Processing of personal data.

Data controller

This notice applies to use of the website, receipt of work/proposal and consulting-session requests, and communication relating to those requests. Where a service contract or separate project requires additional privacy information, it is provided separately.

Legal name

MİHENK PROJECT GROUP DANIŞMANLIK EĞİTİM VE TEKNOLOJİ LİMİTED ŞİRKETİ

Registered locality

Kayapınar / Diyarbakır, Türkiye

Email

info@mihenkproject.com

Information collected and method

The form collects first name, last name, email address, request type, service area and request details. Organisation/business and timing information are optional. Phone is optional for written work/proposal requests and required for appointment communication when requesting a consulting session. For in-person sessions, city information is also collected.

When the form is submitted, the information is recorded electronically through Wix Forms. First name, last name, email, phone and organisation/business fields may be associated with Wix contact records for communication relating to the request. MİHENK’s custom site code does not store personal data entered in the form in localStorage or sessionStorage.

The hosting, form and security infrastructure may process limited technical connection and security data necessary to operate the service, maintain security and prevent misuse. Such data is treated as personal data where it can relate to an identifiable person.

The initial request form does not ask for identity documents, Turkish ID numbers, health information, bank/card information or file uploads.

Purposes and legal bases

Receiving your request, preparing a tailored proposal and pre-contract communication are processed, to the extent directly related and necessary to entering into a contract with you, under Article 5(2)(c) of Turkish Law No. 6698 (KVKK).

Where you contact us on behalf of an organisation or business, processing necessary for business correspondence and request tracking may rely on legitimate interests under Article 5(2)(f) of KVKK, subject to a balancing assessment that respects fundamental rights and freedoms. Limited technical security data may also be processed on this basis.

Processing necessary to comply with legal obligations relies on Article 5(2)(ç), and processing necessary for the establishment, exercise or protection of a right relies on Article 5(2)(e) of KVKK.

Submitting a request or acknowledging working terms is not consent to advertising, newsletters or marketing. The form does not automatically enrol you for those purposes, and this notice is not used as a substitute for explicit consent.

Recipients and data transfers

Request records are reviewed by authorised persons who require access for their duties. Wix is used for website hosting, forms and site infrastructure; Microsoft 365 is used for corporate email and related business correspondence. Competent authorities may receive data where a legal power or obligation applies.

Use of Wix and Microsoft services may, depending on their technical operation, involve personal data being processed or accessed through infrastructure outside Türkiye. Where an international transfer occurs, the conditions under Article 9 of KVKK and the related secondary legislation must be satisfied. The applicable transfer mechanism and provider contracts are assessed separately within MİHENK’s compliance records.

Sharing files with external specialists is not an automatic consequence of the initial request. The meeting platform and any documents to be shared are communicated as part of the engagement. Sessions are not audio- or video-recorded by default.

Retention and security

Request and proposal records are retained only for the period necessary to conclude the request, conduct pre-contract communication and protect legal rights where applicable. If a contract is formed, contractual and financial records are assessed separately under their own purposes and statutory retention periods.

When the conditions for processing no longer apply, data is deleted, destroyed or anonymised as required. Records retained for a dispute or legal obligation are limited to the necessary data and period.

Request records are not public. Access is limited by role and business need; account security, secure transmission and provider security features are used. Users are asked not to submit special-category or sensitive data that is not necessary for the request.

Your rights and requests

Under Article 11 of KVKK, you may ask whether your personal data is processed and, if so, request information about the processing, its purpose and whether it is used accordingly, and recipients in Türkiye or abroad. You may also request correction of incomplete or inaccurate data and, where the legal conditions are met, deletion or destruction and notification of these actions to recipients.

You also have the right to object to a result arising against you solely from automated analysis and to seek compensation for damage caused by unlawful processing.

Request methods Data Subject Request page. Exercising these rights is not conditional on purchasing consulting or a paid session.