Personal Data Protection and Processing Notice
Website Visitors, Contact Form, Pre-meeting Assistant and Appointments
Under Turkish Personal Data Protection Law No. 6698 ("KVKK" or the "Law"), your personal data is processed by the Company identified below, acting as data controller, for the purposes and on the legal grounds explained in this Privacy Notice.
1. Data Controller
Your personal data is processed by the following Company, which operates under the GDP Consultancy brand, as data controller:
| Trade Name | GULTEPE DATA PARTNERS YAZILIM VE DANIŞMANLIK LİMİTED ŞİRKETİ |
|---|---|
| Brand | GDP Consultancy |
| Mersis No | 0411113314700001 |
| Trade Registry No | 476443-5 (Istanbul Trade Registry) |
| Tax Office / Tax No | Göztepe Tax Office / 4111133147 |
| Address | Fikirtepe Mah. Yıldırım Sk. A Blok No: 10/1 İç Kapı No: 361 Kadıköy / İstanbul |
| Website | gdpconsultancy.com |
| KVKK Application E-mail | info@gdpconsultancy.com |
| Phone | +90 505 468 79 01 |
2. Channels We Collect Through
This Privacy Notice covers the personal data we process through the following channels on our website:
- Contact (message) form
- Pre-meeting assistant: an AI-supported assistant that draws up a brief needs map before the meeting
- Online appointment (calendar) tool
- Direct contact by e-mail or phone, and cookies
3. Personal Data Processed
If you use the channels above, the following personal data may be processed:
| Data Category | Data Types |
|---|---|
| Identity | First name, last name |
| Contact | Business e-mail address, phone number (optional) |
| Customer Transaction | Company name, meeting topic (service area), message content and the needs information you share with the pre-meeting assistant (problem definition, data sources, the requested decision/system, urgency) |
| Transaction Security | IP address, cookie records, log records, browser and device information |
4. Purposes of Processing
Your personal data is processed for the following purposes:
- Responding to your contact and appointment requests and drawing up a needs map before the meeting
- Conducting consulting and service processes, pre-contract discussions and proposal processes
- Managing customer relationships and performing the services provided
- Ensuring the security of the website, preventing misuse, and technical improvement
- Fulfilling legal obligations
The information you share is used only for the purposes above.
5. Legal Grounds for Processing
Your personal data is processed on the following legal grounds under Article 5 of the KVKK:
- Being directly related to the conclusion or performance of a contract (Art. 5/2-c), including pre-contract discussion processes
- Being mandatory for the Company to fulfil its legal obligations (Art. 5/2-ç)
- Being mandatory for the legitimate interests of the Company, provided that it does not harm your fundamental rights and freedoms (Art. 5/2-f), with respect to security and service processes
- Your explicit consent (Art. 5/1), solely with respect to the transfer of personal data abroad and non-mandatory cookies (explained below)
6. Pre-meeting Assistant and Data Retention
The pre-meeting assistant on our contact page is an AI-supported assistant used solely to draw up a needs map before the meeting; it is not intended for sales, technical support or general conversation. In this regard:
- The messages you share with the assistant are transmitted, via the Company's server, to an AI service provider located abroad (Anthropic) so that a response can be generated.
- The conversation transcript is not stored by the Company. Only the summary you approve is sent by e-mail or added as a note to your appointment invitation, according to your preferred method.
- Using the assistant is not mandatory. You may book an appointment directly or use the message form if you wish.
7. Method of Collection
Your personal data is collected in electronic form, by wholly or partially automated means, through the website contact form, the pre-meeting assistant, the online appointment tool, e-mail, phone and cookies.
8. Transfer of Personal Data
Your personal data may be transferred to the following parties, limited to achieving the purposes above:
Within Turkey:
- To authorised public institutions and organisations upon legal request
- To suppliers and business partners from whom services are received
These transfers are carried out within the conditions set out in Article 8 of the KVKK.
Abroad:
Since the website hosting and server infrastructure (Vercel), the AI service on which the pre-meeting assistant runs (Anthropic) and the online appointment tool are located abroad, your relevant personal data may be transferred abroad in accordance with the conditions set out in Article 9 of the KVKK (an adequacy decision; in its absence, appropriate safeguards such as standard contracts or binding corporate rules, or the exceptional cases provided for in the Law, or your explicit consent).
9. Retention Period
Your personal data is retained for the period required by the purpose of processing and for the statutory limitation and retention periods set out in the relevant legislation. At the end of these periods, your personal data is deleted, destroyed or anonymised.
10. Your Rights as a Data Subject
Under Article 11 of the KVKK, by applying to the data controller you may exercise the following rights:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether it is used in accordance with that purpose
- To know the third parties to whom it is transferred, within Turkey or abroad
- To request correction if it has been processed incompletely or incorrectly
- To request its deletion or destruction within the conditions set out in the Law
- To request that correction, deletion and destruction operations be notified to the third parties to whom the data has been transferred
- To object to a result against you arising from the analysis of your data solely by automated systems
- To request compensation if you suffer damage due to unlawful processing
11. How to Apply
You may submit your requests regarding the exercise of your rights, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller", by the following methods:
- In writing and with a wet signature, to the Company's address stated above
- From your e-mail address registered in our system, to the Company's application e-mail address
Your application must include your name and surname, a signature if the application is in writing, your Turkish ID number, an address for notification, and the subject of your request. Your requests are concluded free of charge, as soon as possible and within thirty days at the latest, depending on their nature. If the operation also entails a cost, the fee in the tariff determined by the Board may be charged.
12. Cookies
Cookies are used on our website for the operation of the site and to improve the user experience. For detailed information about cookie types, their purposes and management, you may review the Cookie Policy page.
Last updated: 18 June 2026