Pursuant to Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and applicable GDPR principles, SUNS Technology, acting as data controller, shares the following information about the processing of your personal data.

1. Data Controller

Company: SUNS Technology
Address: Istanbul
Email: [email protected]
Phone: +90 850 346 31 08

2. Categories of Personal Data Processed

Identity: First and last name
Contact: Email, phone number, address
Customer/Inquiry: Project details, quotation requests, content submitted via forms
Recruitment: CV, education and work experience when applying for a role
Security: IP address, cookie data, browser information, visit date/time
Marketing: Newsletter subscription and preferences

3. Purposes of Processing

Responding to inquiries submitted through the website
Managing quotation and service delivery processes
Evaluating career applications
Sending newsletters, campaigns and promotional communications (with explicit consent)
Analysing site usage and improving service quality
Fulfilling legal obligations
Ensuring information security

4. Legal Basis

Under KVKK art. 5/2: statutory requirement, necessity for the performance of a contract, legal obligation, legitimate interest. Marketing-related processing is carried out solely on the basis of your explicit consent under KVKK art. 5/1.

5. Third Parties to Whom Data is Transferred

Domestic and international cloud/server providers (Vercel, AWS, etc.)
Analytics and advertising platforms (Google, Microsoft, Meta, LinkedIn) — with explicit consent
Competent authorities — where legally required
Business partners and solution providers — only to the extent necessary

6. International Transfers

Your data may be processed outside Türkiye via cloud providers and third-party analytics/marketing tools. Such transfers are conducted with the safeguards required by KVKK art. 9.

7. Collection Methods

Personal data is collected via Site forms, cookies, email, phone and social channels, through automated or manual means.

8. Retention Period

Your data is retained for the period required by the purpose of processing and applicable legal obligations. Upon expiry, it is deleted, destroyed or anonymised.

9. Your Rights (KVKK Art. 11 / GDPR)

By contacting the data controller you may:

Learn whether your data is being processed
Learn the purpose and whether it is used accordingly
Know the domestic/international recipients of your data
Request correction of incomplete or inaccurate data
Request deletion or destruction
Object to adverse outcomes of processing
Claim damages if you suffer losses due to unlawful processing

10. How to Submit a Request

To exercise your rights, send your request together with information allowing identity verification to [email protected]. Requests are resolved within 30 days at the latest.