1. Who is responsible
The data controller for this website is the company below.
- Legal entity
- Inventra Mühendislik A.Ş.
- Address
- Ahi Evran Cad. No: 134, Ostim OSB, 06374 Yenimahalle / Ankara, Türkiye
- R&D centre
- Melih Gökçek Bulvarı, Teknopark No: 61/19, 06378 İvedik OSB, Yenimahalle / Ankara
- contact@inventras3.com
- Telephone
- +90 312 911 12 20
2. What we collect
Personal data is collected on this site only through the request for quotation (RFQ) form and through the server records that accompany it. There are no user accounts, no logins and no online sales.
- Identity: your name.
- Contact: business email address, telephone number (optional), country.
- Professional details: your organisation and your role (role is optional).
- Enquiry content: the products you are interested in, application area, quantity, timeline, end-use country and your free-text message.
- Marketing preference: whether you opted in to product announcements.
- Security data: an irreversible hash (SHA-256) of the IP address the request came from, the address of the page the request was sent from, and the date and time.
3. About the IP address
We do not store your IP address in raw form. Only a cryptographic hash is kept, and it is used for one purpose: limiting automated and repeated submissions from the same source. The hash cannot be reversed to recover the address.
4. Why we process it
- To receive, assess and answer your quotation request.
- To contact you about your enquiry and answer technical questions.
- To conduct pre-contractual discussions.
- To carry out end-use and end-user assessment under export control legislation.
- To prevent misuse of the form and keep the site secure.
- Only if you separately opted in: to send product and technical content announcements.
5. Legal basis
Under KVKK Article 5 and, where applicable, GDPR Article 6.
- Performance of a contract or steps taken at your request before entering into a contract — KVKK Art. 5/2-c, GDPR Art. 6(1)(b): handling and answering your enquiry.
- Compliance with a legal obligation — KVKK Art. 5/2-ç, GDPR Art. 6(1)(c): export control and commercial record-keeping obligations.
- Legitimate interests — KVKK Art. 5/2-f, GDPR Art. 6(1)(f): preventing abuse of the form and keeping the site secure. We have assessed that this does not override your rights and freedoms.
- Consent — KVKK Art. 5/1, GDPR Art. 6(1)(a): marketing messages only, and only if you ticked that box. You can withdraw consent at any time; withdrawing it does not affect your quotation.
6. How we collect it
Data is collected by automated means, when you complete and submit the quotation form. If you do not use the form, this site does not process personal data about you.
7. Who receives it
We do not sell, rent or share your data with third parties for marketing. Data is shared only with the service providers below, only as needed to operate the service.
- Cloudflare, Inc.
- Website hosting, bot verification (Turnstile) and the database that stores quotation records. United States and global infrastructure.
- Resend (Plus Five Five, Inc.)
- Delivery of the quotation notification and acknowledgement emails. United States.
- Google LLC (Google Workspace)
- Corporate email infrastructure. The quotation notification, and any mail you send to our published contact address, are stored in these mailboxes. United States and global infrastructure.
8. International transfers
The providers listed above are established outside Türkiye, so your data is transferred abroad. Under KVKK Article 9 as amended by Law No. 7499 of 12 March 2024, and the Regulation on Procedures and Principles for the Transfer of Personal Data Abroad, we rely on an appropriate safeguard — a standard contract — and notify each signed standard contract to the Turkish Data Protection Authority within five business days of signature.
Where the GDPR applies, transfers rely on the European Commission’s standard contractual clauses. You may request a copy of the relevant safeguards.
9. How long we keep it
At the end of the period the data is deleted, destroyed or anonymised.
- Requests that lead to a commercial relationship
- Ten years. Article 82 of the Turkish Commercial Code and the Tax Procedure Law set this period for commercial books and records.
- Requests that do not lead to a contract
- Two years after closure. This is the period we need to find earlier correspondence if the same buyer comes back.
- Security records (IP hash)
- Six months. The record exists only for rate limiting and is of no use after that.
- Marketing consent
- Until withdrawn, then three years as evidence of the consent and of its withdrawal.
10. Security
- Site and form traffic is encrypted end to end with TLS.
- Form submissions pass bot verification (Cloudflare Turnstile) and are rate limited.
- Access to quotation records is limited to those who need it for their work.
- IP addresses are never stored in raw form.
- The site has no user accounts or passwords, so no authentication data is processed.
11. Your rights
Under KVKK Article 11 you may ask us to confirm whether we process your data, tell you how and why, identify the third parties it has been transferred to in Türkiye or abroad, correct it if it is incomplete or inaccurate, erase or destroy it where the conditions in Article 7 are met, notify those corrections to the recipients, object to a decision produced solely by automated analysis that has an adverse effect on you, and compensate damage caused by unlawful processing.
Where the GDPR applies you additionally have the right to restrict processing, to data portability, to object to processing based on legitimate interests, and to lodge a complaint with a supervisory authority.
12. How to exercise them
Send your request in writing to the address above, with a secure electronic or mobile signature, or from an email address already registered with us to contact@inventras3.com.
Please include your name, your signature if the request is on paper, your Turkish identity number if you are a Turkish citizen, an address for service, your email and telephone where available, and what you are asking for.
We answer as soon as possible and within thirty days at the latest, free of charge. Where the response requires additional cost, a fee set by the Authority’s tariff may apply.
If we reject your request, if you find our answer insufficient or if we do not answer in time, you may complain to the Turkish Data Protection Board within thirty days of learning our answer and in any case within sixty days of your request. If the GDPR applies to you, you may also complain to the supervisory authority in your country.
13. Changes
We update this notice when the law or our processing changes. The current version is always published on this page and the date above shows when it was last changed.