PRIVACY STATEMENT

Website: kaya-system.com | Last Updated: June 2026

Welcome to kaya-system.com (the "Website"). This Privacy Statement explains how we collect, use, and protect your personal data when you visit our website and use our contact form.

Kaya operates internationally with a Dutch parent company and locations in both the Netherlands and Turkey. We are committed to safeguarding your privacy in accordance with the EU General Data Protection Regulation (GDPR) and the Turkish Law on the Protection of Personal Data (KVKK).

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Company Name: Kaya Systems
Email: info@kaya-system.com
Full Name
Email Address
Phone Number (optional, if provided)
Company Name (optional, if provided)
Any personal data you choose to include in the message field.
To respond to your inquiries: To answer the questions or requests you submit via the contact form.
Business communication: To follow up on potential business opportunities or partnerships.
Under GDPR: Processing is based on our legitimate interest (Article 6(1)(f) GDPR) to respond to customer inquiries, or to take steps prior to entering into a contract (Article 6(1)(b) GDPR).
Under KVKK: Processing is based on the necessity of data processing for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
Business Relationship: If your contact form inquiry leads to a business relationship, your data will be stored in accordance with our corporate data retention policy.
General Inquiries: If your inquiry does not lead to a contract or ongoing relationship, we will delete your data within a reasonable period (e.g., 6 months to 1 year) after the final communication, unless legal obligations require us to keep it longer.
Trusted IT service providers (e.g., website hosting, email servers) who help us operate our website under strict data processing agreements.
Legal authorities, if strictly required by law or regulation.

2. Personal Data We Collect

When you interact with our website, we only collect the information you voluntarily provide to us via our Contact Form. This typically includes:

3. Why We Process Your Data (Purpose & Legal Basis)

We process your data for the following purposes:

Legal Basis for Processing:

4. International Data Transfers

Because Kaya has locations in both the Netherlands (EU) and Turkey (Non-EU), data submitted through the website may be accessed by our teams in both countries to properly handle your request.

We ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or explicit consent where required) to protect your data when it is transferred between the EU and Turkey, ensuring a level of protection compliant with both GDPR and KVKK.

5. How Long We Store Your Data

We do not keep your personal data longer than necessary:

6. Sharing Your Data with Third Parties

We do not sell, rent, or trade your personal data. We only share your data with:

7. Your Rights

Depending on your location (EU or Turkey), you have strong rights regarding your personal data. Under GDPR and KVKK, you have the right to request access, correction, erasure ('Right to be Forgotten'), restriction of processing, data portability, and objection to processing based on legitimate interests.

To exercise any of these rights, please contact us at [Insert Email Address]. If you are in the EU, you also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security

We take security seriously and implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse. Our website uses secure SSL/TLS encryption for all data submitted through the contact form.