Privacy & KVKK Notice

İhaleAtlas keeps its personal-data collection surface deliberately narrow. Depending on the nature of our relationship with you, we process:

• Marketing forms (contact and assessment request): only your email address is required. Name is optional; no other personal data is requested at this stage.

• Customer relationship data: when you become a customer, the business information you share via the capacity profile (sector, target countries, product/scope), correspondence, and history of delivered reports. Phone and company/contact name may optionally be shared at this step.

• Account & session data: one-time login codes sent by email, session cookie.

• Transaction data: payment records collected by Shopier (your card data is never transmitted to us).

• Automatically collected technical data: IP address, browser/device information (User-Agent), access logs, cookies, and usage data via Google Analytics.

We process the data above for the following purposes:

• Operating the international tender qualification service and delivering reports to you.

• Account creation, secure customer-area login and authentication (OTP).

• Payment processing and invoicing.

• Responding to inquiries received via forms, email or support channels.

• Service security, abuse / attack detection.

• Compliance with statutory obligations (e.g. accounting, tax retention).

• Understanding product performance and usage trends (aggregate / anonymous analysis).

Processing is based on the legal grounds set out in KVKK Art. 5:

• Performance of a contract (Art. 5/2-c) — customer relationship and delivery flow.

• Compliance with legal obligations (Art. 5/2-ç) — commercial and tax legislation.

• Legitimate interest (Art. 5/2-f) — service security, fraud prevention, service improvement.

• Explicit consent (Art. 5/1) — for cross-border transfers and marketing communications, collected separately via the relevant forms.

Personal data may be shared with the following parties to operate the service:

• Hosting infrastructure provider — servers may be located outside Turkey (United States).

• Email / messaging infrastructure providers (for login codes and notifications).

• Payment infrastructure: Shopier (Turkey) — your card data is not transmitted to us.

• Analytics: Google Analytics — aggregate usage data is processed abroad.

• Authorised public authorities — when required by law.

Cross-border transfers are made on the basis of your explicit consent under KVKK Art. 9; otherwise no transfer is made unless the required technical and administrative measures are in place.

Personal data is collected via website forms (contact, lead, capacity, assessment), email correspondence, in-app activity within the customer area, automated server logs and cookies.

• Customer relationship data: 10 years following the end of the relationship (Turkish Commercial Code Art. 82 and applicable tax legislation).

• Lead and contact form data: maximum 24 months; deleted or anonymised thereafter.

• Server / access logs: maximum 12 months.

• Cookies: session cookies expire when the browser closes; persistent cookies last up to 14 months.

You may exercise the following rights by contacting the data controller:

• Be informed whether your personal data is being processed,

• Request information if it has been processed,

• Learn the purpose of processing and whether it is used in line with that purpose,

• Know the third parties to whom data is transferred domestically or abroad,

• Request correction if data is incomplete or inaccurate,

• Request erasure or destruction when the conditions are met,

• Request that any correction or erasure be communicated to third parties,

• Object to outcomes generated solely by automated processing,

• Claim compensation for damages caused by unlawful processing.

You may submit any request relating to the rights above by emailing desk@ihaleatlas.com, together with information confirming your identity. Requests are answered within 30 days as required by KVKK Art. 13.

This notice may be updated to reflect changes in legislation or in the scope of the service. The current version is always published on this page; the date at the top indicates the last update.