Privacy & Personal Data Protection

The data controller for the GeoTeam Global website and ordinary B2B/RFQ enquiries is GEOTEAM İNŞAAT EMLAK TİCARET LİMİTED ŞİRKETİ (GeoTeam Global is the commercial brand). Registered address: Patlangıç Mahallesi, 334/14 Sokak, B Blok, No: 2B, İç Kapı No: 1, Fethiye/Muğla, Türkiye. MERSİS number: 0394130943700001; tax identification number: 3941309437. Contact for privacy and KVKK applications: info@geoteam-global.com. This notice covers the GeoTeam website, sourcing requests and RFQ forms; processing by independently acting supplier websites or social platforms is governed by their own notices.

Business enquiries: contact name, company, work email, business telephone, inquiry text, manufacturer and part numbers, quantities, delivery destination and documents that you choose to send (such as BOMs and specifications). Technical data: IP address, browser/user agent, request time, website/security event logs and consent preferences. Optional analytics: page views and interaction events only if analytics are lawfully enabled and you opt in. We ask that you do not provide passports, payment cards, health information, employee personal records or other sensitive personal data through RFQ/BOM files.

We use information to receive and respond to quotations, clarify specifications, check sourcing feasibility, coordinate suppliers and logistics, establish and perform contracts, meet legal/accounting/export-control duties and protect the website against abuse. Depending on the facts, the legal basis under Turkish Law No. 6698 (KVKK) Articles 5/6 may be processing directly related to establishing or performing a contract, compliance with a legal obligation, establishment/exercise/protection of legal rights or a balanced legitimate interest; where required, separate explicit consent applies. Where GDPR applies, the corresponding grounds may be Article 6(1)(b), (c), (f) or (a), as appropriate. Optional analytics and direct marketing are not necessary to submit an RFQ; marketing is not enabled by this site package. This notice is information, not blanket consent.

Most RFQ details are provided by you through website forms, email, telephone or other channels you choose. We may obtain business data and product information from relevant public registers, your company's public website, authorized suppliers and logistics partners to assess an inquiry; we will document sources where required.

For a submitted enquiry, access is limited to authorised company personnel and processors or recipients with a business need: Google/Firebase infrastructure supporting hosting and functions, the configured business-mail provider and delivery relay, IT/security contractors, accountants/legal advisers, and—only where needed for sourcing or fulfilment—manufacturers, distributors, freight forwarders and customs brokers. The historical website source references a separate mail relay; its ownership, subprocessor contract and actual hosting remain unverified, so it must not be treated as an approved processing route until assessed. Do not send personal contact details to external AI or international supplier-search services unless a documented lawful basis and transfer arrangement exist. We do not sell personal data.

Our operations are in Türkiye, but website/cloud infrastructure and global sourcing may involve transfers outside Türkiye. The archived Firebase function is configured for a United States cloud region, and a separate EU-region mail relay appears in historic source; these are technical observations, not evidence that appropriate transfer safeguards already exist. Routine transfers must be supported by a valid mechanism under KVKK Article 9 (such as applicable adequacy or appropriate safeguards). For applicable standard contracts, the statutory notification rule also applies. Where the GDPR applies to a given activity, transfers out of the EEA require their own Chapter V assessment. Personal data must not be disclosed to a supplier, hosting provider or AI service abroad until the company has documented the provider, destination, purpose and lawful arrangement.

The sourcing tool may analyze manufacturer names, part numbers, publicly available product descriptions and RFQ context to suggest search queries and sourcing candidates. Results and estimated prices are preliminary and require human verification; no legally significant decision about a person is made solely by this tool. Do not include personal information in product documents unless it is needed for the inquiry. An administrator must approve any external AI processor and relevant data-flow safeguards before personal data are sent to it.

In this reviewed website package, the language preference and the record of your privacy information choice use browser storage. The source also includes session storage for news-page navigation and technical state required by the RFQ interface. The archived GA4 measurement script exists, but this package explicitly disables its automatic loading; optional advertising/analytics trackers are not enabled by the package. We will not set optional tracking storage without a separate informed choice and any required lawful transfer safeguards. The site can be used without optional analytics. Read this policy or reopen privacy controls via the footer; third-party social links take you to independent providers.

We are adopting a category-based retention and destruction schedule designed to apply the shortest period consistent with the purpose and mandatory legal requirements. As a proposed company operating standard for implementation, unsuccessful non-contractual enquiries are reviewed for deletion 12 months after the last meaningful contact; temporary lead/search caches and security logs are reviewed after 30–90 days, subject to documented operational needs and provider capabilities. Signed contracts, invoices and other statutory business records are retained for the applicable tax/commercial and limitation periods, and personal data not required for those records must be separated or removed when possible. These schedule targets require technical enforcement and evidence before they can be described as implemented. Deletion/destruction requests are assessed individually, including legal holds and backup/processor copies.

We apply appropriate access controls, least privilege, transport encryption where supported, restricted administrator permissions, backups and incident procedures, proportional to the risks. Internet communications cannot be guaranteed completely secure. Individuals may report suspected data misuse or a security issue via the privacy contact above. We will assess notification obligations and report qualifying incidents to relevant authorities and individuals within applicable deadlines.

You may apply under KVKK Article 11 to learn whether your personal data are processed, obtain information, request correction or deletion where conditions apply, learn recipient categories and exercise other statutory rights. Send a signed written application to Patlangıç Mahallesi, 334/14 Sokak, B Blok, No: 2B, İç Kapı No: 1, Fethiye/Muğla, Türkiye or contact info@geoteam-global.com to request the proper submission method and verify identity. A request sent by ordinary email may need verification or resubmission by a legally accepted method. The controller must respond as soon as possible and no later than 30 days under KVKK Article 13. If applicable to a particular activity, GDPR rights and complaint routes may also be exercised; certain rights depend on their specific legal criteria.

GeoTeam Global is a business-to-business website not directed at children. We do not intentionally solicit children's data or sensitive personal information through RFQ. This document is version 1.0, prepared on 27 October 2026, and becomes effective only upon authorised publication. Material changes must be documented, dated and explained before new processing purposes begin. The current approval status is legal and technical review pending; the existence of this document alone does not certify compliance. Contact: info@geoteam-global.com.