1. Data controller
Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR"), the data controller is:
- Legal name: Yaman İtriyat Deposu Sanayi ve Ticaret Limited Şirketi
- Brand: Zentora Ajans
- Address: Çobançeşme Mah. Ferah Sk. No:2, 34196 Bahçelievler / İstanbul
- Tax office / no.: Yenibosna Vergi Dairesi Müdürlüğü / 9350830514
- MERSIS no.: 0935-0830-5140-0001
- Phone: 0506 093 12 97
- Email: info@zentoraajans.com.tr
2. Data processed and purposes
- Contact form: name, email, phone, service of interest, message, page and language of submission, country/city derived from the IP address and the hashed IP. Purpose: to receive and answer your request and prepare offers; the content is emailed to info@zentoraajans.com.tr and you receive an automatic confirmation email.
- Visit statistics: page path and title, referrer, UTM source, browser, operating system, device type, page language, new/returning visit, country/region/city and timestamp. Purpose: measuring and improving the website. No cookies are used for analytics.
- Security: filtering bot traffic and preventing form abuse (spam).
IP address and visitor ID: your IP address is not anonymised or truncated. Your IP address and browser information (user-agent) are hashed together with a site-specific secret key using HMAC-SHA256, and only this pseudonymised value is stored as a "visitor ID". It is still personal data. Until your country/city has been determined, the full IP address is kept briefly (usually a few minutes, at most 2 days) and then deleted.
Geolocation and international transfer: to determine country/city, the IP address may be sent to third-party services outside Türkiye (ip-api.com, with ipwho.is as fallback).
3. Legal bases
Contact form data is processed to take steps at your request prior to or for a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)) and on our legitimate interest (Art. 5/2-f; GDPR Art. 6(1)(f)). Security processing relies on our legitimate interest and data-security obligations. Visit statistics are recorded on the basis of our legitimate interest in improving the website (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)), provided your fundamental rights are not harmed.
4. Retention
- Visit statistics: automatically deleted after 365 days.
- Contact form entries: kept as long as needed to answer your request and handle any resulting business relationship; deleted on request.
5. Recipients
We never sell your data. Our hosting provider, email provider and (if enabled) geolocation services may access data only as needed to provide their service. The embedded Google Maps on the contact page may send your IP address and browser information to Google when the page loads.
6. Your rights
Under KVKK Art. 11 and the GDPR you may request access, rectification, erasure, restriction, objection and compensation. Send requests to info@zentoraajans.com.tr or the postal address above; we reply within 30 days. EU residents may also complain to their supervisory authority.
For details see the Privacy Policy.