Data Protection Notice

Pursuant to the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed as described below by Natillus acting as Data Controller. This notice informs you about processing activities carried out through the Website.

1. Personal Data Processed

During your use of the Website and through contact, application, information or request forms, the following personal data may be processed:

• Identity data: Name, surname.
• Contact data: E-mail address, phone number, city, country and similar contact details.
• Customer transaction / request data: Message content, subject of request, program of interest, application and communication records.
• Transaction security data: IP address, log records, device and browser information, date and time of access.
• Marketing and communication preference data: Commercial electronic message consent records, cookie preferences and permission records.

2. Purposes of Processing

• Receiving, assessing and responding to requests, applications, questions, complaints and suggestions submitted via the Website,
• Carrying out communication activities,
• Evaluating program, offer or service requests,
• Managing and improving business relationship processes,
• Ensuring Website security and preventing abuse, spam, bot traffic, unauthorized access and cyber attacks,
• Measuring Website performance and improving user experience,
• Managing cookie preferences and user consents,
• Where explicit consent is given, carrying out campaign, announcement, promotion and commercial electronic message processes,
• Fulfilling legal obligations towards competent authorities.

3. Method of Collection and Legal Grounds

Personal data is collected wholly or partly by automated means through forms on the Website, cookies, security tools, server logs, e-mail communications and similar electronic channels.

Processing is based on the legal grounds in Article 5 of the KVKK, including: establishment or performance of a contract; compliance with a legal obligation; and the data controller’s legitimate interests provided that they do not harm your fundamental rights and freedoms. Where required, processing is also based on your explicit consent.

4. Transfer of Personal Data

Personal data may be transferred, only to the extent necessary, to infrastructure, hosting, security, e-mail, backup and similar service providers, business partners and competent public authorities. If some technical infrastructure is located abroad, data may be transferred abroad in accordance with applicable legislation and with appropriate safeguards.

5. Retention Period

Personal data is stored for the period required by the processing purposes and statutory retention periods, after which it is deleted, destroyed or anonymized.

6. Your Rights

Under Article 11 of the KVKK you may apply to the Data Controller to learn whether your data is processed, request information, learn the purpose and whether it is used in accordance with that purpose, know third parties to whom data is transferred, request correction of incomplete or inaccurate data, request deletion or destruction, object to results arising from automated analysis, and claim compensation for damage arising from unlawful processing.

You may submit requests to info@natillus.com.

7. Updates

This notice may be updated. The current version is published on this page.