This is a translation provided for information. The Turkish text is the governing version of this notice.
1. Data controller
Your personal data is processed, as data controller, by Zat Savunma Teknolojileri Sanayi Ticaret Anonim Şirketi, within the scope described in this notice.
- Legal entity
- Zat Savunma Teknolojileri Sanayi Ticaret Anonim Şirketi
- VAT
- Maslak VD / 465 126 6009
- MERSIS
- 0465126600900001
- Trade Registry
- 342102-5
- Address
- Maslak Mah. Saat Sk. Spine Tower
No:5 İç Kapı No:23
Sarıyer / Istanbul · Türkiye - info@zatdt.com
2. Personal data we process
The site has no user accounts, advertising or visitor analytics. Depending on how you use it, the data processed is limited to the following:
- Identity and contact: the full name and email address you enter in the contact form and, if you choose to give them, your phone number and company name.
- Content of your request: the subject and message you write in the form or in your email.
- Transaction security: the IP address, date and time, requested address and browser details that reach the web server with each page request; for form submissions, a one-way summary (hash) derived from the IP address to limit abuse.
- Browser storage: records kept on your device, such as your language choice and your cookie preferences. See the Cookie Policy for details.
We do not ask for special categories of personal data (such as health, religion or political opinion). Please do not include such data, or any classified information, in your message.
3. Purposes of processing
Your personal data is processed only for the following purposes and is never used for marketing or profiling:
- To review your message and request, reply to you and, where relevant, handle the offer and meeting process.
- To keep the site secure and available, and to block automated and unwanted submissions (spam).
- To show the site in the language you chose or the one that suits your location.
- To show the Google Maps view on the contact page, if you consent to it.
- To meet legal obligations and to protect rights in the event of a dispute.
4. Legal bases
Your personal data is processed on the following legal bases listed in Article 5 of the Law:
- Processing is directly related to the conclusion or performance of a contract (Art. 5/2-c): correspondence about a cooperation, offer or service request.
- Processing is necessary for the data controller to comply with a legal obligation (Art. 5/2-ç): records required by legislation and requests from competent authorities.
- Processing is necessary to establish, exercise or protect a right (Art. 5/2-e): keeping correspondence for possible disputes.
- Our legitimate interests, provided your fundamental rights and freedoms are not harmed (Art. 5/2-f): answering general questions, site security, spam prevention and the site's strictly necessary storage.
- Your explicit consent (Art. 5/1): preference storage and loading the Google Maps view. Both are off by default.
The checkbox in the form only confirms that you have read this notice; it is not a declaration of explicit consent, and a reply to your message never depends on explicit consent. You can withdraw any consent you gave at any time through the “Cookie preferences” link at the foot of every page; withdrawal does not affect processing carried out before it.
5. How the data is collected
Your personal data is collected electronically: directly from you through the contact form and email, automatically by the web server during page requests, and through your browser's storage.
When you open the site from an English page and have not chosen a language before, your IP address is used in memory on our server only to look up your country, so that a suitable language can be suggested. It is not stored for this purpose and is never sent to any third party.
6. Transfers
Your personal data is never sold, rented out or shared with anyone for marketing. Limited to the purposes above, and in line with Articles 8 and 9 of the Law, it may be transferred to the following recipients:
- Our hosting and email service provider: the site and our email system run on this provider's servers. The provider processes the data only to deliver the service and on our instructions.
- Competent public authorities and courts: only where legislation requires it, and only to the extent requested.
- Google (Google LLC and Google Ireland Limited): the Google Maps view loads only with your consent or when you press the “Show map” button; your IP address then reaches Google, which may set cookies. The fonts on the pages are loaded from the Google Fonts service, so your browser sends your IP address to Google's servers when a page opens; Google Fonts sets no cookies.
Transfers to Google are transfers abroad and are subject to Google's privacy policy: https://policies.google.com/privacy. A recipient abroad may not offer the same level of protection as in Türkiye. For the map, this transfer is an incidental transfer based on your explicit consent under Article 9 of the Law, given after being informed of this risk.
7. Retention periods
Your personal data is kept for as long as the purpose of processing requires and for the periods set by the relevant legislation:
- Contact form and email correspondence: for as long as needed to answer and follow up your request; correspondence that becomes part of a commercial relationship, for the 10 years required by the Turkish Commercial Code.
- The IP summary kept for form security: 24 hours at most.
- Web server access logs: kept by the hosting provider for the period required by Law No. 5651 and related legislation.
- Browser storage: for the period given for each record on the Cookie Policy page (for example 24 hours for the location language record and 180 days for the consent record).
When the period ends or the conditions for processing no longer apply, your data is erased, destroyed or anonymised under Article 7 of the Law and the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.
8. Your rights
Under Article 11 of the Law you may apply to the data controller to:
- Learn whether your personal data is being processed.
- Request information about the processing if it has been processed.
- Learn the purpose of the processing and whether the data is used in line with that purpose.
- Know the third parties, in Türkiye or abroad, to whom your personal data is transferred.
- Ask for your personal data to be corrected if it is incomplete or inaccurate.
- Ask for your personal data to be erased or destroyed under the conditions in Article 7 of the Law.
- Ask for the correction, erasure or destruction to be notified to the third parties to whom your data was transferred.
- Object to a result that is to your detriment and arises from analysing the data exclusively through automated systems.
- Claim compensation if you suffer damage because your personal data was processed unlawfully.
9. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request in one of the following ways:
- In writing: deliver a petition with your wet signature by hand, by post or through a notary to Maslak Mah. Saat Sk. Spine Tower No:5 İç Kapı No:23, Sarıyer / İstanbul, Türkiye.
- Signed with a secure electronic signature or a mobile signature, sent to info@zatdt.com.
- From an email address you have previously given us and that is registered in our systems (for example the address you used in the contact form), sent to info@zatdt.com.
Your application must include your full name; your signature, if it is in writing; your Turkish identity number or, if you are not a Turkish citizen, your nationality and passport number (or identity number, if any); your residential or business address for notification; your email address, if any; your phone number; and what you are requesting.
Your application is concluded free of charge as soon as possible, and within 30 days at the latest, depending on the nature of the request. If the action involves an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.
If your application is rejected, if you find the answer insufficient, or if no answer is given in time, you may file a complaint with the Personal Data Protection Board within 30 days of learning the answer and, in any case, within 60 days of the application date: https://www.kvkk.gov.tr
10. Changes
This notice may be updated when the legislation or the site's data processing changes. The current version is always published on this page, with the date of the last update at the top. For cookies and browser storage, see the Cookie Policy page.