Privacy Policy & Data Protection Notice

Data Controller

In accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and applicable data-protection legislation, your personal data is processed by Zincirci Kardeşler Mühendislik Teknoloji Mimarlık İnşaat Turizm Sanayi ve Ticaret Limited Şirketi (“ZKM Teknoloji”) as the data controller, within the scope and for the purposes described below.

This notice explains how your personal data is collected, processed, and protected when you visit the ZKM Teknoloji website (zkmtech.com.tr).

The identity and contact details of the data controller are set out in the “Contact & Requests” section of this notice.

Personal Data We Process

When you visit our website, a limited amount of personal data is processed through Google Analytics 4 and Microsoft Clarity, loaded via Google Tag Manager, for the purpose of generating visitor statistics and measuring site performance.

The categories of data processed are:

Device and Technical Information: browser type and version, operating system, device type, screen resolution, and language preference.

Location Information: approximate (non-precise) geographic location at city/country level, derived from your IP address.

Usage and Interaction Data: pages viewed, time spent on pages, clicks and interactions, and clicks on WhatsApp, phone, email and directions links.

Session Recordings and Heatmaps: clicks, scrolls and mouse movement on the page, collected through Microsoft Clarity and turned into heatmaps and session recordings. Text typed into form fields is not recorded.

Our website has no contact form or account system and does not request information that directly identifies you (such as your name or ID number); the data above is evaluated in aggregated, statistical form.

Purposes of Processing

The personal data described above is processed for the following purposes:

Measuring and improving the performance, speed, and technical continuity of the website.

Generating visitor statistics and understanding which content and services attract interest.

Improving our services and the user experience, and refining content according to visitor needs.

Ensuring the security of the site and detecting potential misuse.

Legal Basis for Processing

Your personal data is processed on the legal bases set out in Article 5 of the KVKK.

For analytics data collected through cookies, the legal basis is your explicit consent under KVKK Art. 5(1). Analytics cookies are not used unless you choose “Accept” in the cookie notice; you can withdraw consent at any time through the “Cookie preferences” link.

For ensuring site security and maintaining core functionality, the legal basis is the legitimate interest of the data controller under KVKK Art. 5(2)(f), provided that your fundamental rights and freedoms are not harmed.

For visitors subject to the EU General Data Protection Regulation (GDPR), processing is based on GDPR Art. 6(1)(a) (consent) and Art. 6(1)(f) (legitimate interests).

Cookies and Similar Technologies

Our website uses Google Analytics 4 and Microsoft Clarity cookies, loaded through Google Tag Manager, to measure visitor statistics.

Microsoft Clarity uses the _clck (1 year) and _clsk (1 day) cookies and turns clicks, scrolls and mouse movement into heatmaps and session recordings.

Cookies are small text files placed on your browser during your visit. The analytics cookies we use are not intended to identify you personally, but to understand how the site is used in aggregate.

Analytics cookies are off by default and are switched on only when you choose “Accept” in the cookie notice. “Reject” is offered with equal weight. Your choice is stored in your browser and can be changed at any time through the “Cookie preferences” link at the bottom of every page. Details are in the Cookie Policy.

You can also block or delete cookies entirely through your browser settings. Rejecting cookies does not prevent you from using the core functions of the site.

International Data Transfers

In order to provide analytics services, your personal data may be transferred to service providers whose infrastructure is located abroad, in particular in the United States.

Analytics data is processed by Google LLC and may be stored on Google Analytics 4 and Google BigQuery infrastructure. This infrastructure is located in the United States.

Microsoft Clarity data is processed by Microsoft Corporation and stored on Microsoft infrastructure outside Türkiye (in particular in the United States). See the Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement

Such transfers are carried out on the basis of your explicit consent under Article 9 of the KVKK, or within the framework of the appropriate safeguards (such as standard contractual clauses) recognized by the authority.

For transfers subject to the GDPR, the relevant service providers are safeguarded through standard contractual clauses approved by the European Commission and comparable appropriate safeguards. For the consent-based analytics tools (Google Analytics 4, Microsoft Clarity), the transfer also relies on your explicit consent under GDPR Art. 49(1)(a).

Data Retention

Your personal data is retained for as long as necessary for the purposes for which it is processed, taking into account the statutory limitation periods set out in applicable legislation.

Data collected for analytics purposes is retained for the retention period configured in Google Analytics 4 (by default, a maximum of 14 months), after which it is automatically deleted or anonymized.

When the purpose of processing no longer exists or you withdraw your consent, your personal data is deleted, destroyed, or anonymized.

Your Rights as a Data Subject

Under Article 11 of the KVKK, by applying to the data controller you have the right to:

learn whether your personal data is being processed;

request information if your personal data has been processed;

learn the purpose of processing and whether the data is used in accordance with that purpose;

know the third parties, in Türkiye or abroad, to whom your personal data has been transferred;

request the correction of your personal data if it has been processed incompletely or inaccurately;

request the deletion or destruction of your personal data within the conditions set out in Article 7 of the KVKK;

request that correction, deletion, and destruction operations be notified to the third parties to whom the data has been transferred;

object to any adverse outcome that results from the analysis of your data solely through automated systems;

claim compensation for damage arising from the unlawful processing of your personal data.

Visitors subject to the GDPR additionally have the rights of access (Art. 15), rectification (Art. 16), erasure / the “right to be forgotten” (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). Where processing is based on consent, you may withdraw your consent at any time.

Contact & Requests

To exercise the rights described above, or to submit any request regarding the processing of your personal data, you may contact the data controller through the following channels.

Data Controller: Zincirci Kardeşler Mühendislik Teknoloji Mimarlık İnşaat Turizm Sanayi ve Ticaret Limited Şirketi

Address: Alanya TEKMER, Alanya / Antalya

Email: zkmteknoloji@gmail.com

Phone: +90 537 869 66 00

Under Article 13 of the KVKK, your requests will be concluded within thirty (30) days at the latest. If you are not satisfied with the outcome, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Board) or, under the GDPR, with your local supervisory authority.

Changes to This Notice

This notice may be revised from time to time in line with changes in legislation or updates to our processing activities.

The current version is always published on this page; for significant changes, the update date at the top of the notice is renewed. Your continued use of the site constitutes acceptance of the current notice.