Privacy and cookie notice

Last updated: 26 September 2026

1. Who we are

The controller of the personal data described in this notice is infosecacademy Eğitim Danışmanlık Hizmetleri (“Infosec Academy”, “we”), Nidakule Ataşehir Batı, Barbaros Mah. Begonya Sok. 1/2, Ataşehir / Istanbul, Türkiye. Contact: info@infosecacademy.com.tr. Trade registry / tax details: [to be completed].

2. What we collect

• Contact form and email: your name, organisation, email address, telephone number (optional) and the content of your message.
• Technical data: IP address, browser and device information and server logs generated when you visit the site.
• Cookies: see section 8.

Please do not send special categories of personal data or confidential client material through the contact form. Where an engagement follows, confidential material is exchanged only after an NDA is in place.

3. Why we use it

• To respond to your enquiry and arrange an introductory call.
• To prepare a written scope and proposal at your request.
• To keep a record of business correspondence.
• To operate, secure and maintain this website.

4. Legal bases

Under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), where it applies: taking steps at your request prior to entering into a contract (Article 6(1)(b)); our legitimate interests in responding to business enquiries and securing the website (Article 6(1)(f)); and your consent for non-essential cookies (Article 6(1)(a)).

Under the Turkish Personal Data Protection Law No. 6698 (KVKK): processing necessary for the establishment or performance of a contract (Article 5(2)(c)); processing necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms (Article 5(2)(f)); and your explicit consent where required.

5. Who we share it with

We do not sell personal data. We share it only with service providers that host this website and our email, acting on our instructions: [to be completed — hosting and email providers]. Where a provider is located outside Türkiye or the EEA, the transfer is made under the applicable transfer rules of KVKK and the GDPR: [to be completed].

6. How long we keep it

Enquiries that do not lead to an engagement: [to be completed]. Correspondence relating to an engagement: for the period required by applicable commercial and tax law. Server logs: [to be completed].

7. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, data portability, and object to processing based on legitimate interests; you may withdraw consent at any time; and you may lodge a complaint with the supervisory authority in your member state.

Under Article 11 of KVKK you may learn whether your data is processed, request information, learn the purpose of processing and the recipients, request rectification or erasure, object to outcomes produced by automated analysis, and claim compensation for damage caused by unlawful processing. You may apply to us first and then to the Turkish Personal Data Protection Board.

To exercise your rights, write to info@infosecacademy.com.tr. We will respond within the time limits set by the applicable law.

8. Cookies

This website uses cookies that are strictly necessary for it to function and, only with your consent, analytics cookies that help us understand how the site is used. You can change your choice at any time through the cookie banner or your browser settings.

Cookies in use: [to be completed — name, provider, purpose, duration].

9. Changes to this notice

We may update this notice. The date at the top shows when it was last changed.