Last updated: 6 October 2026
Controller identity and scope
This notice informs GreBotics website visitors and people submitting contact, product, facility, R&D or partnership inquiries under Article 10 of Law No. 6698. The controller is the company below.
Demircioğlu Robotik Bilişim Teknolojileri San. ve Tic. Ltd. Şti.
GreBotics
Sakarya Üniversitesi Teknoloji Geliştirme Bölgesi E Blok Demircioğlu Ar-Ge Binası Serdivan/SAKARYA
Data categories and collection methods
Web forms, email, phone and WhatsApp conversations you initiate may provide name, organisation, email, optional phone, industry, selected solution, daily waste information, project or partnership topic and message. Request times, technical connection and session information may be collected for security, along with cookie preferences and permitted analytics data. Company information is personal data insofar as it identifies a natural person.
Purposes and legal grounds
| Activity and purpose | Legal ground |
|---|---|
| Assess product, facility or partnership inquiries and conduct offer or contract discussions. | Article 5(2)(c), where applicable: establishing or performing a contract. |
| Respond to general questions, manage R&D discussions and inquiry follow-up, and provide a secure service. | Article 5(2)(f): legitimate interests, without harming fundamental rights and freedoms. |
| Respond to authorities, fulfil statutory obligations and protect rights. | Depending on the activity, Article 5(2)(ç): legal obligation; Article 5(2)(e): establishing, exercising or protecting a right. |
| Optional language remembering and visitor analytics. | Article 5(1): revocable explicit consent for the relevant category. |
The form’s acknowledgement checkbox is not marketing permission or blanket consent. Data necessary to respond to inquiries is processed on the relevant legal ground. Cookie consent is collected separately by category; analytics permission is not required to submit an inquiry.
Recipients and international service providers
Authorised GreBotics staff assessing your inquiry and hosting, email and infrastructure providers may access data within their duties. Information may be shared with competent authorities when legally required and with legal advisers when necessary to protect a right. Personal data is not sold to advertising companies.
Inquiry, R&D and partnership forms on this site are sent through Web3Forms. On submission, form fields and technical request information are processed by that service and delivered to GreBotics by email. Web3Forms may provide services outside Türkiye; its privacy policy explains submission storage and retention. Web3Forms — Privacy Policy.
When Google Analytics is configured and analytics permission is granted, Google may process analytics data. International transfers are subject to the applicable conditions and safeguards under Article 9 of Law No. 6698. Cookie acceptance is not a blanket permission for other processing activities or international transfers.
Retention, deletion and security
Data is kept for the period needed to respond to an inquiry and conduct discussions, or for legally required periods where contractual or statutory obligations arise. Records required to protect a right may be retained within relevant limitation periods. When the processing purpose and legal basis cease, data is deleted, destroyed or anonymised. Cookie and preference durations are listed separately in the Cookie Policy.
Access to inquiry records and administration is restricted by role. Admin session cookies use HttpOnly and SameSite protections and Secure on HTTPS. Encrypted connections, access controls and abuse prevention protect data transmission. The form provider’s retention and deletion practices are also governed by its policy.
Your rights under Article 11
Under Article 11 of Law No. 6698, you have the following rights:
- Learn whether your personal data is processed and request information about processing.
- Learn the purpose of processing and whether data is used accordingly.
- Know the third parties to whom data is transferred in Türkiye or abroad.
- Request correction of incomplete or inaccurate data and deletion or destruction when processing conditions no longer apply.
- Request notification of corrections, deletions or destruction to recipients.
- Object to an adverse outcome resulting exclusively from automated analysis.
- Seek compensation for damage caused by unlawful processing.
How can you exercise your rights?
Submit a written request to the postal address above, or email us from an address previously provided to us and recorded in our system. Other valid methods under the applicable communiqué may also be used. “Personal Data Request” in the subject helps us route your request.
Include your name, request, reply contact details and information required by the communiqué. Only information necessary for identity verification is requested. Do not upload identity documents or sensitive personal data through the general inquiry form.
Requests are resolved as soon as possible and within 30 days. Where processing requires an additional cost, the Board’s applicable tariff may apply. You may complain to the Personal Data Protection Board within the statutory conditions and time limits if a request is rejected, the response is insufficient or no timely response is provided.
Official information sources: KVKK Cookie Guide · Data Subject Rights · International Transfers