1. Contact and scope
At Infinitium Teknoloji, we value personal data protection. This notice explains the processing of data belonging to website visitors, people completing contact and service request forms, and those submitting newsletter requests.
Infinitium Teknoloji is the data controller for the processing activities described on this page. For questions about your personal data or information about the request process, use info@infinitiumteknoloji.com to contact us.
This notice has been prepared within the framework of Personal Data Protection Law No. 6698 (KVKK). Reading it alone does not mean that you give explicit consent or agree to receive commercial communications.
2. What data is collected, and how?
Your data is collected electronically, directly from you through our website forms and through technical systems that keep the website secure.
- Contact and service requests: Full name, email address and, if provided, company and telephone details; your selected service and request type, and information included in your message.
- Optional attachments: Files attached to the contact form and any personal information they may contain.
- Newsletter requests: Your email address and the page from which the request was submitted. The current form only forwards your subscription request; it does not automatically create a subscription record.
- Technical and security data: Request time, source page, connection IP information and abuse checks. Rate limiting uses keyed hashes and short-lived counters instead of raw IP addresses. The hosting service may also generate access and security logs.
- Spam verification: Google reCAPTCHA may process connection, browser, device and interaction signals, the verification result and a risk score.
Do not send identity documents, health information, passwords or other sensitive information unnecessary for assessing your request. Do not include unnecessary personal data about third parties in files or messages.
3. Processing purposes and legal bases
Personal data is assessed for the following purposes, insofar as appropriate and necessary for the nature of your request:
| Purpose | Legal basis |
|---|---|
| Assessing your project, quotation, repair or service request and contacting you about it. | Article 5/2-c of the KVKK where processing is directly related to and necessary for the establishment or performance of a contract. |
| Responding to general enquiries and newsletter requests initiated by you; managing the communication process. | Legitimate interests in managing contact requests, provided your fundamental rights and freedoms are not harmed: Article 5/2-f of the KVKK. |
| Preventing spam, automated abuse and unauthorised access; protecting the website and communication channels. | Legitimate interests in ensuring information security, with due regard for your rights and freedoms: Article 5/2-f of the KVKK. |
| Protecting a right in a dispute or fulfilling a specific legal obligation. | Article 5/2-e or 5/2-ç of the KVKK, limited to the applicable circumstances. |
The legal basis is assessed according to the circumstances of each operation. Where a separate activity requires explicit consent, consent must be obtained separately. The acknowledgement in the contact form is not marketing permission; a newsletter request does not directly initiate regular commercial messages.
4. Service providers and data transfers
Form submissions are emailed to the relevant Infinitium Teknoloji staff to assess your request. Hostinger provides website hosting and email infrastructure, and Google reCAPTCHA is used to prevent spam. Data necessary for these services may be processed in the respective providers' systems. Transfers to authorised public bodies are made only where a specific legal obligation exists and only to the extent required.
Google reCAPTCHA evaluates technical signals to distinguish automated requests and may use a security cookie. Our application does not include your form message or attached file in its reCAPTCHA verification request; technical data collected by Google through the browser is separate.
Providers' infrastructure may involve processing data abroad or accessing it from abroad. Such transfers additionally require the conditions set out in Article 9 of the KVKK to be satisfied. Reading this notice or submitting a form does not constitute explicit consent to an international transfer.
Google's service-related processing information is available in the Google Cloud data processing terms, and Hostinger's explanations in the Hostinger privacy policy for further information.
5. Retention and security
The form application does not create a permanent server-side archive of your messages or files. Files are processed as email attachments and removed from the temporary upload area. However, sent emails and attachments may remain in the recipient's mailbox; having no server-side form archive does not mean that emails are also deleted immediately.
Correspondence should be retained only as long as necessary to resolve your request and, where applicable, fulfil legal obligations or protect rights. When the reason for processing ends, data is erased, destroyed or anonymised in accordance with applicable legislation. Retention conditions for mailboxes, hosting logs and service provider records may differ.
The application's abuse counters do not store the content of personal communications. Under the current default settings, hashes and counters are used for a monitoring window of up to 10 minutes; expired records are removed by a server cleanup task. Form fields and files are validated on the server; TLS certificate checks are used for email and verification connections.
6. Your rights under the KVKK
Under Article 11 of the Law, you may exercise the following rights when the applicable conditions are met:
- Learn whether personal data concerning you is processed and, if so, request information about it.
- Learn the purposes of processing and whether data is used in accordance with those purposes.
- Learn which third parties receive your data within Türkiye or abroad.
- Request correction of incomplete or inaccurate information.
- Request erasure or destruction of data under the conditions prescribed by law.
- Request notification of rectification, erasure or destruction to third parties to whom data has been transferred.
- Object to an adverse outcome arising from analysis carried out exclusively through automated systems.
- Seek compensation if you suffer damage due to unlawful data processing.
7. Requests and contact
For requests concerning your rights, use info@infinitiumteknoloji.com to contact us. Writing “KVKK Request” in the email subject helps route your request to the appropriate person.
Formal requests are assessed under Article 13 of the KVKK and the submission methods and identity verification requirements in the Communiqué on the Procedures and Principles for Requests to the Data Controller. Email requests are subject to the relevant procedural requirements, such as using an address previously provided to us and registered in our system. Where necessary, only additional information required to verify your identity and request may be sought.
Properly submitted requests are answered as soon as possible according to their nature, and within 30 days at the latest. If processing entails an additional cost, the tariff set by the Board may apply. You can use the contact address above for questions about the request process.
Analytics and cookie preferences
When analytics is enabled and you grant permission, Google Analytics 4 may measure pages and interactions through Google Tag Manager. Form fields are not included in analytics events. You can manage analytics preferences in the footer. Cookie records, lifetimes and withdrawal behaviour are explained in the Cookie Policy.
8. Updates
This notice may be updated when data processing activities or applicable legislation change. The date of the current version is shown at the top of the page.
Back to the contact page