Privacy Policy and KVKK Disclosure Notice

This notice explains how personal data you share through the Obase AIR website is processed under Turkish Data Protection Law No. 6698, and your rights.

1. Data Controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), personal data you share through this website is processed by Obase, acting as data controller, within the scope described below. This notice covers this website only; Obase's other products and services are subject to their own privacy notices.

2. Personal Data We Process

When you fill out our contact form, we process the following personal data:

• Identity: your first and last name
• Contact: your work email address
• Professional: company name and industry (if you choose to provide them)
• Request content: the text of the message you send through the form
• Transaction security: your IP address, browser and device information, the submission timestamp, and the page you submitted from

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Responding to your demo, technical briefing, and information requests
• Answering your questions and getting in touch with you
• Routing your request to the relevant team
• Preventing automated and abusive form submissions, and maintaining information security
• Measuring and improving site usage through aggregate statistics, and measuring the effectiveness of advertising campaigns, where you have given explicit consent

4. Legal Grounds

Your personal data is processed on the following legal grounds set out in Article 5 of KVKK:

• Processing is directly related to the conclusion or performance of a contract (Art. 5/2-c) — where your request concerns a pre-contractual discussion or a contract
• Processing is mandatory for the data controller to fulfil its legal obligations (Art. 5/2-ç)
• Processing is necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f) — for request handling, security logs, and the aggregate, non-identifying measurement signals collected before consent
• Your explicit consent (Art. 5/1) — for non-essential analytics and advertising cookies

5. How We Collect Your Data

Your personal data is collected electronically, by wholly or partly automated means: through the contact form on this website, and through cookies during your visit.

6. Transfer of Personal Data

So that your request can be handled, your personal data may be shared with the relevant teams within Obase and with the hosting and email infrastructure providers we use for this purpose, in accordance with Articles 8 and 9 of KVKK. Your data is not shared with third parties for marketing purposes without your explicit consent, and is never sold.

Because Google Tag Manager and Google Analytics 4 both load on every visit, data reaches Google whether or not you consent: fetching them discloses your IP address, browser information and the page you arrived from, and each page you view sends a cookieless measurement signal. Those signals give you no identifier and are not stored on your device. If you do consent, cookie-based site usage and advertising measurement data is processed as well. This processing is carried out by Google Ireland Limited and, either way, involves a transfer of data abroad.

7. Cookies

This site uses Google Tag Manager and Google Analytics 4. Both load on every visit, but run in a default “consent denied” state: no cookie is written and you are not given an identifier. No analytics or advertising cookie is loaded unless you consent through the notice shown on your first visit. If you consent, those cookies and the advertising measurement tags are enabled.

Your cookie choice is stored only in your own browser; you can change it at any time by clearing this site's data in your browser settings.

8. Retention Period

Your personal data is retained for as long as the purpose of processing requires and within the statutory retention periods set out in the applicable legislation. Once those periods end, your data is deleted, destroyed, or anonymized.

9. Data Security

In accordance with Article 12 of KVKK, appropriate technical and administrative measures are taken to ensure a suitable level of security, to prevent unlawful processing of and unlawful access to your personal data, and to safeguard it. Site traffic is carried over an encrypted connection (HTTPS), and access to form records is limited to authorized personnel.

10. Your Rights Under KVKK

Under Article 11 of KVKK, as a data subject you have the right to:

• Learn whether your personal data is being processed
• Request information about it if it has been processed
• Learn the purpose of processing and whether your data is used in line with that purpose
• Know the third parties, in Türkiye or abroad, to whom your data has been transferred
• Request correction if your data is incomplete or inaccurate
• Request deletion or destruction of your data within the conditions of Article 7 of KVKK
• Request that correction, deletion, and destruction be notified to the third parties your data was transferred to
• Object to a result against you produced by analyzing your data solely through automated systems
• Claim compensation for damages arising from unlawful processing of your personal data

11. Applications and Contact

You can submit requests concerning the rights above, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, to [email protected]. Your application will be concluded free of charge within thirty days at the latest, depending on the nature of your request.

If your application is rejected or you find the response insufficient, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board.