary cookies and, subject to consent, analytics/advertising cookies when you access the site, or voluntarily when you submit the quote form or initiate contact by telephone, WhatsApp or email. No personal data is obtained from third-party data brokers or enrichment providers.

6. Recipients of Personal Data

  • Cloudflare — hosting, security and content delivery (CDN);
  • Done Dynamics — quote-form infrastructure that delivers your enquiry to us;
  • Google — consent-based Google Analytics usage measurement, Google Ads conversion measurement and the embedded Google Maps on regional pages;
  • Microsoft — consent-based Clarity heatmaps and session recordings;
  • WhatsApp/Meta — only if you start a chat via a WhatsApp link;
  • Professional advisers (legal, accounting) on a strict need-to-know basis;
  • Competent public authorities, courts and regulators, where required by law.

No personal data is sold to data brokers.

7. International Transfers (Arts. 44-49)

The controller is established in Türkiye, and some processors (e.g. Cloudflare, Google) may process data outside the EEA. Such transfers rely on:

  • Standard Contractual Clauses ("SCCs") adopted by the European Commission (Art. 46(2)(c)), supplemented by appropriate technical and organisational measures; or
  • One of the derogations of Art. 49, such as your explicit consent or the necessity for the performance of a contract.

You may request information about the safeguards in place by contacting ibektuncer@gmail.com.

8. Retention

  • Enquiry and transaction content: up to 10 (ten) years after the matter is resolved, having regard to applicable limitation periods.
  • Invoices and accounting records: 5 (five) years under the Turkish Tax Procedure Law (VUK).
  • Cookies: until the technical expiry of each cookie, or until you withdraw consent.

9. Your Rights (Arts. 15-22)

Subject to the conditions of the GDPR, you have the right to:

  • Access your personal data (Art. 15);
  • Request rectification of inaccurate data (Art. 16);
  • Request erasure ("right to be forgotten") (Art. 17);
  • Request restriction of processing (Art. 18);
  • Data portability (Art. 20);
  • Object to processing based on legitimate interests (Art. 21);
  • Not be subject to a decision based solely on automated processing (Art. 22);
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).

10. How to Exercise Your Rights

You may exercise your rights by writing to ibektuncer@gmail.com or by telephone at +90 535 844 50 40. We will respond within one (1) month from receipt of your request, extendable by a further two (2) months where necessary, taking into account the complexity and number of requests (Art. 12(3)).

11. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the supervisory authority in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). A list of EU data protection authorities is available at edpb.europa.eu. Data subjects in Türkiye may also refer to the KVKK Aydınlatma Metni and lodge a complaint with the Turkish Personal Data Protection Authority (KVKK).

12. Changes to This Notice

We may update this Notice from time to time. The "Last Updated" date at the top reflects the latest revision. Material changes will be communicated through our website or, where appropriate, by direct notification.

Bize Ulaşın 👋