GDPR Notice
Last updated: 18.05.2026
This notice is provided by Altek Klima Sistemleri to data subjects resident in the European Union / European Economic Area under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR").
1. Controller
Devrim Tunçer — sole proprietor trading under the "Altek Klima Sistemleri" brand.
Address: Kestel Mahallesi, Üniversite Caddesi No: 86/3, Alanya / Antalya, Türkiye
Phone: +90 538 691 22 83 — Email: devrim@donedynamics.com — Web: https://donedynamics.com
KEP: devrim.tuncer@hs01.kep.tr — Tax office / Tax No.: Alanya Vergi Dairesi — 8670898531
A Data Protection Officer (DPO) has not been designated; the thresholds of Art. 37(1) GDPR are not met. For any data-protection matter, please use the contact details above.
1A. Data Minimization
This website operates as a public information presence only. We do not maintain a CRM, marketing list, customer database, lead scoring system, or behavioural profiling. The only personal data processed through the site is:
- Strictly necessary cookies (session, security, language preference).
- Google Analytics with anonymised IP, aggregated reporting only. No advertising features, no remarketing audiences, no cross-device tracking are enabled.
- Contact channel metadata — voluntary e-mail/phone communications, processed only to respond to the request; no record is stored beyond what is necessary to answer the request and what is required by Turkish accounting/tax law where invoices are issued.
- No other personal data category is collected, stored, profiled, sold or shared with third parties for marketing purposes.
2. Purposes and Legal Bases (Art. 6)
- Art. 6(1)(b) — Performance of a contract: receiving requests, scheduling, providing services
- Art. 6(1)(c) — Legal obligation: tax, invoicing, bookkeeping
- Art. 6(1)(f) — Legitimate interest: site security, fraud prevention, quality improvement
- Art. 6(1)(a) — Explicit consent: optional analytics/marketing cookies
3. Categories of Data
- Identity and contact data (name, phone, email, address)
- Service transaction data (request, appointment, payment amount)
- Technical data (IP, cookie identifiers, browser/device info)
4. Recipients
- Professional advisors (accountant, lawyer) under confidentiality
- Suppliers / technicians strictly required for service delivery
- Cloud and analytics providers (Google Ireland Limited — GA4 and Maps)
- Public authorities upon valid legal request
5. International Transfers (Art. 44–49)
Use of Google Analytics 4 and Google Maps may result in personal data being processed outside the EEA (notably in the United States). Such transfers rely on adequacy decisions of the European Commission (Art. 45) — including the EU–US Data Privacy Framework — or on the Standard Contractual Clauses (Art. 46(2)(c)). Information about the relevant safeguards is available on request.
6. Retention
- Communication content: kept until the request is resolved + 1 year for potential legal claims.
- Invoices: 5 years (Turkish Tax Procedure Law).
- Cookies: per the expiry of each cookie listed in the Cookie Policy.
- No other retention applies because no other personal data category is stored.
7. Data-Subject Rights (Art. 15–22)
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure / "right to be forgotten" (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right not to be subject to automated decision-making, including profiling (Art. 22)
- Right to withdraw consent at any time without affecting prior lawful processing
8. Right to Lodge a Complaint
EU/EEA data subjects have the right to lodge a complaint with the supervisory authority of their habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). For data subjects resident in Türkiye, the competent authority is the Personal Data Protection Board (kvkk.gov.tr).
9. Source of Data
Data is collected directly from the data subject (phone, WhatsApp, email, website). No indirect data is collected from third sources. Where a third person submits a request on your behalf, we presume that the person is duly authorised to represent you.
10. Automated Decision-Making
We do not carry out automated decision-making or profiling that produces legal effects or similarly significantly affects the data subject.
11. Contact
For any GDPR request: devrim@donedynamics.com — +90 538 691 22 83