Privacy Notice

1. Data controller

Data controller

Utku Açmaz

Email

autec.agency@gmail.com

2. Personal data we process

When you fill in the discovery or quote forms on the Site or get in touch with us, we process the following personal data:

• Identity and contact details: full name, email address, phone number (optional), company / organisation name.
• Request details: your answers to the form questions (industry, team size, where time is lost, type of need, tools in use, start timing, budget range) and any free-text message you write.
• Call details: the date and time you book, information about your business processes shared during the call, and call notes.
• Technical / security data: IP address, browser and device information, date and time of access (server logs).

We do not ask for special categories of data (health, religion, political opinions, etc.); please do not enter such information in the form fields.

3. Purposes of processing

• Receiving your discovery or proposal call request and scheduling the call.
• Preparing a proposal that fits your needs and communicating with you by email / phone.
• Recording and tracking your request and communication history in our customer relationship management (CRM) system.
• Keeping the Site secure; detecting errors, abuse and automated (bot) submissions.
• Meeting our legal obligations and protecting our rights in the event of a dispute.

We do not send marketing emails without your explicit consent; emails relating to your own request are not marketing.

4. Legal bases

We process your personal data on the following legal bases set out in Article 5 of the KVKK:

• Processing that is necessary to enter into or perform a contract (Art. 5/2-c): receiving your call request, scheduling the call and preparing the proposal.
• Our legitimate interests (Art. 5/2-f): keeping communication history in the CRM and securing the Site.
• Compliance with a legal obligation (Art. 5/2-ç): statutory retention periods and requests from competent authorities.
• Your explicit consent (Art. 5/1 and Art. 9): transferring your data to the service providers located abroad listed below. You give this consent via the checkbox before submitting the form and may withdraw it at any time.

5. Recipients of personal data

To provide our service, your personal data is shared — only to the extent needed for the stated purpose — with the following service providers, who act as data processors and whose servers are located outside Türkiye. International transfers are based on your explicit consent under Article 9 of the KVKK.

Cal.com, Inc. (USA)

Scheduling the call; your name, email and form answers are passed on as the booking note.

Google LLC (USA)

Google Meet for the call, Google Calendar invitations and email infrastructure (Google Workspace).

Resend (Plus Five Five, Inc., USA)

Sending confirmation and follow-up emails.

HubSpot, Inc. (USA)

Customer relationship management (CRM): your contact details and request are kept as a contact record.

Vercel Inc. (USA)

Hosting the site; server access logs (IP address, browser information, timestamp).

We may also disclose data to competent public authorities where legally required, and to our legal and financial advisers where necessary. We never sell your personal data or share it with third parties for marketing purposes.

6. How we collect data

We collect personal data through the forms on the Site, email correspondence, phone and online calls, and the server logs generated automatically while the Site operates — electronically and by partly automated means.

7. Retention

• If no business relationship follows the call, we keep your request and contact details for at most 2 years.
• If a business relationship is established, we keep records for the periods required by Turkish commercial and tax legislation (10 years under the Turkish Commercial Code No. 6102 and the Tax Procedure Law No. 213).
• Server access logs are kept for a limited period under the hosting provider's policies.

At the end of the retention period your data is deleted, destroyed or anonymised. You can request deletion at any time (see section 9).

8. Cookies

The Site uses no cookies beyond those strictly necessary for it to function, and sets no third-party analytics or advertising cookies. On pages where the booking calendar is shown, the embedded calendar provided by Cal.com may set its own cookies; these are governed by Cal.com's privacy policy.

9. Your rights

Under Article 11 of the KVKK you have the right to:

• Learn whether your personal data is being processed,
• Request information about that processing,
• Learn the purpose of processing and whether data is used in line with it,
• Know the third parties, in Türkiye or abroad, to whom your data is transferred,
• Request correction of incomplete or inaccurate data,
• Request deletion or destruction of your data under the conditions in Article 7 of the KVKK,
• Request that corrections, deletions and destructions be notified to third-party recipients,
• Object to a result that is to your detriment arising from analysis by exclusively automated systems,
• Claim compensation for damage caused by unlawful processing.

You can exercise these rights by emailing autec.agency@gmail.com, together with documents that verify your identity, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. We respond free of charge as soon as possible and within 30 days at the latest. If your request is refused or you find the response insufficient, you may lodge a complaint with the Turkish Personal Data Protection Board.

10. Changes

We may update this notice to reflect changes in legislation or in our services. The current version is always published on this page; the date at the top shows when it was last changed.