Legal Information
Privacy, protection of personal data and cookie policy
This notice explains our obligations as data controller under Law No. 6698 on the Protection of Personal Data, the data we process, our processing purposes and your rights.
1. Identity of the data controller
Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by 97 TEAM as data controller, within the scope described below.
- Data controller: 97 TEAM
- Address: Çamtepe Mah. Mahmut Tevfik Atay Bulvarı, Gaziantep Teknopark 4/C Blok No: Z04/b, Şahinbey / Gaziantep
- Email: zai@97.team
- Telephone: +90 212 909 00 97
2. Personal data processed
Only the data you provide to us is processed through our website. Our site offers no facility to create a user account, take payment or build a profile.
2.1. Through the contact form
- Identity data: first name and surname
- Contact data: email address, telephone number
- Professional/corporate data: the name of the organisation you work for
- Content of the enquiry: the subject of your enquiry, the estimated budget range if you choose to state it, and the text of your message
- Transaction security data: the date and time of submission and your IP address, for the purpose of spam control
2.2. Through direct contact channels
When you contact us by email or telephone, the contact details you share and the content of the correspondence are processed.
2.3. Technical data collected automatically
Our web server keeps standard access logs for security and troubleshooting purposes. These logs contain the IP address, browser information, the address requested and a timestamp, and are not used to build personalised profiles.
3. Processing purposes and legal grounds
Your personal data is processed for the following purposes and on the legal grounds stated:
- Assessing your enquiry and responding to you — Article 5(2)(c) of the KVKK (being directly related to the establishment or performance of a contract) and Article 5(1) (explicit consent)
- Preparing proposals and conducting the commercial relationship — Article 5(2)(c) and Article 5(2)(f) of the KVKK (legitimate interest)
- Assessing career applications — Article 5(1) of the KVKK (explicit consent)
- Ensuring information security and preventing unsolicited submissions — Article 5(2)(f) of the KVKK (legitimate interest)
- Fulfilling legal obligations and retaining evidence — Articles 5(2)(a) and 5(2)(ç) of the KVKK
4. Transfer of personal data
Your personal data is not sold or rented to third parties for marketing purposes. Your data may be transferred only in the following circumstances and only to the extent necessary:
- To the suppliers from whom we obtain hosting, email and infrastructure services — for the purpose of providing the service technically and under a contractual obligation of confidentiality
- To authorised public institutions and bodies — within the scope of requests for information and documents arising from legislation
- To our lawyers and the competent courts in the event of a legal dispute
Where a service requiring the transfer of data abroad is used, the transfer is carried out in accordance with the conditions set out in Article 9 of the KVKK.
5. Retention periods
- Contact form records: where no commercial relationship is established, for a maximum of 2 years from the date of submission
- Records where a commercial relationship is established: for the limitation and retention periods prescribed by legislation following the end of the contractual relationship
- Career applications: for a maximum of 1 year from the date of application
- Server access logs: for a maximum of 12 months
Upon expiry of these periods, personal data is deleted, destroyed or anonymised.
6. Data security measures
In order to prevent the unlawful processing of, and unlawful access to, personal data, we apply the following technical and administrative measures:
- Encryption of all site traffic with TLS
- Role-based access control and the principle of least privilege
- Keeping access and transaction logs
- Regular security updates and dependency audits
- Confidentiality undertakings and awareness training for employees
- Backup and business continuity plans
7. Rights of the data subject
Under Article 11 of the KVKK you have the following rights in respect of your personal data:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom the data is transferred, whether in Turkey or abroad
- To request the rectification of data that has been processed incompletely or inaccurately
- To request the erasure or destruction of the data within the conditions prescribed by the Law
- To request that rectification, erasure and destruction operations be notified to the third parties to whom the data has been transferred
- To object to an adverse outcome arising from analysis carried out exclusively by automated systems
- To claim compensation where you suffer loss as a result of unlawful processing
8. Application procedure
You may submit requests relating to the rights set out above, together with documents establishing your identity, by one of the following means:
- In writing, by delivering a wet-signed petition to our head office in person or through a notary
- By sending an email to zai@97.team from the electronic mail address registered in our systems
Your application will be concluded free of charge as soon as possible according to its nature and in any event within 30 days at the latest. Where the request entails an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.
9. Cookie policy
Our website does not use cookies to track user behaviour or to display advertising. There are no third-party advertising or social media tracking scripts on the site.
9.1. Services used
- Google Fonts: resources are loaded from Google servers in order to display typefaces. During this process your browser's IP address may be transmitted to the provider concerned.
- Google Maps: used only for the map component on the contact page. When the map frame is loaded, the provider may set its own cookies.
9.2. Strictly necessary cookies
Where a session cookie is used for the essential functions of the site, that cookie serves security and functionality purposes only; disabling it may prevent the site from being used.
9.3. Managing your cookie preferences
You can delete or block cookies through your browser settings. The location of these settings varies between browsers and is described in your browser's help documentation.
10. Changes to this policy
This notice may be revised as a result of changes in legislation or updates to our business processes. The current version is always published on this page; you can identify the latest version from the update date shown at the top of the page.
This text has been prepared for general information purposes. It is recommended that it be reviewed together with your legal counsel in the light of your organisation's particular circumstances.