Legal

KVKK Notice

Information framework regarding the processing of personal data.

This notice is provided for general information and summarizes personal data processing activities that may arise through the website and communication processes. It may be revised based on the company's actual operational practices.

1. Data controller

VGantt Teknoloji ve Dijital Çözümler LTD acts as the data controller within the scope of the Turkish Personal Data Protection Law No. 6698 ("KVKK").

This notice explains how personal data may be processed during website visits, contact form submissions, email correspondence, and related communication activities.

2. Categories of personal data

  • Identity and contact details such as name, surname, email address, phone number, and similar information you voluntarily provide.
  • Inquiry and transaction data such as contact form content, proposal requests, message details, attachments, and service-related notes.
  • Visitor transaction data such as IP address, date-time records, browser information, and technical website usage logs.
  • Legal compliance data created where required for regulatory, claim management, or formal request handling.

3. Purposes of processing

  • Receiving, evaluating, and responding to contact requests.
  • Managing proposal processes, assessing service scope, and preparing pre-contractual business discussions.
  • Supporting customer relations, operations, information security, and business continuity processes.
  • Meeting legal obligations, following legal processes, and protecting legal rights where necessary.
  • Maintaining website security, monitoring technical performance, and improving service quality.

4. Collection methods and legal bases

Personal data may be collected through website forms, email, phone calls, electronic communication channels, verbal communications, and technical log records by automated or partially automated means.

Processing may rely on legal bases such as necessity for entering into or performing a contract, compliance with legal obligations, establishment or protection of rights, and the legitimate interests of the company provided fundamental rights and freedoms are not harmed. Explicit consent is requested separately where required.

5. Data transfers

Your personal data may be shared, to the extent permitted by applicable law and limited to the stated purposes, with authorized public bodies, legal advisors, infrastructure providers, and relevant business partners.

Transfers are carried out in line with data minimization, purpose limitation, and confidentiality principles, together with reasonable technical and organizational safeguards.

6. Retention and disposal

Personal data is retained for as long as necessary for the relevant processing purpose and, in any event, for the minimum retention periods required by applicable law.

When the retention period expires or the processing purpose no longer exists, data is deleted, destroyed, or anonymized in accordance with legal requirements.

7. Rights of the data subject

  • Learn whether your personal data is being processed.
  • Request information if your data has been processed.
  • Learn the purpose of processing and whether the data is used in line with that purpose.
  • Know the third parties to whom data is transferred domestically or abroad.
  • Request correction of incomplete or inaccurate data.
  • Request deletion or destruction of data within the conditions set by KVKK.
  • Request notification of correction, deletion, or destruction to third parties receiving the data.
  • Object to adverse outcomes arising exclusively from automated analysis.
  • Request compensation in case of damage due to unlawful processing.

8. Applications and contact

You may submit requests under KVKK via info@vgantt.com or in writing using the address information of Cevizli, Mustafa Kemal Paşa Caddesi, Seyitgazi Sokağı No:66, 34865 Kartal/İstanbul.

Applications are reviewed and concluded within the periods prescribed by applicable law, depending on the nature of the request.