Privacy Notice

1. Who is responsible for your data

The data controller ("veri sorumlusu" under KVKK) for personal data processed through this website is:

Company

Vera Nova Global Dış Ticaret Limited Şirketi

Registered address

Kızılırmak Mahallesi, Dumlupınar Bulvarı, Nextlevel No: 3A, İç Kapı No: 11, Çankaya/Ankara, Türkiye

Tax ID

9241165804

MERSIS No.

0924116580400001

Privacy contact

info@veranova-tech.com

2. Personal data we collect

We collect only the data needed to respond to business enquiries and to operate the website securely:

• Enquiry data you provide: full name, company, email address, phone number (optional), delivery country (optional), area of interest, selected product category and the requirements you describe in your message.
• Correspondence: the content of emails you send to us and our replies.
• Technical and security data: IP address, browser and device information, date and time of requests, and security signals processed by Cloudflare and Cloudflare Turnstile to protect the website and the form.

Data is collected electronically through the website form, by email and by automated means when you use the website. Name, company, email address, area of interest and message are required to answer your enquiry; without them we cannot respond. Please do not include sensitive data (for example health information) in your message.

3. Purposes and legal bases

We process personal data only for the following purposes and on the following legal bases:

• Reviewing and answering your enquiry and preparing a commercial offer — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR; Art. 5(2)(c) KVKK).
• Business communication about your enquiry and keeping necessary records — our legitimate interest in managing customer relationships (Art. 6(1)(f) GDPR; Art. 5(2)(f) KVKK).
• Protecting the website and the enquiry form against spam, fraud and automated abuse, and ensuring IT security — our legitimate interest in secure operation (Art. 6(1)(f) GDPR; Art. 5(2)(f) KVKK).
• Complying with legal obligations and establishing, exercising or defending legal claims (Art. 6(1)(c) and (f) GDPR; Art. 5(2)(ç) and (e) KVKK).

We do not use your data for marketing, profiling or newsletters. Sending an enquiry does not subscribe you to any mailing list. We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

4. Who receives your data

We share personal data only where necessary and never sell or rent it. Recipients are:

• Cloudflare, Inc. — website hosting, content delivery, security and the Turnstile anti-abuse check.
• Our email delivery provider (Resend) — transmitting your enquiry from the website to our business mailbox.
• Our business email hosting provider — storing and managing enquiry correspondence.
• Professional advisers, courts and public authorities — only where required by law or needed to establish or defend legal claims.

Service providers act as data processors on our documented instructions under data processing agreements (Art. 28 GDPR; Art. 12 KVKK) and may not use your data for their own purposes.

5. International data transfers

Our service providers operate internationally, so your data may be processed outside your country, including in the United States. Where such transfers are subject to legal restrictions, we rely on an appropriate transfer mechanism: an adequacy decision (including the EU–U.S. Data Privacy Framework for certified providers), Standard Contractual Clauses approved by the European Commission or the UK equivalent, or, for transfers from Türkiye, the appropriate safeguards set out in Article 9 KVKK, such as standard contracts notified to the Personal Data Protection Authority. You may request information about these safeguards using the contact details below.

6. How long we keep your data

• Enquiries and related correspondence: up to 180 days after our last communication, unless a longer period is needed for an ongoing business discussion, a contract, a legal obligation (for example commercial and tax record-keeping periods) or a dispute.
• Technical security logs: normally up to 14 days.

When the retention period ends, data is deleted, destroyed or anonymised.

7. How we protect your data

We use appropriate technical and organisational measures, including encrypted connections (HTTPS/TLS), restricted access to enquiry data, automated abuse protection and logs that do not record the content of your enquiry. No method of transmission over the internet is completely secure, but we work to protect your data and review our measures regularly.

8. Your rights

Subject to the conditions of applicable law, you have the right to:

• know whether we process your personal data and receive information about it and a copy of it (access);
• have inaccurate or incomplete data corrected (rectification);
• have your data erased or destroyed, and have third parties to whom it was disclosed informed of the correction or erasure;
• restrict processing, and object to processing based on our legitimate interests;
• receive the data you provided in a structured, commonly used, machine-readable format (portability, where applicable);
• learn the purpose of processing, whether your data is used in line with that purpose, and the recipients in Türkiye or abroad (Art. 11 KVKK);
• object to a result against you arising exclusively from analysis by automated systems, and claim compensation for damage caused by unlawful processing (Art. 11 KVKK);
• withdraw consent at any time where processing is based on consent, without affecting processing carried out before the withdrawal.

To exercise your rights, write to info@veranova-tech.com. We will respond without undue delay and in any case within one month (GDPR) or 30 days (KVKK); we may ask for information to verify your identity. Requests are free of charge unless they are manifestly unfounded or excessive.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where an alleged infringement took place — for example an authority in the EU/EEA, the UK Information Commissioner's Office or, in Türkiye, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) after first applying to us.

9. Cookies and similar technologies

This website does not use advertising, analytics or tracking cookies, which is why it does not show a cookie consent banner. Cloudflare may set strictly necessary security cookies, and Cloudflare Turnstile uses technical signals and storage to distinguish people from automated traffic when you use the enquiry form. These are essential for security and service delivery and do not require consent. We do not store your form entries in your browser.

10. Children

This website is intended for business customers and is not directed at children under 16. We do not knowingly collect personal data from children.

11. Links to other websites

Our website links to partner and third-party websites. Those websites apply their own privacy practices, for which we are not responsible. Please read their privacy notices.

12. Changes to this notice

We may update this Privacy Notice to reflect changes in our practices or in the law. The current version is always available on this page with its last-updated date, and we will highlight material changes on the website.

13. Contact

For privacy questions, requests to exercise your rights or any other enquiry, contact info@veranova-tech.com or write to our registered address stated in section 1.