KVKK
KVKK Privacy Notice
Privacy Notice Under Law No. 6698 on the Protection of Personal Data
Under Law No. 6698 on the Protection of Personal Data (“KVKK”), you are being informed, as the data subject, about the matters below by the Data Controller.
1. Identity of the Data Controller
Data Controller: EN Tercüme - Nima Mirza Zadeh
Address: Hasanpaşa mah., İrfanbey sk., no:10/39 kat:5, 34722, Kadıköy/İstanbul
Email: info@entercume.com
Phone: +90 532 202 81 33
2. Categories of Personal Data Processed
| Data Category | Data Types |
|---|---|
| Identity Information | Name, surname |
| Contact Information | Email address, phone number, address |
| Professional Information | Company name, area of expertise, language pairs |
| Transaction Security | IP address, browser information, cookie data |
| Document Content | Personal data contained in documents sent for translation services |
| Special Category Personal Data | Health data, criminal record data, and similar sensitive information that may appear in translation documents (only with explicit consent) |
| Marketing and Tracking Data | Ad click identifiers (gclid, fbclid), campaign source information (UTM parameters), referrer, page URL, only if you consent to Marketing cookies |
3. Purposes of Processing
- Provision of translation, interpreting, and localization services
- Preparing price quotes and customer communication
- Managing contract processes
- Compliance with legal obligations (tax legislation, commercial law)
- Ensuring and improving website operation
- Statistical analysis and reporting
4. Legal Basis for Processing
Under Article 5(2) of KVKK, your personal data may be processed based on the following legal grounds:
- Explicitly provided for by laws
- Necessity for the establishment or performance of a contract
- Necessity for the Data Controller to fulfil a legal obligation
- Necessity for the establishment, exercise, or protection of a right
- Necessity for legitimate interests of the Data Controller, provided it does not harm fundamental rights and freedoms
Under Article 6 of KVKK:
- Special category personal data (health data, criminal record data, etc.) is processed only with explicit consent
- If your documents contain special category personal data within the scope of our service, processing relies on your explicit consent within the service relationship
5. Transfer of Personal Data
Domestic transfers:
- Sworn translators (for service delivery)
- Notaries and Apostille authorities (for document approval processes)
International transfers (under Article 9 of KVKK):
- Google LLC (USA) - Website analytics and advertising performance measurement (Google Analytics, Google Ads, Google Tag Manager)
- Cloudflare, Inc. (USA) - Hosting, CDN, and security (Turnstile CAPTCHA)
- Resend (USA) - Sending form data by email
- HubSpot, Inc. (USA) - Customer relationship management (CRM) and quote follow-up
- Google Cloud Platform / Google LLC (Italy) - Automation infrastructure (n8n workflow server hosting); processing of form submissions for CRM integration
Analytics and marketing transfers rely on your explicit consent (cookie consent). Transfers related to service delivery (form data, CRM, email delivery) rely on necessity for contract performance and the safeguards of Standard Contractual Clauses (SCC).
6. Retention Periods
| Data Type | Retention Period |
|---|---|
| Form data (name, email, phone) | Service period + 1 year |
| Translation documents | 6 months after the service is completed |
| Cookie data | Up to 2 years (varies by cookie type) |
| Invoice and payment information | 5 years (as required by tax legislation) |
| Data required by legal obligations | As specified in applicable legislation |
7. Data Security Measures
- Secure transfer via SSL/TLS encryption
- Access control and authorisation mechanisms
- NDA agreements binding staff and translators
- Regular backups and integrity checks
- DDoS and bot protection through Cloudflare security infrastructure
8. Your Rights as a Data Subject (KVKK Art. 11 - FULL LIST)
Under Article 11 of KVKK, you have the following rights:
- (a) Learn whether personal data is processed
- (b) Request information if personal data has been processed
- (c) Learn the purpose of processing and whether data is used in line with that purpose
- (ç) Learn the third parties to whom personal data is transferred domestically or abroad
- (d) Request correction if personal data is incomplete or inaccurate
- (e) Request deletion or destruction under Article 7 of KVKK
- (f) Request notification of actions under (d) and (e) to third parties to whom data is transferred
- (g) Object to a result arising against you through analysis of processed data exclusively by automated systems
- (ğ) Request compensation for damages if personal data is processed unlawfully
9. Application Method
You can submit your requests using the following methods:
- Written application: Hasanpaşa mah., İrfanbey sk., no:10/39 kat:5, 34722, Kadıköy/İstanbul
- Email: info@entercume.com
Your application must include: full name, Turkish ID number (or passport number for foreign nationals), contact address, and the subject of the request.
Applications are finalised within 30 days at the latest.
10. Complaint to the Personal Data Protection Board
If your request to the Data Controller is rejected, the response is insufficient, or you receive no response within 30 days, you have the right to lodge a complaint with the Personal Data Protection Board under Article 14 of KVKK.
Personal Data Protection Authority: www.kvkk.gov.tr
For visitors residing in the European Union, please review our Privacy Policy for information about rights under GDPR.
Last updated date: 27.03.2026