Privacy Notice and Cookie Policy

Last updated: 26 October 2026

This notice is provided under the Turkish Personal Data Protection Law No. 6698 (KVKK) to inform people who use bozakenerji.com and fill in the quote request form or the job application form. The Turkish version is the binding text.

1. Data controller

Bozak Enerji Sanayi ve Ticaret A.Ş.
Head office: Gap Mahallesi, Turgut Özal Bulvarı, Bozo Golden Plaza, No: 264/415, Merkez / Batman, Türkiye
Ankara branch: Kızılırmak Mahallesi, 1443. Cadde, No: 33/4, Çankaya / Ankara, Türkiye
Email: [email protected]

2. What personal data do we process?

• Quote request form: company name, contact person's name, email, phone, service type, province of the work, project description and the files you upload.
• Job application form: full name, phone, email, province of residence, education and work experience, the position you apply for and the CV you upload.
• Technical logs: when you visit the site, our hosting provider's servers keep short-lived records such as IP address, date and time, requested page and browser details for security and operation.

Submitted forms are not stored in a database or file on the site; they are only converted to an email and delivered to the company's mailbox. To prevent abuse (large numbers of automated submissions), your IP address is held in server memory for at most 10 minutes and is not recorded.

Please do not include special categories of personal data in your CV, such as health information, religion, association or union membership, or criminal records. We do not need them to evaluate your application.

3. Why and on what legal basis do we process your data?

• To respond to your quote request, talk to you and prepare a quote: necessary for entering into a contract (KVKK Art. 5/2-c) and our legitimate interest (Art. 5/2-f).
• To evaluate your job application and contact you: necessary for entering into an employment contract (Art. 5/2-c) and our legitimate interest (Art. 5/2-f).
• To keep the site secure and prevent abuse and technical faults: our legitimate interest (Art. 5/2-f).
• To meet legal obligations and requests from authorised bodies: expressly provided by law and legal obligation (Art. 5/2-a and 5/2-ç).

4. How do we collect your data?

Your personal data is collected electronically by you, by non-automated means, when you fill in the forms and upload files; technical logs are collected automatically when you visit the site.

5. Who do we share your data with?

Your data is not sold, not used for advertising and not shared. To run the site we use these service providers:

• Vercel Inc. (USA): site hosting and technical logs.
• Resend (USA): converting form submissions into email and delivering them.
• The company's email provider: the mailbox where incoming emails are kept.

Because these providers' servers are located abroad, your data may be transferred outside Türkiye in line with the conditions of Article 9 of the KVKK. Otherwise, your data is shared only with public authorities that are legally entitled to request it, and only to the extent permitted by law.

6. How long do we keep your data?

• Quote requests and correspondence: at most 2 years if no contract is concluded; if a contract is concluded, for the statutory retention period for commercial books and records (10 years).
• Job applications and CVs: at most 1 year from the application date. If you are hired, the statutory periods for personnel files apply.
• Technical logs: short-lived in the hosting provider's systems, at most 30 days.

When the period ends, your data is deleted, destroyed or anonymised.

7. Your rights

Under Article 11 of the KVKK, you may apply to us to:

• learn whether your personal data is processed,
• request information about the processing,
• learn the purpose of processing and whether data is used accordingly,
• know the third parties in Türkiye or abroad to whom data is transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction under the conditions of Article 7 of the KVKK,
• request that corrections, deletions or destructions are notified to third parties who received the data,
• object to an outcome against you resulting from analysis exclusively by automated systems,
• claim compensation if you suffer damage due to unlawful processing.

8. How to apply

You can send your request, with information that verifies your identity, in writing to our head office address or by email to [email protected]. Requests are concluded free of charge within 30 days at the latest, depending on their nature. If the process involves an additional cost, the fee set by the Personal Data Protection Board may be charged. If your request is rejected, you find the answer insufficient or no answer is given in time, you may file a complaint with the Personal Data Protection Board.

9. Cookie policy

This site does not use cookies. There are no analytics, advertising or tracking tools, and nothing is written to your browser's storage (cookies, local storage). For this reason the site shows no cookie consent banner.

The site contains links to WhatsApp and Google Maps. They open only when you click them; the pages they open are subject to those companies' own privacy and cookie policies.

If an analytics or cookie-based tool is added in the future, this section will be updated and your consent will be requested where required.