Privacy Notice

1. Who we are

The controller of the personal data described in this notice is:

This notice explains how we process personal data when you visit alpinetec.io, contact us by email or submit a project inquiry through our website.

2. Personal data we process

Depending on how you use the website, we may process:

• Identity and contact data, including your name and business email address
• Professional information, including your company and country
• Inquiry information, including the service you are interested in, project description, expected timeline, optional budget range and preferred contact method
• Communications exchanged with you after your inquiry
• Technical and security data, including IP address, browser and device information, request timestamps, requested pages, security events and Cloudflare Turnstile verification data
• A record that the Privacy Notice was presented or acknowledged

Please do not submit special-category personal data, confidential third-party information or personal data that is not necessary for us to assess your inquiry.

3. Why we process personal data

We process personal data to:

• Receive, assess and respond to project inquiries
• Determine whether ALPINETEC’s services are suitable for the requested work
• Arrange discovery calls and prepare proposals
• Take steps requested before entering into a contract
• Maintain records of business communications
• Protect the website and contact form against spam, fraud, bots and misuse
• Establish, exercise or defend legal claims
• Comply with applicable legal obligations

4. Legal bases

Where the EU General Data Protection Regulation applies, we rely on:

• Steps taken at your request before entering into a contract, where applicable
• Our legitimate interests in responding to business inquiries, developing business relationships, maintaining secure systems and protecting our legal rights
• Compliance with legal obligations

Where Turkish Law No. 6698 on the Protection of Personal Data applies, processing is based, as applicable, on:

• The necessity of processing for the establishment or performance of a contract
• The necessity of processing for compliance with our legal obligations
• The necessity of processing for the establishment, exercise or protection of a right
• Our legitimate interests, provided that your fundamental rights and freedoms are not harmed

We do not rely on consent merely to receive and respond to an ordinary project inquiry. Any future processing that legally requires consent will be presented separately and will be optional unless the relevant processing cannot lawfully take place without it.

5. How we collect data

We collect personal data:

• Directly from you through the contact form, email or subsequent communications
• Automatically through necessary website, server and security technologies
• From the organization you represent, where it provides your business contact details for a legitimate business purpose

6. Service providers and recipients

Personal data may be disclosed, only where necessary, to:

• Website hosting, infrastructure, security and content-delivery providers
• Cloudflare, including for website security and Turnstile bot protection
• Resend, which delivers the notification email generated by the contact form
• Email, communication and business IT service providers
• Professional advisers such as lawyers, accountants and auditors
• Public authorities where disclosure is required by law
• A successor or acquiring entity in connection with a lawful corporate transaction

These providers may process data only for the relevant service or legal purpose and subject to applicable contractual and confidentiality obligations.

We do not sell personal data and do not use project inquiries for unrelated advertising.

7. International transfers

Some service providers may process personal data outside Türkiye or the European Economic Area.

Where an international transfer takes place, we use the transfer conditions and safeguards required by the applicable data-protection law. These may include adequacy decisions, approved standard contractual clauses or another legally recognized safeguard.

8. Retention

If an inquiry does not lead to a business relationship, we normally retain the inquiry and related communications for up to 12 months after the last meaningful contact.

If an inquiry leads to a proposal, contract or client relationship, relevant records may be retained for the duration of that relationship and for the additional period required by applicable commercial, tax, accounting or legal-claims rules.

Technical and security logs are retained only for the period reasonably necessary for security, troubleshooting and abuse prevention, according to the relevant system and provider settings.

We may retain limited information for longer where required by law or necessary to establish, exercise or defend legal claims.

9. Your rights

Depending on the law that applies to you, you may have the right to:

• Request information about whether and how your personal data is processed
• Obtain access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion or restriction of processing
• Object to processing based on legitimate interests
• Request data portability where applicable
• Withdraw consent where processing is based on consent
• Request information about recipients of your data
• Lodge a complaint with a competent data-protection authority
• Seek compensation where provided by applicable law

To exercise a right, contact [email protected]. We may request information reasonably necessary to verify your identity and process the request.

Your rights may be subject to legal conditions and exceptions. Individuals covered by Turkish Law No. 6698 may exercise the rights set out in Article 11 and follow the applicable controller-application procedure. Individuals covered by the GDPR may also complain to the supervisory authority in the EU or EEA country where they live, work or believe an infringement occurred.

10. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

No internet transmission or storage system can be guaranteed to be completely secure. Please avoid sending unnecessary confidential or sensitive information through the contact form.

11. Automated decision-making

We do not use personal data submitted through the website to make decisions based solely on automated processing that produce legal or similarly significant effects.

Cloudflare Turnstile may automatically assess whether a contact-form interaction appears to come from a person or an automated system. This security assessment is used only to protect the form against abuse.

12. Children

The website and ALPINETEC’s services are intended for businesses and adult professional users. We do not knowingly request personal data from children through the contact form.

13. Changes to this notice

We may update this notice when our services, providers, data-processing activities or legal obligations change. The latest version will be published on this page with its effective date.

14. Contact

Questions or requests concerning personal data may be sent to: