Privacy and Data Protection

1. Data controller

The data controller is [the data controller's full legal entity name], registered at [registered address], [trade registry and tax numbers]. Registered electronic mail address: [registered electronic mail (KEP) address]. VERBIS registration: [VERBIS registration status].

Contact: info@dcatgroup.com

2. What this site processes

The site is made of static pages. There is no account, form, basket, comment or search on it.

The site uses Google Analytics 4 to measure visits. It writes two cookies to your browser: _ga and _ga_NGREPV8G1G. Measured in an isolated browser, both are set on the dcatgroup.com domain and last 400 days. They give your browser a random identifier, which lets visits from the same browser be linked to one another. The same measurement found no advertising cookie and nothing written to localStorage or sessionStorage.

There is no cookie banner: Google Analytics loads when a page opens, without asking for your consent. The legal basis for this processing: [the legal basis for the analytics cookies and for the transfer abroad; for counsel to determine, no consent is collected today]. Section 3 explains how you can block the measurement.

The server hosting the site keeps technical access logs, as every web server does: IP address, date and time, the address requested, the response code, the referring address and the browser identifier. These are kept for security and fault tracing. Hosting is provided by [hosting provider and the country the server sits in] and logs are retained for [how long server logs are kept].

3. Requests that leave the site

Loading a page sends a request to one outside party: Google. The typefaces, images, stylesheet and the site's own script are served from this server.

Your browser downloads the measurement script from www.googletagmanager.com. As with any web request, that request discloses your IP address and browser identifier to Google.

According to Google's own documentation, the script then sends the address and title of the page you are viewing, the address that referred you, your browser language, your screen resolution and the cookie identifier above to servers on the google-analytics.com domain; Google derives an approximate location from your IP address, and Google Analytics 4 does not store the IP address. The data is kept on the Google Analytics property for [the data retention period set on the Google Analytics property].

To block the measurement you can delete or block this site's cookies in your browser, or install the Google Analytics Opt-out Browser Add-on that Google publishes: tools.google.com/dlpage/gaoptout

There is no advertising network, no social media tracker, no map, no embedded video, no chat widget and no external content delivery network.

The typeface used to be loaded through Google Fonts. The font files were moved onto this server and that request was removed.

The script request and the cookies were measured by counting every network request the page makes and every record it leaves in an isolated browser. Google Analytics sends no data from a browser driven by automation, so the list of fields it transmits rests on Google's documentation rather than on measurement.

4. Contacting us by e-mail

When you write to info@dcatgroup.com, the address you write from, your name and the content of your message are processed in order to answer you. Correspondence is [the e-mail provider and how long correspondence is kept].

This rests on Article 5/2-c of Law 6698, processing directly related to the conclusion or performance of a contract, and Article 5/2-f, legitimate interest. Under the GDPR the equivalent bases are Article 6(1)(b) and 6(1)(f).

5. Purposes and legal bases

Server logs are processed to keep the site secure and running, on the legitimate interest basis.

Google Analytics data is processed to measure, in aggregate, how the site is used. Its legal basis: [the legal basis for the analytics cookies and for the transfer abroad; for counsel to determine, no consent is collected today].

E-mail correspondence is processed to answer the request you sent, on the bases named above.

Personal data is not used for advertising, marketing or automated decision-making.

6. Transfers abroad

Because of Google Analytics, the data listed in section 3 is transferred to Google, on servers outside Türkiye. The basis for this transfer: [the legal basis for the analytics cookies and for the transfer abroad; for counsel to determine, no consent is collected today].

Whether hosting and e-mail create transfers depends on [hosting provider and the country the server sits in] and [the e-mail provider and how long correspondence is kept] and will be stated plainly here once this notice is completed.

7. Your rights

Under Article 11 of Law 6698 you may ask the controller whether your personal data is processed; request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to at home or abroad; have it corrected if incomplete or wrong; ask for its erasure or destruction within the conditions of the law; ask that correction, erasure and destruction be notified to those third parties; object to a result reached solely by automated analysis; and claim compensation for damage caused by unlawful processing.

If you are in the EU, your GDPR rights of access, rectification, erasure, restriction, portability and objection apply as well.

8. How to exercise them

Send your request to info@dcatgroup.com or to [registered electronic mail (KEP) address]. It will be answered within thirty days at the latest.

9. Changes to this notice

Any change is published on this page and the date above is updated. There is no retrospective notification; the current version of the page is the one that applies.