This notice applies to visitors located in the European Economic Area and the United Kingdom. It explains how Areka Mühendislik Danışmanlık San. Tic. ve Ltd. Şti. processes personal data under the General Data Protection Regulation (EU) 2016/679 (“GDPR”). For processing under Turkish law, please see our Data Protection Notice.
1. Controller
| Controller | Areka Mühendislik Danışmanlık San. Tic. ve Ltd. Şti. |
| Address | Reşadiye Mahallesi, Kumyol Caddesi, Kardeşler İş Merkezi No: 7/419, Çorlu / Tekirdağ, Türkiye |
| info@arekacevre.com | |
| Registered e-mail (KEP) | arekamuhendislik@hs01.kep.tr |
We have not appointed a representative in the Union under Article 27 GDPR, as our processing of data relating to persons in the Union is occasional, does not include special categories of data on a large scale and is unlikely to result in a risk to the rights and freedoms of data subjects. If this assessment changes, a representative will be appointed and published here.
2. What we process and why
| Purpose | Data | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Responding to enquiries sent through the contact form | Name, e-mail address, telephone number, content of the enquiry | Art. 6(1)(b) — steps prior to entering into a contract Art. 6(1)(f) — legitimate interest in answering enquiries |
| Providing environmental consultancy services | Identity, contact, contractual and financial data of client representatives | Art. 6(1)(b) — performance of a contract |
| Website security, logging, spam and bot protection | IP address, browser and device information, request logs | Art. 6(1)(f) — legitimate interest in keeping the service secure |
| Measuring visitor statistics | Pseudonymous usage data collected through Google Analytics 4 | Art. 6(1)(a) — consent, given through the cookie banner |
| Displaying maps and video content | IP address and device data shared with the provider | Art. 6(1)(a) — consent |
| Complying with accounting and tax obligations | Invoicing and payment records | Art. 6(1)(c) — legal obligation under Turkish law |
3. Transfers to third countries
Our company is established in Türkiye, which is a third country for the purposes of Chapter V GDPR and for which the European Commission has not issued an adequacy decision. In addition, our website is hosted at Leaseweb USA, Inc. in Manassas, Virginia, United States, and analytics, reCAPTCHA, map and video services are provided by Google Ireland Ltd., which may transfer data to the United States.
Where we transfer personal data outside the EEA we rely on:
- your explicit consent for analytics and external media (Art. 49(1)(a) GDPR), and
- standard contractual clauses adopted by the European Commission, together with the transfer mechanisms offered by our service providers, for hosting and processing that is necessary for the service (Art. 46(2)(c) GDPR).
You may request a copy of the safeguards in place by writing to info@arekacevre.com.
4. Retention
We keep personal data only as long as necessary for the purposes described above, and for the statutory periods required by Turkish commercial and tax law (generally ten years for contracts and commercial books, five years for invoices). Contact form records are deleted two years after the enquiry is concluded. Cookie consent records are kept for 180 days.
5. Your rights
| Art. 15 | Right of access to your personal data |
| Art. 16 | Right to rectification of inaccurate or incomplete data |
| Art. 17 | Right to erasure (“right to be forgotten”) |
| Art. 18 | Right to restriction of processing |
| Art. 20 | Right to data portability |
| Art. 21 | Right to object to processing based on legitimate interests |
| Art. 7(3) | Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal |
To exercise any of these rights, write to info@arekacevre.com. We respond without undue delay and in any event within one month of receipt, in line with Article 12(3) GDPR. Where the request is complex we may extend this period by two further months and will inform you of the reason.
6. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
7. Complaints
You have the right to lodge a complaint with the supervisory authority in your country of residence, place of work or the place of the alleged infringement. You may also complain to the Turkish Personal Data Protection Authority (KVKK) or contact us first at info@arekacevre.com so that we can try to resolve the matter.
8. Cookies
Our use of cookies, the full cookie inventory and how to withdraw consent are set out in the Cookie Policy. No analytics or external media cookie is set before you give consent.
Last updated: 02.10.2026