Last updated: 2 September 2026
1. Data controller
Your personal data is processed by ONGSEC Bilgi ve Siber Güvenlik Teknolojileri (“ONGSEC”) as data controller, in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and related legislation.
Address: Ankara Social Sciences University – Sosyokent, Ankara / Türkiye
E-mail: info@ongsec.com · Telephone: +90 312 911 50 77
2. Personal data processed
If you contact us through this website, the following data is processed:
- Identity data: first name, surname
- Contact data: e-mail address, telephone number
- Professional information: the organisation or company you work for
- Request content: the service of interest and any information you include in the message
- Transaction security data: submission date and time, technical information in server logs
Please do not include special categories of personal data, or data relating to third parties, unless it is necessary.
3. Purposes of processing
- Evaluating and responding to your request and questions
- Preparing proposals and conducting pre-contractual discussions
- Carrying out business processes should a commercial relationship be established
- Operating information security processes and preventing misuse
- Meeting legal obligations and providing evidence in potential disputes
4. Legal grounds
Your data is processed under Article 5/2 of the KVKK on the following grounds:
- (c) Directly related to the conclusion or performance of a contract
- (ç) Necessary for the data controller to fulfil a legal obligation
- (e) Necessary for the establishment, exercise or protection of a right
- (f) Necessary for legitimate interests, provided your fundamental rights are not harmed
In all other cases — for example sending informational messages — your data is processed solely on the basis of your explicit consent, which you may withdraw at any time.
5. Collection method
Data is collected by partly automated means through the website contact form, e-mail, telephone and in-person meetings.
6. Transfers
As a rule, your personal data is not shared with third parties. Limited transfers may occur only in the following cases:
- To our e-mail infrastructure provider, solely for the purpose of delivering the message
- To a competent public authority where required by a legal obligation or lawful request
- To our legal counsel and financial adviser in the event of a dispute
No transfer abroad is made unless the conditions of Article 9 of the KVKK are satisfied.
7. Retention
Contact form data is retained for a maximum of two years after the request is concluded. Where a commercial relationship is established, the limitation and retention periods set out in applicable legislation apply. At the end of the period, data is deleted, destroyed or anonymised.
8. Your rights
Under Article 11 of the KVKK you may apply to ONGSEC to exercise the following rights:
- To learn whether your personal data is processed and to request information about it
- To learn the purpose of processing and whether the data is used accordingly
- To know the third parties to whom data is transferred in Türkiye or abroad
- To request rectification where data is incomplete or inaccurate
- To request erasure or destruction within the conditions set by law
- To request that rectification, erasure and destruction be notified to third parties
- To object to a result arising from analysis solely by automated systems
- To claim compensation for damage arising from unlawful processing
9. How to apply
You may submit your requests, together with information verifying your identity, by e-mail to info@ongsec.com or in writing to the address above. Your application will be concluded as soon as possible and within 30 days at the latest. Where the process incurs a cost, a fee may be charged in line with the tariff set by the Personal Data Protection Board.
This text has been drafted on the basis of ONGSEC’s actual data processing activities. Before publication it should be reviewed by your legal counsel and completed with the company’s registered trade name, MERSİS number and VERBİS registration details. In the event of any discrepancy, the Turkish version prevails.