Privacy Notice

This notice explains how we process your personal data when you visit flyzerk.com and when you contact us through the contact form or by email. It is given under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, for visitors from the European Economic Area (“EEA”) and the United Kingdom, Article 13 of the General Data Protection Regulation (“GDPR”).

1. Who is responsible for your data

The data controller is ZERK Teknoloji A.Ş. (“ZERK”, “we”).

Company

ZERK Teknoloji A.Ş.

MERSİS no.

0998201860900001

Head office

Avşar Mah. Batı Çevre Yolu Bulv. Kahramanmaraş Teknokent Blok No: 259, İç Kapı No: 54/1, Onikişubat/Kahramanmaraş 46050, Türkiye

R&D office

Üniversiteler Mah., ODTÜ Teknokent Milli Teknoloji Atölyesi, Çankaya/Ankara, Türkiye

KEP (registered electronic mail)

zerkteknoloji@hs03.kep.tr

Email

info@flyzerk.com

This notice covers the flyzerk.com website only. Our products and services, such as ZERK Cloud and our live broadcast pages, explain their own processing in their own notices.

2. What we process, why, and on what legal basis

2.1 When you visit the site

Data

Your IP address; the date and time of the request; the address of the page or file requested; the server’s response code and the amount of data sent; the address of the page that referred you, if any; the name and version of your browser and operating system (user agent).

How collected

Automatically, by our web server, whenever your browser requests a page or file.

Purpose

To deliver the site to you; to protect it against attacks, overload and abuse (for example, per-IP request limits); to detect and investigate security incidents.

Legal basis

KVKK Art. 5(2)(f): our legitimate interest in running the site securely. GDPR Art. 6(1)(f).

Retention

Server access and error logs are moved to a new file every day and deleted automatically after 30 days. To enforce request limits, your IP address is also held briefly in the server’s memory; it is never written to disk and is cleared when the server restarts.

Where

Our server on Amazon Web Services (AWS) in Frankfurt, Germany.

2.2 When you use the contact form

Data

Your full name, email address and company name (required); your phone number and message (optional); anything else you choose to tell us in your message. Sending the form also appears as a request in the server logs described in 2.1; the form’s contents are not written to those logs.

How collected

When you fill in and send the form.

Purpose

To answer your request; to prepare the information, demo or offer you asked for; to follow up on the demo or offer you requested; to hold pre-contract discussions; to keep a record of our correspondence.

Legal basis

KVKK Art. 5(2)(c): directly related to entering into a contract (demo and offer requests); KVKK Art. 5(2)(f): our legitimate interest in answering your request. GDPR Art. 6(1)(b) and 6(1)(f).

Retention

For as long as needed to deal with your request and its follow-up, subject to periodic review. Sending a request is not consent to unrelated marketing. If it leads to a business relationship, our correspondence is kept for the duration of that relationship and for the retention and limitation periods the law sets (for example, 10 years for business correspondence under Article 82 of the Turkish Commercial Code). When those periods end, the data is deleted, destroyed or anonymised.

Where

Our server forwards the form by email to a ZERK mailbox on Google Workspace, our business email service. It is not stored in a database on the website’s server.

2.3 When you email us or make a request about your data

Data

Your name, contact details and the content of our correspondence. For requests about your data, also the information you give us to verify your identity.

Purpose

To answer your question or request; to verify your identity for data requests and to be able to show we answered them.

Legal basis

General correspondence: KVKK Art. 5(2)(c) and 5(2)(f). Data requests: KVKK Art. 5(2)(ç) (our obligation to answer requests under KVKK Art. 13) and 5(2)(e) (establishing, exercising or defending a right). GDPR Art. 6(1)(b), 6(1)(c) and 6(1)(f).

Retention

General correspondence follows the periods in 2.2. Data requests are kept until they are resolved and then for as long as needed in case of a complaint or dispute.

Where

ZERK mailboxes on Google Workspace.

2.4 Cookies

flyzerk.com uses no cookies and stores nothing in your browser, including local storage. See our Cookie Policy for details.

2.5 Social media links

Our pages link to our accounts on LinkedIn, Instagram and X. These are plain links: we do not embed these platforms’ buttons, plugins or content, so nothing about you is sent to them unless you click a link. Once you do, that platform’s own privacy policy applies.

3. Who we share your data with

• Amazon Web Services (AWS): the server infrastructure that hosts the site. AWS processes data on our behalf and on our instructions.
• Google (Google Workspace): our business email service, where contact-form submissions and email correspondence are kept. Google processes data on our behalf and on our instructions.
• Authorised ZERK staff: only as far as needed to answer your request and run the site.
• Public authorities and courts: when the law requires it.

We do not sell or rent your personal data or share it with anyone for advertising.

4. International transfers

Our server is in AWS’s Frankfurt data centre (Germany, European Union), so the server logs in 2.1 and the contact-form contents in 2.2 are processed outside Türkiye. Contact-form contents and our email correspondence are kept on Google Workspace, and Google may also process them in data centres outside Türkiye and the EEA (for example, in the United States).

Transfers from Türkiye require a processing basis and a mechanism under KVKK Article 9, such as an applicable adequacy decision or the Board’s Turkish standard contract. Routine hosting and email cannot rely on an occasional-transfer exception. ZERK must establish the mechanism for transfers it arranges; a Turkish standard contract must be notified to the Authority within five working days of signing. EU clauses or hosting in Germany do not by themselves satisfy KVKK. Where EEA or UK rules apply, their separate transfer safeguards must also be met. You may request information on the applicable safeguards at our email or KEP address.

5. Your rights

Under Article 11 of the KVKK you have the right to:

• learn whether your personal data is processed,
• request information about that processing,
• learn the purpose of the processing and whether the data is used for that purpose,
• know the third parties in Türkiye or abroad to whom your data is transferred,
• have incomplete or inaccurate data corrected,
• have your data deleted or destroyed under the conditions in Article 7 of the KVKK,
• have any correction, deletion or destruction notified to the third parties who received your data,
• object to a result against you that arises solely from automated analysis of your data,
• claim compensation if you suffer damage from unlawful processing.

If you visit from the EEA or the United Kingdom, under the GDPR you also have the rights of access, rectification, erasure, restriction of processing and data portability. You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests.

How to make a request

You can send a request from your KEP account to zerkteknoloji@hs03.kep.tr, or in writing: as a signed letter to our head office address above; signed with a secure electronic or mobile signature to info@flyzerk.com; or to info@flyzerk.com from an email address you have previously given us and that is on record with us (for example, the one you used in the contact form). Requests under the KVKK are made in Turkish; if you visit from the EEA or the United Kingdom, you can also write to us in English.

Please include your full name, your signature (for letters), your Turkish ID number (for foreign nationals, your nationality and passport or ID number), your residential or business address for notifications, your email address and phone number if any, and what you are asking for. For any other question, write to info@flyzerk.com.

We answer as soon as possible and within 30 days at the latest, free of charge as a rule. If a request involves additional cost, a fee may be charged under the tariff set by the Personal Data Protection Board.

Complaints

If your request is refused, you find our answer insufficient, or we do not answer in time, you can complain to the Turkish Personal Data Protection Board within 30 days of learning of our answer and in any case within 60 days of your request (KVKK Art. 14). If you visit from the EEA, you can complain to the data protection authority where you live, where you work or where the infringement took place; in the United Kingdom, to the Information Commissioner’s Office.

6. Automated decisions and profiling

We make no decisions about you based solely on automated processing that have legal or similarly significant effects, and we do not profile you.

7. Do you have to give us your data?

The server logs in 2.1 are technically necessary to deliver the site. If you leave the contact form’s fields marked with an asterisk empty, we cannot answer your request; phone number and message are optional.

8. Security

We take appropriate technical and organisational measures to protect your personal data, as Article 12 of the KVKK requires; for example, connections to the site are encrypted with HTTPS.

9. Changes

We may update this notice; the current version is always published at this address. This English text is a translation of the Turkish notice; if the two differ, the Turkish text prevails.