This text in Turkish: Customer Information Text
This notice explains how AES Innovation Arge Danışmanlık San. and Tic. Ltd. Ltd. (AES Innovation) processes the personal data of people who request a quotation, buy our services or contact us. It is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles of the Obligation to Inform.
Where our customer is a company or institution, this notice applies to its employees, authorized persons and site representatives who deal with us or attend an inspection. Information about legal entities is outside the scope of KVKK. In case of any discrepancy, the Turkish version prevails.
1. Data controller
Company: AES Innovation R&D Consulting Industry and Trade Ltd. Co.
MERSIS No: 0008146562700001
Address: Zafer Caddesi No:33, Merkez, Kırıkkale
Email: info@aesinn.com
Phone: +90 850 532 71 89
Registered email (KEP): aesinnovationarge@hs01.kep.tr
2. Personal data we process
- Identity: name, surname, title or position; For individual customers, the Turkish ID number required for invoicing.
- Contact: phone, email, address, city and district.
- Customer transactions: quotation requests and their content, contract, order and appointment details, correspondence, complaint and appeal records.
- Financial: invoice and payment details.
- Site records: photographs and thermal camera images taken during inspections and measurements, measurement results, the name of the representative accompanying us on the site and their signature on the report. These records document the condition of equipment; people present on site may appear in images.
- Website use: IP address, browser and device information, visit and advertising measurement data collected through cookies.
We do not ask for special categories of personal data, such as health data, for our services.
3. Purposes and legal grounds
| Purpose | Legal ground (KVKK art. 5(2)) |
|---|---|
| Preparing quotations, concluding contracts, planning and performing inspections and measurements, issuing reports | (c) Conclusion and performance of a contract |
| Issuing invoices, keeping accounting and tax records | (c) Legal obligation |
| Reporting periodic inspection results to the system required by Turkish law (İSG-KATİP, EKİPNET) | (c) Legal obligation |
| Keeping inspection records as required by accreditation rules and presenting them in TÜRKAK assessments | (d) Legal obligation, (f) Legitimate interest |
| Handling complaints and appeals, measuring service quality | (c) Performance of a contract, (f) Legitimate interest |
| Protecting our rights in a dispute | (e) Establishment, exercise or protection of a right |
| Informing existing and prospective customers about our services | (f) Legitimate interest; Your consent where required by Turkish commercial electronic communication law. You can opt out at any time. |
| Keeping the website secure; measuring visits and advertising performance | Security: (f) Legitimate interest; analytics and advertising cookies: your explicit consent in the cookie banner |
Analytics and advertising cookies (Google Analytics, Google Ads) run only if you choose “Accept” in the cookie banner. You can change your choice at any time via cookie preferences.
4. Transfers
- Public authorities: the Ministry of Labor and Social Security (İSG-KATIP, EKİPNET), the Revenue Administration, TÜRKAK, courts, the Personal Data Protection Authority and other authorities empowered by law; only as far as a legal obligation or request requires.
- Our service providers: our accountant and e-invoice provider; website hosting (Hostinger), email and office software (Microsoft 365), website analytics and advertising (Google); WhatsApp (Meta) if you choose to message us there.
- Our solution partners: for work we carry out together with a solution partner (such as EU regulatory compliance services), only the data that work requires.
- Parties you designate: an insurer, loss adjuster, occupational health and safety provider or business partner you ask us to send the report to.
Of the providers above, Hostinger, Microsoft, Google and Meta may store data on servers outside Türkiye. Your data may therefore be transferred abroad when these services are used.
5. How we collect data
We collect personal data through the quotation form, email, phone and WhatsApp correspondence, contracts and their annexes, site visits and inspections, and cookies on our website, electronically or on paper. When your organization names you as a contact person, your data comes from your organization. We may also obtain contact details of prospective customers from public sources such as company websites.
6. Retention
- Contracts, invoices and commercial correspondence: 10 years under Article 82 of the Turkish Commercial Code.
- Inspection records, site images and reports: 5 years.
- Quotation requests that did not lead to a contract: 1 year.
- Cookie data: for the lifetime of the cookie.
When the period ends, personal data is erased, destroyed or anonymised.
7. Your rights
Under Article 11 of KVKK, you have the right to apply to us to:
- a) learn whether your personal data is processed,
- b) request information about the processing,
- c) learn the purpose of processing and whether data is used accordingly,
- ç) know the third parties in Türkiye or abroad to whom data is transferred,
- d) request correction of incomplete or inaccurate data,
- e) request erasure or destruction under the conditions of Article 7 of KVKK,
- f) request that actions under (d) and (e) be notified to third parties to whom data was transferred,
- g) object to a result against you arising solely from automated analysis,
- g) claim for compensation damage caused by unlawful processing.
8. How to apply
You can send your request in writing to the address above, by registered electronic mail (KEP), with a secure electronic or mobile signature, or by email to info@aesinn.com with the subject “KVKK request” from an email address you have previously given us and that is in our records.
Your request should include your name, surname, signature for written requests, Turkish ID number (for foreign nationals, nationality and passport number), address, email or phone, and the subject of your request.
We respond free of charge within 30 days at the latest. If the request involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your request is rejected, you find the response insufficient or we do not respond in time, you may file a complaint with the Board under Article 14 of KVKK.
Last updated: 28 October 2026