Pursuant to Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and applicable GDPR principles, SUNS Technology, acting as data controller, shares the following information about the processing of your personal data.
1. Data Controller
- Company: SUNS Technology
- Address: Kayışdağı Mah. Dudullu Cad. No:2/4, Kayışdağı, Metro İstasyonu Girişi Yanı, 34755 Ataşehir/İstanbul
- Email: info@sunstech.com.tr
- Phone: +90 850 346 31 08
2. Categories of Personal Data Processed
- Identity: First and last name
- Contact: Email, phone number, address
- Customer/Inquiry: Project details, quotation requests, content submitted via forms
- Recruitment: CV, education and work experience when applying for a role
- Security: IP address, cookie data, browser information, visit date/time
- Marketing: Newsletter subscription and preferences
3. Purposes of Processing
- Responding to inquiries submitted through the website
- Managing quotation and service delivery processes
- Evaluating career applications
- Sending newsletters, campaigns and promotional communications (with explicit consent)
- Analysing site usage and improving service quality
- Fulfilling legal obligations
- Ensuring information security
4. Legal Basis
Under KVKK art. 5/2: statutory requirement, necessity for the performance of a contract, legal obligation, legitimate interest. Marketing-related processing is carried out solely on the basis of your explicit consent under KVKK art. 5/1.
5. Third Parties to Whom Data is Transferred
- Domestic and international cloud/server providers (Vercel, AWS, etc.)
- Analytics and advertising platforms (Google, Microsoft, Meta, LinkedIn) — with explicit consent
- Competent authorities — where legally required
- Business partners and solution providers — only to the extent necessary
6. International Transfers
Your data may be processed outside Türkiye via cloud providers and third-party analytics/marketing tools. Such transfers are conducted with the safeguards required by KVKK art. 9.
7. Collection Methods
Personal data is collected via Site forms, cookies, email, phone and social channels, through automated or manual means.
8. Retention Period
Your data is retained for the period required by the purpose of processing and applicable legal obligations. Upon expiry, it is deleted, destroyed or anonymised.
9. Technical Error Logs
To keep our website working properly and to find and fix errors, a technical error log is created automatically by your browser and our servers when an error occurs on the site. The log contains the address of the page where the error occurred, the browser and device type, the country, and the error message. Before a log is sent, personal data in it (such as query parameters in page addresses, email addresses and phone numbers) is removed automatically. Error logs are kept in our management panel, which only authorized staff can access; individual error events are deleted automatically after 90 days and the summary record of the same error after 180 days at the latest. This processing is based on our legitimate interest under KVKK Art. 5(2)(f) and GDPR Art. 6(1)(f).
10. Your Rights (KVKK Art. 11 / GDPR)
By contacting the data controller you may:
- Learn whether your data is being processed
- Learn the purpose and whether it is used accordingly
- Know the domestic/international recipients of your data
- Request correction of incomplete or inaccurate data
- Request deletion or destruction
- Object to adverse outcomes of processing
- Claim damages if you suffer losses due to unlawful processing
11. How to Submit a Request
To exercise your rights, send your request together with information allowing identity verification to info@sunstech.com.tr. Requests are resolved within 30 days at the latest.