This privacy notice has been prepared by AI Solution House (ASH), which operates this website, to inform its visitors in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.
This version of the notice describes how the site works today. When a new feature that collects personal data is introduced on the site, the notice will be updated and its update date changed.
Identity of the data controller
The data controller for your personal data is AI Solution House (ASH). You can reach us through the contact page on our website.
Personal data processed and how it is collected
The contact form on the site includes your full name, email address, optional phone number and the message text you write freely. This data is collected electronically when you fill in and submit the form, and is sent to us by email.
When you use the site's meeting booking screen (on the home page, the contact page or the product pages), your full name, email address and any booking note are collected electronically through the Google Calendar booking page and sent to our corporate calendar.
The newsletter sign-up field only asks for your email address; however, this field is not yet connected to a service and the address you enter does not reach us.
If you give your explicit consent in the cookie bar, usage data such as the pages you visit, visit duration, referral source, device and browser information, approximate location and online identifiers (cookie IDs) is collected automatically through Google Analytics.
When you visit the site, technical logs such as your IP address, browser and operating system information, the requested address and a timestamp may be created by the infrastructure hosting the site so that the connection can be established.
Purposes of processing personal data
- Providing the website securely and without interruption
- Technical maintenance of the site, error detection and prevention of misuse
- With your explicit consent, statistical analysis and improvement of how the website is used
- Evaluating and responding to the request you send through the contact form or the meeting booking screen, scheduling the meeting and maintaining communication
- Fulfilling obligations arising from applicable legislation
Legal basis for processing
Server logs are based on the legal grounds that processing is necessary for the data controller to fulfil its legal obligation under subparagraph (ç), and for the legitimate interests of the data controller under subparagraph (f), provided that it does not harm the fundamental rights and freedoms of the data subject, both in the second paragraph of Article 5 of the KVKK.
The data you share to send your request through the contact form is processed on the basis of subparagraph (c), being directly related to the establishment or performance of a contract, and, where relevant, your explicit consent.
Usage data processed through Google Analytics is processed on the basis of your explicit consent under the first paragraph of Article 5 of the KVKK. You can withdraw your consent at any time via the "Cookie preferences" link at the bottom of the page; withdrawal does not affect processing carried out before then.
Transfer of personal data
Service providers are used to host the site's data; in this context, technical logs may be created on the service provider's infrastructure.
The data you send through the contact form is delivered through our email delivery provider Resend, Inc. (USA) and stored on the infrastructure of our corporate email provider, Google (Google Workspace). As these providers' servers are located abroad, this data is transferred abroad.
The data you enter on the meeting booking screen is also processed on Google Calendar (Google Workspace) infrastructure and is therefore transferred abroad.
Google Analytics usage data collected with your explicit consent is processed on Google's servers abroad and is therefore transferred abroad.
Apart from this, your personal data is not shared with third parties except with legally authorized public institutions and organizations in the cases provided for by law; it is not sold or transferred for marketing purposes.
Retention period
Personal data is retained for as long as necessary for the purpose for which it is processed and for the statutory limitation periods set out in the relevant legislation; at the end of this period it is deleted, destroyed or anonymized.
Drafts kept in your browser's local storage when the contact form cannot be sent are entirely under your control; they are deleted after a successful submission, and you can also delete them at any time by clearing your browser data.
Your rights as a data subject
Under Article 11 of the KVKK, you have the following rights by applying to the data controller:
- To learn whether your personal data is being processed
- To request information about it if it has been processed
- To learn the purpose of processing and whether it is used in line with that purpose
- To know the third parties to whom it is transferred, domestically or abroad
- To request correction if it is incomplete or inaccurate
- To request deletion or destruction under the conditions set out in Article 7 of the Law
- To request that correction, deletion and destruction be notified to third parties to whom the data has been transferred
- To object to an outcome against you arising from the analysis of the processed data exclusively by automated systems
- To request compensation for damages if you suffer loss due to unlawful processing
How to apply
You can submit requests regarding your rights to AI Solution House in writing, through the channels on the contact page of our website, in accordance with the conditions set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.
Your application must include your full name, your signature (for written applications), your Turkish national ID number or, for foreign nationals, your nationality and passport number, your address for notification, your email address for notification if any, and the subject of your request.
Your request will be concluded free of charge as soon as possible according to its nature, and within thirty days at the latest. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
Changes to this notice
This notice may be revised in line with changes in legislation or updates to how the site works. The current version is always published on this page.