Personal Data Protection Notice

1. Data controller

Your personal data is processed by AIRLEAX L1 acting as data controller, for the purposes and on the legal grounds set out below.

Address

Hançerli Mahallesi Yalı Cami Sk. Murathan Apt. No:3 Floor:2 No:6 55020 İlkadım / SAMSUN

E-mail

sektor@sektorbilgi.com

Phone

+90 532 737 18 88

2. Data we process

We process only what you send us and what is technically generated during your visit. We never collect special categories of data (health, religion, biometric data and the like).

When you submit the enquiry form:

• Identity — your name and surname
• Contact — your e-mail address and, if given, your phone number
• Transaction — your company name and the content of your message

When you subscribe to the newsletter:

• Contact — only your e-mail address and chosen language

When you browse the site (only if you accepted cookies):

• Technical — browser and operating system, device class, screen resolution, time zone, language preference
• Usage — sections you viewed, time spent on the page, scroll depth, links clicked, the source you arrived from

Your IP address is never stored. It is used only to tell whether the same visitor has returned, and is one-way hashed (salted SHA-256) before storage. The hash cannot be reversed back to an IP address.

3. Purposes of processing

• Responding to your enquiries and preparing quotations
• Running our sales and product processes
• Handling requests and complaints
• Keeping the website secure and preventing abuse and attacks
• Understanding which sections draw interest so we can improve the content and design
• Meeting obligations arising from applicable legislation

4. Legal grounds

Enquiry form data

Necessary for the conclusion or performance of a contract (KVKK art. 5/2-c; GDPR art. 6/1-b) and legitimate interest (art. 5/2-f; GDPR art. 6/1-f)

Essential cookies

Legal obligation and legitimate interest (art. 5/2-ç, 5/2-f)

Analytics cookies

Your explicit consent (art. 5/1; GDPR art. 6/1-a) — given by choosing “Accept all” in the cookie notice

Newsletter

Your explicit consent — given by entering your address in the signup box. Withdraw it any time via the unsubscribe link in every message

Statutory retention

Compliance with a legal obligation (art. 5/2-ç)

5. Who we share it with

We never sell, rent or trade your personal data for marketing purposes. Data is shared only as far as the service requires:

• Our hosting provider — so the site can run (located in Türkiye)
• Our e-mail provider — so form notifications reach us
• Google Maps — the map in the contact section loads only if you accepted cookies; at that moment your browser connects to Google. Decline, and the map never loads and no data reaches Google.
• Competent public authorities — only where required by law

Using Google Maps may involve a transfer of data abroad. That transfer rests on your explicit consent and can be prevented entirely by leaving the map off.

6. Retention periods

Enquiry records

3 years after the request is closed; if a contract is concluded, 10 years after the relationship ends

Visit and analytics records

24 months at most

Newsletter record

For as long as you stay subscribed; after you leave, 3 years solely to evidence the withdrawal of consent — erased sooner on request

Your cookie preference

1 year

Session cookies

Deleted when you close the browser

Once the period expires, data is deleted, destroyed or irreversibly anonymised.

7. Your rights

Under Article 11 of the KVKK — and the equivalent GDPR provisions — you may ask us to:

• Confirm whether your data is being processed
• Provide information about the processing
• Explain the purpose and whether the data is used accordingly
• Identify the third parties the data is transferred to, at home or abroad
• Rectify data that is incomplete or inaccurate
• Erase or destroy the data where the statutory conditions are met
• Notify recipients of any rectification or erasure
• Object to a decision based solely on automated processing that produces an adverse effect on you
• Compensate any damage caused by unlawful processing

Send your request by e-mail to sektor@sektorbilgi.com or in writing to the address above. We respond within 30 days and, as a rule, free of charge. If your request is refused or unanswered, you may lodge a complaint with the Turkish Personal Data Protection Board.

8. Security

We take the technical and organisational measures needed to prevent unlawful processing and unauthorised access: connections are encrypted, the admin panel is protected by a password and two-factor authentication, passwords are stored irreversibly, and panel access is limited to authorised people.