We, OTOS TECH Mühendislik Sanayi A.Ş. (“Otostech” or the “Company”), are committed to protecting the privacy of your personal data when you visit our website, www.otostech.com (the “Website”), and contact us through the Website. This Policy explains what information we use and why, how we share and retain it, our approach to security, and your rights.
OTOS TECH Mühendislik Sanayi A.Ş. is the data controller for personal data processing activities relating to the Website. This Policy applies together with the Otostech General Privacy Notice and Cookie Policy. This Policy is not a statement of explicit consent. Visiting the Website, reading this text or contacting us does not constitute your explicit consent. Where processing requires explicit consent, consent is obtained through a process separate from the provision of information.
1 Scope of the Policy
This Policy covers visits to the Website and enquiries, quotation requests and project requests submitted through its communication channels. Details of separate processes, such as employment, job applications, customer or supplier relationships, are set out in the General Privacy Notice and, where necessary, in notices specific to the relevant process.
2 What Information Is Collected
Information you provide: We process your first and last name, company, email address, telephone number, message content and attachments relevant to your request that you share by email or through the collaboration form on the Website. Not all of this information is requested in every case; the scope of processing depends on the channel you use and your request.
Technical records: IP addresses, request dates and times, pages accessed and error logs generated when you access the Website are processed to the extent necessary for security and technical operation. The scope of these records depends on the configuration of the system used.
Cookie information: The Website uses only the strictly necessary ASP.NET SessionId session cookie. The session identifier is processed for the Website’s essential operation and session continuity, for the purposes and under the conditions explained in the Cookie Policy.
When contacting us, please share only the information needed to assess your request. Please do not send health data, copies of identity documents, payment card information or personal data unrelated to your request through general communication channels. Provide information about third parties only to the extent that you are authorised to share it and it is necessary for your request.
3 How Information Is Used
Enquiries and project requests: The information you share is used to answer your questions, refer your request to the relevant department, assess your engineering and manufacturing needs, prepare quotations and keep track of correspondence. Processing directly related to entering into or performing a contract to which you will be a party as an individual is based on Article 5(2)(c) of the Personal Data Protection Law No. 6698 (“PDPL”). Business communications with corporate representatives and other applicants are based on legitimate interests under Article 5(2)(f), with due regard for your fundamental rights.
Technical operation and security: Access and error logs are used on the basis of legitimate interests to ensure the secure operation of the Website, detect misuse and resolve technical problems (Article 5(2)(f)). Records necessary to protect rights in legal proceedings and disputes are processed under Article 5(2)(e); processing necessary to fulfil legal obligations falls under Article 5(2)(ç).
Separate and specific consent is obtained for activities requiring explicit consent. Asking a question or requesting a quotation does not constitute consent to advertising or marketing messages. If such communications are undertaken, the consent and opt-out requirements of the relevant legislation also apply.
4 Cookies
ASP.NET SessionId is a first-party strictly necessary session cookie used to maintain the session on the Website. It is used for the duration of the session and is normally deleted when the browser session ends. No cookies are used for language preferences, analytics, advertising or marketing. The cookie’s purpose, duration and legal basis are explained in the Otostech Cookie Policy.
5 Who Information Is Shared With
Data necessary to provide Website and communication services is shared with hosting, email and IT service providers, depending on the scope of the service. Access is limited to the purpose and extent required by the service. Providing technical services does not mean that a provider has access to all personal data or may use it for its own purposes.
Where a legal obligation or a duly submitted request exists, necessary information is provided to authorised public bodies and judicial authorities. Records necessary to handle a legal dispute may be shared with legal advisers. Transfers are limited to the data necessary for the relevant purpose and are subject to the conditions in Article 8 of the PDPL.
The Website’s hosting service is provided by Turhost. Information you submit through forms on the Website is sent to the Company’s email accounts to assess and respond to your requests and is stored on email infrastructure located in Türkiye. Form data is therefore stored domestically on this email infrastructure. This statement concerns the storage of form data in the email environment; the explanations in Section 7 apply to third-party services integrated into the Website.
6 How Information Is Protected and How Long It Is Retained
Technical and organisational measures appropriate to the nature of the data and the risks involved are taken to prevent unlawful processing and unauthorised access and to ensure the security of personal data. Access is restricted to individuals who need it to perform their duties. Confidentiality, authorisation and data security obligations are observed in relationships with service providers.
Data is retained for the periods required by applicable legislation or necessary for the purpose of processing. For communication records, the follow-up of the request and any ongoing contract or dispute are taken into account; for technical records, security needs apply; and for cookies, the periods stated in the Cookie Policy apply. When the conditions for retention no longer exist, data is erased, destroyed or anonymised. Backup copies are also included in the applicable disposal processes.
7 External Links and Embedded Content
When you follow a link from the Website to another website, that website’s processing activities are subject to its own privacy notices. Where a map or similar third-party content is displayed within the Website, separate data communications with the provider may occur. The necessary information and, where applicable, consent procedures for these services are provided before processing begins. The use of external services does not remove Otostech’s responsibilities for its own processing activities.
8 Your Rights and How to Exercise Them
Under Article 11 of the PDPL, you may learn whether your data is processed; request information if it has been processed; learn the purpose of processing, whether the data is used in line with that purpose, and the recipients in Türkiye or abroad. You may request the rectification of incomplete or inaccurate data, its erasure or destruction where the legal conditions are met, and notification of these actions to third parties to whom the data has been transferred. You may object to an outcome that is adverse to you resulting solely from automated analysis, and request compensation for damage caused by unlawful processing.
Address for written requests: OTOS TECH Mühendislik Sanayi A.Ş., Şekerpınar Mahallesi, Geri Dönüşümcüler Sitesi, Ayçiçek Sokak No: 29, Çayırova / KOCAELİ.
Email: You may submit your request to information@otostech.com from an email address previously provided to the Company and registered in our system. You may also send requests signed with a secure electronic signature or mobile signature to this address. Other valid methods and the information required in a request are explained in the General Privacy Notice. Requests are concluded within 30 days at the latest and are generally free of charge. You may submit requests by registered electronic mail (KEP) to otostech@hs01.kep.tr from your own KEP address.
9 Updates to the Policy
The Policy may be updated when the Website’s operation or legislation changes. The current version is published on the Website. An update does not constitute your explicit consent to new processing purposes; additional information is provided and consent obtained separately where necessary.
Last updated: 3 October 2026