Privacy Notice

This notice is provided under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") and explains how we process the personal data you share with us through the contact form on sustaico.com and by email. In case of any discrepancy, the Turkish version prevails.

1. Data controller

Data controller	SUSTAICO
Address	Merdivenköy Mah. Ressam Salih Ermez Cad. No:1 D:3
Email	[email protected]

2. Personal data we process

• Identity: first and last name
• Contact: email address, phone number (if you choose to provide it)
• Professional: the company you work for
• Request: your topic of interest and the content of your message

3. Purposes

• Responding to your request and arranging a meeting
• Preparing proposals and establishing and managing a consulting relationship
• Meeting our legal obligations

4. Collection method and legal basis

Your data is collected electronically when you complete the contact form on the website or email us directly. Form content is forwarded as an email to [email protected] through the Web3Forms (web3forms.com) form delivery service. The website does not store form data on its own server.

We process your data under KVKK Article 5(2) on the grounds that it is directly related to the conclusion or performance of a contract (c), necessary to fulfil a legal obligation (ç), and necessary for our legitimate interests provided that it does not harm your fundamental rights and freedoms (f).

5. Transfers

We do not share your data with third parties for marketing. It may be disclosed to authorised public bodies only where required by law. The servers of our form delivery (Web3Forms), email and web hosting providers may be located outside Türkiye; in that case, transfers are carried out in accordance with KVKK Article 9.

6. Retention

We keep your data for as long as required for the purpose of processing and for the limitation periods set out in applicable law, after which it is deleted or anonymised.

7. Cookies and third-party content

This website does not use cookies. Your browser only stores a session-level flag so the opening animation isn't replayed during the same visit. Fonts and all other files are served from the website's own server; no requests are sent to third-party content providers while you view the site.

8. Your rights

Under KVKK Article 11, you have the right to:

• learn whether your personal data is processed and, if so, request information about it;
• learn the purpose of processing and whether it is used accordingly;
• know the third parties in Türkiye or abroad to whom it is transferred;
• request correction if it is incomplete or inaccurate;
• request deletion or destruction under KVKK Article 7;
• request that corrections and deletions be notified to third parties to whom the data was transferred;
• object to an outcome against you arising exclusively from automated analysis;
• claim compensation for damages arising from unlawful processing.

9. How to apply

Send your request to [email protected]. We will respond free of charge within 30 days at the latest, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller.