This notice, issued under Article 10 of Personal Data Protection Law No. 6698 (KVKK), explains how your personal data is processed in the procurement training services offered through this website.
1. Data Controller
| Trade name | Ömer Tulu Tezcan — TLU Consulting (sole proprietorship) |
| Tax office / number | Göztepe Tax Office / 8410263754 |
| Address | Erenköy Mah. Sadi Yaver Ataman Sk. B Blok No: 2/2 İç Kapı No: 2, Kadıköy / İstanbul |
| Telephone | +90 536 522 73 76 |
| tulu@tluconsulting.com | |
| Website | tluconsulting.com |
2. Personal data processed
| Category | Data |
|---|---|
| Identity | Name, surname |
| Contact | Email address, telephone number, billing address |
| Billing | For individual invoices, the Turkish ID number where required by law; for corporate invoices, the company name, tax office and tax ID number |
| Customer transaction | Order and payment records, trainings enrolled in, attendance and completion information |
| Transaction security | Account details, login records, IP address, cookie records |
Credit card details are not processed or stored. Payment takes place through the infrastructure of the licensed payment institution iyzico; card details are not transmitted to the Seller at any stage.
3. Purposes of processing
- Creating training enrolments, managing places and tracking attendance
- Carrying out payment transactions, issuing invoices and handling refunds
- Sending enrolment confirmations, reminders and change notifications
- Carrying out training completion and competence certificate processes
- Responding to requests and complaints
- Fulfilling legal obligations (tax, commercial and consumer legislation)
- Where you have given explicit consent, informing you about new trainings
4. Legal grounds
- Establishment and performance of a contract (Art. 5/2-c) — enrolment, payment, attendance and refund transactions.
- Legal obligation (Art. 5/2-ç) — retention obligations arising from invoicing, accounting and consumer legislation.
- Legitimate interest (Art. 5/2-f) — account security, prevention of misuse, measuring service quality.
- Explicit consent (Art. 5/1) — marketing communications.
5. Recipients and transfers abroad
| Who | For what |
|---|---|
| Payment institution (iyzico) | Carrying out payment and refund transactions |
| Hosting and database provider | Running the website and the records. The servers are located in the European Union (Germany) region. |
| Email delivery provider | Sending enrolment confirmation and information emails |
| Analytics service | Measuring website usage in aggregate — only if consent is given in the cookie banner |
| Financial adviser and accounting service | Invoicing and legal obligations |
| Authorised public institutions and organisations | Requests arising from legislation |
Because the hosting and email services are obtained from providers established abroad, your personal data is transferred abroad. The transfer is carried out in compliance with the conditions set out in Article 9 of the Law.
6. Method of collection
Data is collected through the membership, order and contact forms on this website and by email and telephone, by fully or partly automated means.
7. Retention period
Data is kept for as long as the purpose of processing requires and until the limitation and retention periods set out in the relevant legislation (10 years for commercial and financial records) have expired. Once the period has ended, it is deleted, destroyed or anonymised. When a user deletes their membership, the account is closed; financial records continue to be kept for the statutory period.
8. Your rights
Under Article 11 of the Law, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in line with that purpose; to know the third parties in Turkey or abroad to whom it has been transferred; to request correction if it has been processed incompletely or incorrectly; to request its deletion or destruction; to request that correction and deletion be notified to the third parties to whom it has been transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage due to unlawful processing.
You can submit your applications in writing to the address above or to the email address tulu@tluconsulting.com. Requests are concluded within 30 days at the latest.