Who are we
Last updated: [27.09.2026]
This Privacy Policy explains how Alfatech Engineering processes personal data when you visit alfatechmuhendislik.com, contact us, or do business with us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Who we are (Data controller)
Alfatech Muhendislik Danismanlik Dis Ticaret Ltd. Sti.
Cumhuriyet Mah. Gecit Sok. No:25/5, Cayirova / Kocaeli, Turkiye
Phone: +90 533 404 79 19
Bulgaria office: Alfatech Europe
Ulitsa 28-Mi Yanuari No:50A 7200 Razgrad-BULGARIA
Phone: +359 88 667 5774
For any privacy question or request, contact us at: [info@alfatechmuhendislik.com]
2. What data we collect and why
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Contact / quote request form | First and last name, company name, phone number, e-mail address, city, postal code, country, product of interest, your message | To answer your inquiry and prepare a quotation | Steps prior to entering into a contract (Art. 6(1)(b)); our legitimate interest in answering business inquiries (Art. 6(1)(f)) |
| E-mail and phone communication | Name, company, contact details, content of correspondence | Communication, quotations, project execution | Contract (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) |
| WhatsApp chat button | Phone number, name and messages you send via WhatsApp | To answer your questions quickly | Legitimate interest (Art. 6(1)(f)); you start the conversation voluntarily |
| Customers and suppliers | Contact persons’ names, titles, business contact details, order and invoice data | Contract performance, delivery, installation, service, accounting | Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) |
| Website visit | IP address, browser type, date and time of access, pages visited (server log files) | Operating the website securely, preventing misuse | Legitimate interest (Art. 6(1)(f)) |
| Cookies | See section 4 | See section 4 | Consent (Art. 6(1)(a)) for non-essential cookies |
We do not sell personal data, and we do not use your data for automated decision-making or profiling.
3. Third-party services on this website
- Google reCAPTCHA (Google Ireland Ltd.) – protects our forms against spam. It may process your IP address and browser data.
- Google Maps (Google Ireland Ltd.) – embedded maps showing our locations. When a map loads, Google may process your IP address.
- Google Fonts (Google Ireland Ltd.) – fonts used to display the website. [If fonts are hosted locally, delete this item.]
- WhatsApp (WhatsApp Ireland Ltd. / Meta) – if you click the chat button, you are redirected to WhatsApp, and WhatsApp’s own privacy policy applies.
- CookieYes – cookie consent management; stores your cookie choices.
- Links to LinkedIn and YouTube – these are simple links; no data is transferred until you click them.
- Hosting provider: [HOSTING COMPANY NAME, COUNTRY] – hosts the website and server log files.
Some of these providers may transfer data to countries outside the EU/EEA (for example the USA). Such transfers are based on the EU-US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.
4. Cookies
Our website uses necessary cookies to function and, only with your consent, additional cookies (for example for maps or statistics). You can change or withdraw your consent at any time using the cookie settings button on the website. You can also delete cookies in your browser settings.
5. Who receives your data
Your data is accessed only by the Alfatech employees who need it. If necessary for your project, we share it with carefully selected partners (for example logistics companies, installation subcontractors, certification bodies, accountants and IT service providers), who are bound by confidentiality and data protection obligations. We disclose data to public authorities only when legally required.
6. International transfers between Turkiye and the EU
Alfatech operates in Turkiye and Bulgaria. Inquiries from the EU may be processed by our team in Turkiye. Turkiye does not have an EU adequacy decision, so we protect such transfers with the European Commission’s Standard Contractual Clauses and appropriate security measures.
7. How long we keep your data
- Inquiries that do not lead to a contract: up to 3 years after our last contact, then deleted.
- Customer and project data: for the duration of the business relationship and warranty period; accounting and tax records for the periods required by law (up to 10 years).
- Server log files: up to [30] days.
8. Your rights
Under the GDPR, you have the right to:
- access your personal data and receive a copy of it;
- have inaccurate data corrected;
- have your data deleted (“right to be forgotten”);
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To exercise these rights, write to [info@alfatechmuhendislik.com]. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority, for example the Bulgarian Commission for Personal Data Protection (www.cpdp.bg), the authority in your own EU country, or the Turkish Personal Data Protection Authority (KVKK, www.kvkk.gov.tr).
9. Security
We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access restrictions, and regular updates of our systems.
10. Changes to this policy
We may update this Privacy Policy when our services or the law change. The current version is always available on this page.
