Data Protection Notice (KVKK)

Your personal data is processed by DS Ziraat Tarım Makina Sanayi ve Ticaret Limited Şirketi (“Hevsel”) as the data controller.

Address: Sur, Diyarbakır, Türkiye. E-mail: info@hevsel.dev. Phone: 0 530 856 38 74.

When you use the quote form and the site, we process the following:

• Identity and contact: full name, e-mail address, phone number
• Company: company or organisation name
• Request: project description and budget
• Security: IP address (stored only in hashed form)

We collect this information electronically, directly from you through the quote form. The IP address is processed automatically to prevent abuse of the form.

• Assessing your quote request, preparing the quote and sending it to you
• Communicating with you about your request
• Preventing abuse of the form and automated or unwanted submissions; keeping the site secure
• Meeting our legal obligations

Under Article 5(2) of KVKK, and correspondingly Article 6(1) of the GDPR, we rely on:

• Performance of, or steps toward, a contract: your quote request is a pre-contractual step
• Compliance with a legal obligation
• Legitimate interests, provided they do not override your fundamental rights: preventing abuse and keeping the site secure

We do not sell your data or share it for advertising. To run the service, it is shared only as far as needed with these providers:

• Hosting: Vercel Inc.
• Database: Supabase Inc.
• Quote assistant: if you use the optional "describe your project" step, the text you write is sent to an AI service provider (Anthropic, PBC) to be turned into form fields. Your contact details are not shared in this step.
• E-mail delivery provider: the service used to deliver quotes and notifications

These providers may operate servers outside Türkiye. Transfers abroad are carried out in line with the conditions in Article 9 of KVKK. Data may also be disclosed to competent authorities when legally required.

Personal data related to a quote request is kept for 2 years after our last contact with you; after that it is deleted, destroyed or anonymised. Records that legislation requires us to keep longer, such as tax and accounting records, are kept for the required period.

The IP address is kept only in hashed form, and only as long as needed to prevent abuse.

Under Article 11 of KVKK you may apply to the data controller to:

• Learn whether your personal data is being processed
• Request information about it if it has been processed
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom it is transferred, in Türkiye or abroad
• Request correction if it is incomplete or inaccurate
• Request deletion or destruction under the conditions in Article 7 of KVKK
• Request that corrections, deletions and destructions be notified to third parties who received the data
• Object to a result against you that arises from analysis by automated systems
• Claim compensation if you suffer damage from unlawful processing

If you are in the European Union or the United Kingdom, the GDPR also gives you the rights to data portability, to restriction of processing and to object to processing, and to lodge a complaint with your local supervisory authority. You can exercise these through the contact below.

Send your requests to info@hevsel.dev. We will conclude your request free of charge and, depending on its nature, within thirty days at the latest. If you are not satisfied with our reply, you have the right to complain to the Turkish Personal Data Protection Board.