Legal information

Personal Data Protection Notice

As required by Article 10 of Turkish Personal Data Protection Law No. 6698 (KVKK), this notice explains why we process your personal data, who we share it with, and what rights you have.

Last updated: September 22, 2026

Data controller: EY Atlas Kurumsal Danışmanlık
Address: İstanbul
Email: info@sirketkurulus.com.tr
Phone: +90 212 450 12 78

What personal data we process

We process only what you choose to send us. This site has no accounts, no profiles and no behavioural tracking.

Through the contact form: your name, email address, phone number, country, company name, subject of enquiry and the text of your message.
When you contact us by email or phone: the contact details you share and the content of the correspondence or call.
When you use the incentive eligibility check: your answers are processed entirely in your own browser — they are never sent to us and never stored.
Technical records from our hosting provider: standard server logs such as IP address, browser information and time of access.

Why we process it

To assess your enquiry and respond to you.
To prepare a quotation and hold an initial consultation about our services.
To carry out the engagement if a consultancy agreement is concluded.
To keep the site secure and prevent misuse.
To meet obligations imposed on us by applicable legislation.

Our legal basis

Your personal data is processed on the following legal grounds set out in Article 5 of the Law:

Directly related to the conclusion or performance of a contract (Art. 5/2-c): to assess your request and put an offer to you.
Compliance with a legal obligation (Art. 5/2-ç): for the retention and reporting duties imposed by applicable legislation.
Our legitimate interests, provided your fundamental rights are not harmed (Art. 5/2-f): for site security and for keeping a record of correspondence.

How we collect it

Your personal data is collected electronically, by wholly or partly automated means: the contact form on this site, email correspondence and telephone calls.

Who we share it with

We do not sell your personal data and we do not share it with third parties for marketing. Sharing is limited to the infrastructure providers needed to deliver the service:

Hosting and content delivery — Netlify: publishing the site and keeping server logs.
Email delivery — Resend: delivering the message you send through the contact form to our mailbox.
Corporate mailbox — Zoho Mail: storing incoming and outgoing correspondence.
Visitor measurement — Cloudflare: counting page views anonymously.
Accountants, lawyers and public authorities: only where a consultancy engagement exists, and only to the extent the work requires.

Transfers abroad

The servers of the providers listed above are located outside Türkiye. Your personal data is therefore transferred abroad under Article 9 of the Law, with the safeguards that article requires.

Any such transfer is limited to the data necessary to provide the service, and to the period for which it is necessary.

How long we keep it

Initial enquiries that do not lead to an engagement: no longer than 2 years.
Records of clients with whom an engagement was concluded: for the limitation and retention periods required by applicable legislation, counted from the end of the relationship.
Server access logs: for as long as the hosting provider technically retains them.
Once the period expires, your data is deleted, destroyed or anonymised.

Your rights under Article 11 of the Law

By applying to the data controller, you may exercise the following rights:

To learn whether your personal data is being processed and, if so, to request information about it.
To learn the purpose of processing and whether the data is used in line with that purpose.
To know the third parties in Türkiye or abroad to whom the data has been transferred.
To request correction if the data is incomplete or inaccurate.
To request erasure or destruction under the conditions set out in Article 7 of the Law.
To request that correction, erasure or destruction be notified to the third parties to whom the data was transferred.
To object to an adverse outcome reached solely through automated analysis of your data.
To claim compensation if you suffer damage because your data was processed unlawfully.

How to apply

You may send your request, together with information verifying your identity, to the email address above or in writing to our postal address. Depending on the nature of the request, your application will be concluded within thirty days at the latest.

If your application is refused, if you find the response insufficient, or if you receive no response in time, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board.

Questions?

You can send any question, request or formal application regarding these documents through the channels below.

info@sirketkurulus.com.tr +90 212 450 12 78