Areka Mühendislik Danışmanlık San. Tic. ve Ltd. Şti. (“Areka Mühendislik”, the “Company”) processes your personal data as a data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”). This notice is prepared in accordance with Article 10 of the Law and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
1. Identity of the data controller
| Company name | Areka Mühendislik Danışmanlık San. Tic. ve Ltd. Şti. |
| Address | Reşadiye Mahallesi, Kumyol Caddesi, Kardeşler İş Merkezi No: 7/419, Çorlu / Tekirdağ, Türkiye |
| Telephone | +90 282 409 07 21 · +90 533 571 65 47 |
| info@arekacevre.com · hakan@arekacevre.com | |
| Registered e-mail (KEP) | arekamuhendislik@hs01.kep.tr |
| MERSIS number | 0074112787400001 |
| Trade registry number | 22403 |
| Tax office | Çorlu |
| Tax number | 0741127874 |
| Website | www.arekacevre.com |
2. Personal data we process
Our Company provides environmental engineering and environmental consultancy services. The data we process depends on your relationship with us:
| Data subject group | Categories of data |
|---|---|
| Website visitors | Transaction security data (IP address, browser and device information, visit logs), cookie data |
| Users of the contact form | Identity data (name, surname), contact data (e-mail, telephone), content of the enquiry |
| Representatives of clients and prospective clients | Identity and contact data, company and role information, contract and proposal records, financial data (invoicing and payment) |
| Representatives of suppliers and business partners | Identity and contact data, company information, contract and payment records |
| Job applicants | Identity and contact data, education and professional experience stated in the CV |
We do not collect special categories of personal data (health, biometric data, religion, membership information) through this website. Please do not send us such data.
3. Purposes and legal grounds
| Purpose | Legal ground (KVKK Art. 5) |
|---|---|
| Responding to enquiries and proposal requests | Art. 5/2-c — necessary for the conclusion or performance of a contract Art. 5/2-f — legitimate interest |
| Providing environmental consultancy, reporting and regulatory follow-up | Art. 5/2-c — performance of a contract Art. 5/2-a — expressly provided for by law |
| Invoicing, accounting and tax obligations | Art. 5/2-a and Art. 5/2-ç — compliance with a legal obligation |
| Website security, log keeping, spam and bot protection | Art. 5/2-f — legitimate interest |
| Measuring visitor statistics (analytics cookies) | Art. 5/1 — explicit consent given through the cookie banner |
| Displaying external content such as maps and video | Art. 5/1 — explicit consent |
| Assessing job applications | Art. 5/2-c — necessary prior to entering into a contract |
| Exercising the right of defence in legal disputes | Art. 5/2-e — establishment or protection of a right |
4. How we collect your data
Your data is collected through the contact form on our website, by e-mail, telephone, post and registered electronic mail, in face-to-face meetings and during contractual processes, by partly automated and non-automated means. For data collected through cookies, please see our Cookie Policy.
5. Recipients
| Recipient group | Purpose | Legal ground |
|---|---|---|
| Competent public authorities (Ministry of Environment, Urbanisation and Climate Change, provincial directorates, courts) | Statutory notification and reporting obligations | Art. 8/2-a |
| Accountants, auditors and legal advisers | Accounting, tax and legal processes | Art. 8/2-a and Art. 5/2-ç |
| IT infrastructure and hosting providers | Operating the website and e-mail infrastructure | Art. 5/2-f — legitimate interest |
6. International transfers
| Transfer | Country / provider | Basis |
|---|---|---|
| Website hosting | United States — Leaseweb USA, Inc. (Manassas, Virginia) | KVKK Art. 9 — continuous transfer; standard contractual clauses under Art. 9/2 as amended by Law No. 7499 |
| Analytics (Google Analytics 4) | Google Ireland Ltd. — data may be transferred to the USA | KVKK Art. 9/5 — your explicit consent (cookie banner) |
| Form security (Google reCAPTCHA), maps and video | Google Ireland Ltd. — data may be transferred to the USA | Necessary cookies Art. 5/2-f; external media Art. 9/5 — explicit consent |
The Turkish Personal Data Protection Board has not issued an adequacy decision for the United States. Continuous transfers are therefore based on appropriate safeguards under Article 9/2 of the Law — standard contractual clauses, binding corporate rules or an undertaking. Where standard contractual clauses are signed, the Board is notified within five business days of signature.
7. Retention periods
| Data | Retention period |
|---|---|
| Contact form records | 2 years after the enquiry is concluded |
| Contracts and commercial books | 10 years (Turkish Commercial Code Art. 82) |
| Invoices and financial records | 5 years (Tax Procedure Law Art. 253) |
| Job application CVs | 1 year from application |
| Website log records | 2 years |
| Cookie consent record | 180 days |
8. Your rights under Article 11
| a | To learn whether your personal data is processed |
| b | To request information if it has been processed |
| c | To learn the purpose of processing and whether the data is used accordingly |
| ç | To know the third parties in Türkiye or abroad to whom the data is transferred |
| d | To request correction of incomplete or inaccurate data |
| e | To request erasure or destruction under Article 7 |
| f | To request that actions under (d) and (e) be notified to third parties |
| g | To object to an adverse outcome produced solely by automated analysis |
| ğ | To claim compensation for damage arising from unlawful processing |
9. Applications and complaints
To exercise your rights, please use the Data Subject Application Form. Your application is concluded free of charge as soon as possible and within thirty days at the latest. If the process requires an additional cost, the fee in the tariff published by the Board may be charged.
If your application is rejected, the response is insufficient or no response is given in time, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning the response and in any case within sixty days of the application date.
If you are located in the European Union, please also see our GDPR Privacy Notice.
10. Updates
This notice was last updated on 02.10.2026. It may be revised in line with changes in legislation and our processing activities; the version in force is published on this page.