Privacy and Personal Data

1.1 Data controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Agun Security Savunma ve Güvenlik Ltd. Şti. ("Agun Security") as data controller, within the scope described below.

• Company: Agun Security Savunma ve Güvenlik Ltd. Şti.
• Address: İçerenköy Mah. Topçu İbrahim Sok. Quick Tower No:8-10 D, Ataşehir / İstanbul, Türkiye
• E-mail: agun@agunsecurity.com
• Mersis No: 0009152762900001

1.2 Personal data we process

When you use the contact form on our website, we process:

• Identity: first name and surname
• Contact: e-mail address and, if you give it, phone number
• Enquiry: the service you are interested in and whatever you choose to write in your message
• Transaction security: IP address, date and time, the result of the security check (bot protection)
• Site usage: only if you accept analytics cookies, statistics on how you use the site

Because of the nature of our services, your message may contain sensitive details such as travel plans, locations or security needs. We suggest you write only as much as you wish to share; every enquiry is handled in confidence.

1.3 How we collect it

Your data is collected electronically and automatically when you fill in the contact form and, if you consent, through analytics cookies.

1.4 Why we process it

• To receive, assess and answer contact and quotation requests
• To conduct pre-contractual discussions
• To plan our services and ensure security
• To keep the website secure and prevent misuse
• With your consent, to measure and improve how the site is used
• To meet our legal obligations

1.5 Legal grounds (KVKK Art. 5)

• Processing directly related to entering into or performing a contract (Art. 5/2-c): assessing and answering your enquiry
• Our legitimate interest (Art. 5/2-f): keeping the site and our operations secure
• Compliance with a legal obligation (Art. 5/2-ç)
• Explicit consent (Art. 5/1): analytics cookies

1.6 Transfers

Our website and contact form run on the following service providers based outside Türkiye, so your form data is processed on servers in these countries:

• Cloudflare, Inc. (USA): hosting, form infrastructure, security and bot protection (Turnstile)
• Brevo (France): delivering your form message to the Agun Security mailbox
• Google (USA): the Agun Security e-mail service and, only with your consent, Google Analytics

These transfers rest on the explicit consent you give with the checkbox on the contact form (KVKK Art. 9/6-a). Turkish law does not apply in these countries, so you may not be able to enforce your rights as directly as in Türkiye. Without this consent the form cannot be sent; you can then reach us through WhatsApp or the phone number and e-mail address shown on the site.

Otherwise, your data is shared only with authorities legally entitled to request it, or where strictly necessary to deliver the service (for example, the assigned team). It is never passed to third parties for marketing.

1.7 How long we keep it

• Enquiries that do not lead to a contract: deleted, destroyed or anonymised no later than 1 year after the enquiry is closed.
• If a service contract follows: kept for the period required by the applicable legislation, at most 10 years.
• IP address record used for bot protection: 1 hour.
• Google Analytics data (if you consented): 14 months.

1.8 Your rights (KVKK Art. 11)

Under KVKK Art. 11 you have the right to learn whether your personal data is processed; to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties, in Türkiye or abroad, to whom it is transferred; to request correction if it is incomplete or inaccurate; to request its deletion or destruction; to request that these actions be notified to the third parties it was transferred to; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.

You can send requests in writing to the address above or to agun@agunsecurity.com, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. We answer within 30 days, free of charge. If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Board.

2.1 General

This policy explains how your data is handled when you visit our website and use our contact form. Read it together with the clarification text above.

2.2 Ways to contact us

You can reach us through the protected contact form, the WhatsApp button, or the phone number and e-mail address shown on the site. When you tap the WhatsApp button, the WhatsApp app opens; from then on the conversation is subject to WhatsApp's (Meta's) own terms and privacy policy.

2.3 Cookies and similar technologies

• Strictly necessary: remembering your cookie choice (your browser's local storage) and running bot protection when you send the form (Cloudflare Turnstile). The site cannot work securely without these; they need no consent.
• Analytics (only with your consent): Google Analytics 4, which helps us understand how the site is used. If you do not consent, it never loads. You can change your choice at any time through the "Cookie settings" link at the bottom of every page.
• No marketing or advertising cookies are used.

YouTube videos and Google Maps load only when you click them. Once you click, that content is served by Google and is subject to Google's privacy policy. Videos play from youtube-nocookie.com, which keeps cookies to a minimum.

2.4 Form data and security

• The form is sent over an encrypted (TLS) connection.
• The server validates every submission and applies bot protection and rate limiting.
• Form data is not kept in a database on the site; it is delivered straight to the Agun Security mailbox.
• Enquiries are seen only by authorised staff; message content is never written to system logs.
• Data is kept for the periods in the clarification text and then destroyed.

2.5 Visitors in the European Union (GDPR)

Because we offer our services to people in the European Union, we process the data of our EU visitors in line with the EU General Data Protection Regulation (GDPR). The controller is Agun Security, as named above.

• Legal bases: steps taken at your request before a contract, to answer your enquiry (GDPR Art. 6(1)(b)); our legitimate interest in keeping the site and our operations secure (Art. 6(1)(f)); and your consent for analytics cookies (Art. 6(1)(a)).
• Transfers: your data is processed in Türkiye and through the service providers listed above. Their processing outside the EU relies on the safeguards GDPR provides for, such as the European Commission's Standard Contractual Clauses.
• Your rights: access, rectification, erasure, restriction of processing, data portability and objection (GDPR Arts. 15-22). You can withdraw your consent at any time; this does not affect processing carried out before you withdrew it.
• Complaints: you can complain to the data protection authority in the EU country where you live.
• We make no automated decisions and do no profiling.

2.6 Changes and contact

We update this policy when needed; the current version is always published on this page. For questions and requests, use the data controller's contact details in the clarification text.