Privacy notice and personal data protection

This notice explains how your personal data is processed under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and related regulations when you visit pecatra.com, use the demo request form or contact us by e-mail.

It is issued to meet the information duty set out in Article 10 of the KVKK. If you are located in the EU or EEA, the GDPR applies in addition and you have the corresponding rights under it. Data processed inside organisations that run Pecatra is outside the scope of this notice; the organisation is the data controller for that data.

ArcyIntel Engineering and Consulting Services

TÜBİTAK Technology Development Zone, R&D Innovation Building, Barış Mah. Koşuyolu Cad. No. 26/48, Gebze / Kocaeli, Türkiye

E-mail: [email protected]

Personal data is collected only in the following situations, automatically through the website and our server infrastructure:

• Site visit: IP address, date and time of the visit, requested page, referring address, browser and operating system. These are written to server logs.
• Demo request form: full name, organisation, business e-mail address, anything you write in the optional message field, date and time of submission, IP address of the submission.
• Spam protection: the Cloudflare Turnstile check that runs when the form is submitted processes technical data about your browser (IP address, browser characteristics, interaction signals).
• E-mail correspondence: your name, e-mail address and the content of your message when you write to us.

We do not request or process special categories of personal data (health, religion, political opinion and similar). Please do not enter such information in form fields.

Your personal data is processed only for the following purposes:

• Receiving your demo request, contacting you, scheduling a call and a live demo
• Answering product questions and handling quotations
• Keeping the website secure and available; detecting attacks and abuse
• Blocking automated and bulk form submissions (spam)
• Meeting our legal obligations and protecting our rights in case of a dispute

Your data is not used for profiling or behavioural advertising. We do not send marketing e-mails without your explicit consent.

Your personal data is processed on the following legal bases listed in Article 5(2) of the KVKK:

• Demo request and contact: processing is necessary in direct connection with the conclusion of a contract (Art. 5/2-c)
• Server logs and spam protection: our legitimate interest in information security, provided that your fundamental rights and freedoms are not harmed (Art. 5/2-f)
• Retention of records: compliance with our legal obligations (Art. 5/2-ç) and the establishment, exercise or protection of a right (Art. 5/2-e)
• Analytics and marketing cookies: your explicit consent given in the cookie preferences (Art. 5/1); you may withdraw it at any time

No separate explicit consent is required for the demo form or site security. The checkbox in the demo form confirms that you have read this notice; it is not a declaration of consent.

Your personal data is not sold, rented or shared with third parties for advertising. It may be transferred only to the following categories of recipients, limited to the stated purpose:

• Hosting and infrastructure providers: the servers that run our website and form systems (as processors, acting on our instructions)
• Our e-mail service provider (Google Workspace, Google LLC, USA): demo requests and correspondence are stored as e-mail on this infrastructure
• Cloudflare, Inc. (USA): spam protection for the demo form; only the technical data needed for verification
• Competent public authorities: where legally required, limited to the scope of the request

Demo requests are delivered by e-mail to Google Workspace; the Turnstile check runs over Cloudflare's global network. This constitutes a transfer abroad within the meaning of the KVKK. Such transfers are made under Article 9 of the KVKK, relying on appropriate safeguards such as the standard contractual clauses published by the Turkish Personal Data Protection Board.

Your personal data is kept for as long as the purpose requires and no longer than the periods below:

• Server logs: 7 days; records needed for a security investigation until the investigation is complete
• Demo request data: 1 year after the request is closed; if a contract is concluded, for the duration of the relationship and the statutory retention periods
• E-mail correspondence: 1 year after the matter is closed
• Turnstile verification data: not stored by us; Cloudflare applies its own retention policy

When the period ends, data is deleted, destroyed or anonymised in line with Article 7 of the KVKK and the related regulation.

By default the site uses only strictly necessary cookies and local storage. Analytics or marketing cookies are loaded only if you allow them in the cookie preferences; you can change your choice at any time via the "Cookie preferences" link at the bottom of the page.

• Theme and cookie preference: your light/dark choice and your cookie choice are stored only in your browser's local storage (localStorage) and are not sent to the server.
• Analytics cookies (only with your permission): a measurement tool such as Google Analytics may be used for visit statistics; it processes your IP address in truncated form and stores data under its own privacy policy. If you do not allow them, no analytics script is loaded.
• Cloudflare Turnstile: during verification Cloudflare may set a technical cookie in your browser; it is not used to track your identity.
• Fonts and videos are served from our own server; no connection is made to third-party services such as Google Fonts or YouTube.

To prevent unlawful processing of and access to your personal data, we take the technical and organisational measures required by Article 12 of the KVKK:

• Site and form traffic is encrypted with TLS
• Only authorised staff can access form data
• Form submissions are rate-limited; suspicious requests are rejected
• Servers are kept up to date and backed up regularly

Under Article 11 of the KVKK you may apply to the data controller to exercise the following rights:

• To learn whether your personal data is processed
• To request information if it has been processed
• To learn the purpose of processing and whether the data is used in line with it
• To know the third parties to whom the data is transferred, in Türkiye or abroad
• To request correction of incomplete or inaccurate data
• To request deletion or destruction under the conditions of Article 7 of the KVKK
• To request that corrections, deletions and destructions are notified to third parties who received the data
• To object to a result against you that arises from analysis exclusively by automated systems
• To claim compensation for damage suffered due to unlawful processing

You may submit requests concerning your rights, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, through the following channels:

• In writing: a signed letter to the address above, delivered in person or through a notary
• By e-mail: to [email protected]; to let us verify your identity, please write from the e-mail address registered with us

Your request must include your full name, the subject of the request and your contact details. Requests are answered free of charge within 30 days at the latest; where the process incurs an additional cost, the fee set by the Board's tariff may be charged.

If your request is rejected, the answer is insufficient or no answer is given in time, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board.

This notice may be updated when legislation or our services change. The current version is always published on this page and the last-updated date is changed for material changes.