At Tetglobal, we treat your privacy as a fundamental right rather than a mere legal obligation. Every piece of information you share with us—whether it is your name, contact details, or operational data—is handled with the highest level of scrutiny. Our commitment to the Protection of Personal Data (KVKK) and global standards like GDPR ensures that your digital footprint remains secure within our ecosystem. We don’t just store data; we safeguard your trust through rigorous technical protocols and transparent management practices.
Our approach to data security is built on the principle of data minimization. This means we only request the specific information necessary to fulfill our service promises. If a piece of data doesn’t serve a direct operational purpose, we don’t collect it. This proactive stance reduces risks and ensures that our databases remain lean, focused, and highly protected against unauthorized access or accidental leaks.
Core Principles of Data Processing under KVKK
Operating under the framework of Law No. 6698 (KVKK), our processing activities follow strict legal pillars. We ensure that every data point is processed lawfully, fairly, and transparently. You always have the right to know exactly why your information is being used and how long it will stay in our systems. We avoid any processing that deviates from the original purpose for which the data was initially gathered.
Accuracy is another cornerstone of our methodology. We implement regular verification checks to ensure that the personal data we hold is up-to-date and correct. Outdated or erroneous information can lead to operational errors, so we actively work to maintain the integrity of our datasets. Our team undergoes periodic training to recognize the nuances of lawful processing, ensuring that human error does not compromise our security standards.
Types of Personal Data We Process
The scope of data we handle is strictly limited to what is required for our professional interactions. This typically includes identity information, such as names and titles, and contact details like email addresses or phone numbers. We also process certain operational data if you are a business partner or a client, which might include company registration numbers or specific service-related identifiers.
We categorize our data processing into several distinct layers:
- Identity Data: Full names, surnames, and identification numbers where legally required.
- Contact Data: Physical addresses, email addresses, and telephone numbers for communication.
- Technical Data: IP addresses and browser types used when you interact with our digital platforms.
- Transaction Data: Details regarding the services provided and the history of our professional engagements.
Data Retention and Destruction Policy
Data should not live forever in a database. At Tetglobal, we have established clear retention periods for every category of information we hold. Once the legal obligation to keep the data expires, or once the specific purpose for processing is fulfilled, we initiate our destruction protocols. This prevents the accumulation of “dark data” that could pose a security risk if a breach were to occur.
Our destruction process involves several methods depending on the medium. Digital files are wiped using secure erasure software that overwrites the data multiple times, making recovery impossible. Physical documents containing sensitive information are shredded using high-security cross-cut shredders. We maintain logs of these destruction activities to prove our compliance during audits or regulatory inspections.
Data Transfer and Third-Party Sharing
We do not sell your personal data to third parties—period. However, certain operational necessities might require us to share specific information with trusted partners, such as logistics providers, cloud service hosts, or legal advisors. Every third party we work with must sign a data processing agreement that binds them to the same high standards of protection that we uphold at Tetglobal.
When data crosses borders, we ensure that the destination country provides an adequate level of protection or that we have implemented standard contractual clauses (SCCs). We carefully vet our vendors’ security infrastructures before any data transfer occurs. This includes checking their encryption standards and their internal access control policies to ensure no “weak links” exist in our supply chain.
Technical and Administrative Security Measures
Security is a multi-layered shield. On the technical side, we employ end-to-end encryption for data in transit and at rest. This means even if an unauthorized party intercepted a data packet, the content would remain unreadable. We also utilize advanced firewalls, intrusion detection systems (IDS), and regular vulnerability scanning to identify and patch potential entry points before they can be exploited.
Administrative measures are equally vital. We implement a “least privilege” access model—meaning an employee only sees the data absolutely necessary for their specific job function. Access logs are monitored 24/7 to detect any unusual patterns. Furthermore, our staff undergoes regular cybersecurity awareness training to combat phishing attempts and social engineering tactics that often bypass even the strongest firewalls.
Comparison of Security Protocols
| Security Layer | Methodology | Primary Goal |
|---|---|---|
| Encryption | AES-256 & TLS 1.3 | Protecting data readability |
| Access Control | Multi-Factor Authentication (MFA) | Verifying user identity |
| Monitoring | Real-time Log Analysis | Detecting unauthorized activity |
| Compliance | KVKK & GDPR Audits | Ensuring legal adherence |
Your Rights and Next Steps
Your control over your personal information is paramount. You have the right to request the correction of inaccurate data, the deletion of unnecessary data, and the restriction of certain processing activities. We encourage you to review our privacy practices regularly as we continuously update our systems to meet evolving global security threats.
If you have any questions regarding our data protection practices or wish to exercise your legal rights, please contact our privacy team directly. We are here to ensure your information remains a private asset, not a public liability. For further inquiries, you can reach us via our official contact page or through our headquarters in Istanbul.