Last updated:
This Privacy Policy explains how ACHIEVE GLOBAL DANIŞMANLIK VE DIŞ TİCARET LİMİTED ŞİRKETİ ("ACHIEVE GLOBAL", "we") processes personal data collected through achieveglobal.com.tr. It is provided as a privacy notice (aydınlatma metni) under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR").
1. Data controller
The data controller is ACHIEVE GLOBAL DANIŞMANLIK VE DIŞ TİCARET LİMİTED ŞİRKETİ, Istanbul, Türkiye.
Registered address: [to be completed]. MERSIS number: [to be completed]. Contact for privacy matters: info@achieveglobal.com.tr.
2. Personal data we collect
When you use our inquiry or contact forms, we collect the information you choose to provide:
- Identity and contact data: full name and email address.
- Professional data: company name and country.
- Request data: the product, service, quantities, specifications, target market and messages you submit.
- Technical data: your IP address and request metadata, processed temporarily to protect the forms from abuse, and standard server logs kept by our hosting provider.
3. Purposes of processing
We process this data to:
- respond to your inquiry and communicate with you about it;
- prepare quotations and take steps you request before entering into a contract;
- protect our website and forms against spam, misuse and security incidents;
- comply with legal obligations and establish, exercise or defend legal claims.
4. Legal grounds
Depending on the context, we rely on the following grounds under Article 5(2) of KVKK and, where the GDPR applies, Article 6(1) GDPR: processing necessary for the establishment or performance of a contract; compliance with a legal obligation; and our legitimate interests in responding to business inquiries and securing our website, provided these do not override your fundamental rights and freedoms.
5. Recipients and international transfers
Your data is accessible only to authorised staff who handle your inquiry. We use service providers to host the website and deliver emails; these providers may store data on servers outside Türkiye. Any cross-border transfer is carried out in accordance with Article 9 of KVKK and other applicable law.
Where your request requires it and with your knowledge, relevant details may be shared with suppliers, manufacturers, logistics companies or independent professionals involved in handling it. We do not sell personal data.
6. Retention
We keep inquiry data for as long as necessary to handle your request and any resulting business relationship, and thereafter for the periods required by law or needed for applicable limitation periods. Data that is no longer needed is deleted, destroyed or anonymised. IP addresses used for rate limiting are held in memory only briefly.
7. Security
We apply appropriate technical and organisational measures, including encrypted connections (HTTPS), server-side validation, restricted access to inboxes and confidential handling of credentials. No method of transmission over the internet is completely secure, so please do not send highly sensitive information through the forms.
8. Your rights
Under Article 11 of KVKK you have the right to:
- learn whether your personal data is processed and request information about it;
- learn the purpose of processing and whether data is used accordingly;
- know the third parties to whom data is transferred, in Türkiye or abroad;
- request correction of incomplete or inaccurate data, and deletion or destruction of data under the conditions of the law;
- request that third parties to whom data was transferred be notified of such corrections or deletions;
- object to a result against you arising exclusively from automated analysis;
- claim compensation for damage arising from unlawful processing.
Where the GDPR applies, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority.
To exercise your rights, write to info@achieveglobal.com.tr. We will respond within thirty days at the latest. You may also apply to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
9. Cookies
Information about cookies and similar technologies is provided in our Cookie Policy.
10. Changes to this policy
We may update this policy. The date of the latest revision is shown at the top of this page.
