KVKK Privacy Notice
Last updated:
This translation is provided for convenience; the Turkish version prevails. View the Turkish version
This notice explains how the personal data you share through the contact and demo request form on www.getsurvai.com is processed, as required by Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). For surveys you answer on the Survai platform, the privacy notice is provided on the survey’s welcome screen by the organization running that survey.
Draft text. Fields marked in square brackets (VERBİS/representative, legal basis for cross-border transfer, İYS) will be completed after legal review before publication.
1. Data controller
Legal name: TBC CREATIVE SERVICES & CONSULTANCY LTD
Registration: Registrar of Companies for England and Wales (Companies House) no. 14132886
Address: 8 Stable Path, Princess Marina Drive, Arborfield, Reading, Berkshire, RG2 9RZ, United Kingdom
Email: kvkk@getsurvai.com
VERBİS (Turkish data controllers’ registry) registration and representative in Turkey, as a data controller established outside Turkey: [VERBİS registration number and data controller representative details]
2. Personal data processed, purposes and legal grounds
| Data category | Data | Purpose | Legal ground (Art. 5 KVKK) |
|---|---|---|---|
| Identity | Full name | Responding to your request and contacting you | Processing is directly related to the formation of a contract (Art. 5(2)(c)) |
| Contact | Work email, phone | Scheduling a demo, sending a quote, keeping you informed about your request | Art. 5(2)(c); legitimate interest (Art. 5(2)(f)) |
| Professional | Company, job title, employee count range | Preparing a plan and quote that fit your needs | Art. 5(2)(c) |
| Request details | Plan of interest, intended use, your message | Assessing and recording your request | Art. 5(2)(c); Art. 5(2)(f) |
| Transaction security | Irreversible hash of your IP address (the raw IP is not stored), browser information, form submission time | Preventing abuse and automated (bot) submissions; information security | Legitimate interest of the data controller (Art. 5(2)(f)); legal obligation (Art. 5(2)(ç)) |
| Marketing source | Campaign tags (UTM) that brought you to the site, referring site, the first page you visited and the page you submitted the form from | Understanding which promotional channels attract interest | Legitimate interest (Art. 5(2)(f)) |
| Consent records | Time you acknowledged the privacy notice; consent to commercial electronic messages and its time (if given) | Demonstrating compliance with our obligations; sending commercial electronic messages if you consented | Legal obligation (Art. 5(2)(ç)); for commercial messages, explicit consent and Article 6 of Law No. 6563 |
Campaign and source information is not stored in your browser through cookies or similar storage. It is taken from the current page session only when you submit the form and is sent along with your request.
3. Method of collection
Your personal data is collected electronically, by fully or partly automated means, when you fill in and submit the form. You may leave optional fields blank.
4. Transfers
Your personal data may be transferred to the following recipients, limited to the purposes above:
- Microsoft Corporation, our hosting and email infrastructure provider (Microsoft Azure; data is kept in the European Union, in the Sweden region). This is a cross-border transfer under Article 9 KVKK and is carried out on the basis of [transfer mechanism: standard contract / date of notification to the Board].
- Competent public authorities and institutions, upon request (under a legal obligation).
Your data is not sold and is not shared with third parties for advertising purposes.
5. Retention period
Request records are kept for 2 years after your request is concluded; if a contract is formed, the retention periods set out in the applicable legislation apply. At the end of the period, the data is deleted, destroyed or anonymized. If you withdraw your consent to commercial electronic messages, your consent record is kept for the period required by law.
6. Your rights (Art. 11 KVKK)
By applying to the data controller, you have the right to:
- learn whether your personal data is processed and, if so, request information about it;
- learn the purpose of the processing and whether the data is used in line with that purpose;
- know the third parties in Turkey or abroad to whom your data is transferred;
- request correction if your data is incomplete or inaccurate, and request its deletion or destruction under the conditions of Article 7 KVKK;
- request that these actions be notified to the third parties to whom your data has been transferred;
- object to an outcome against you that results from analysis exclusively by automated systems;
- claim compensation if you suffer damage due to unlawful processing.
These are your rights under Article 11 KVKK.
7. How to apply
In accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, you may send your requests to kvkk@getsurvai.com from the email address registered with us, or in writing to 8 Stable Path, Princess Marina Drive, Arborfield, Reading, Berkshire, RG2 9RZ, United Kingdom. Applications are concluded free of charge within 30 days at the latest.
8. Consent to commercial electronic messages
Consent to commercial electronic messages on the form is optional and is not pre-checked. If you consent, messages about our products, events and campaigns may be sent to you by email, phone call and SMS; your consent is registered with İYS (Turkey’s commercial message management system) under [İYS brand code]. You can withdraw your consent free of charge at any time via the opt-out link in each message or through İYS.
Related documents: Privacy Policy · Cookie Policy