Privacy and Data Protection
Privacy and personal data protection notice
This page explains which personal data is collected through devkadogalgaz.com, for which purposes and on which legal grounds it is processed, who it is shared with, how long it is kept, which cookies the site uses, and what rights you have under Turkish Personal Data Protection Law No. 6698 (KVKK).
Effective date: 7 September 2026
This is an English translation provided for convenience. Personal data protection in Türkiye is governed by Law No. 6698 (KVKK) and its secondary legislation, which are written in Turkish. If the two versions differ, the Turkish version of this notice prevails.
Data controller
The data controller for your personal data is the business identified below. “We” and “our company” in this notice refer to that business.
| Legal name | DEVKA DOĞALGAZ BURAK DEVECİ-KORAY KAYA |
|---|---|
| Address | Bayındır Mah. 322. Sk. No:24/1, 07030 Muratpaşa/Antalya |
| Phone | 0553 028 82 80 |
| info@devkadogalgaz.com | |
| Website | www.devkadogalgaz.com |
What data we collect
The site has no membership, user accounts, online payment or comments. Personal data is collected only when you contact us. The contact form collects the following fields:
| Data | Where it is collected | Status |
|---|---|---|
| Full name | Contact form | Required |
| Phone number | Contact form | Required |
| E-mail address | Contact form | Optional |
| District | Contact form (select from list) | Optional |
| Subject | Contact form (select from list) | Optional |
| Message text | Contact form | Required |
| Date and time of submission | Automatic on submission | Recorded automatically |
| Short irreversible digest of the IP address | Automatic on submission | Recorded automatically |
When you submit the form, these details are both written to a log file on our server and sent by e-mail to info@devkadogalgaz.com. If you entered an e-mail address, it is added to the “reply-to” field of that e-mail so we can answer you directly.
We do not store your IP address as such. To prevent a large number of submissions from the same connection in a short time, a short irreversible digest derived from the IP address is stored together with the submission time in a separate counter file; that record is deleted after 10 minutes.
If you reach us directly by phone, WhatsApp or e-mail, the details you share in that message are processed for the same purposes.
Values you enter into the boiler kW and radiator calculators on this site are computed in your own browser only; they are not sent to our server and are not stored. Only if you click “request a quote with this result” are the values carried into the message field of the contact form; if you then submit the form, they are processed as form data.
As with every website, technical access records (request time, requested address, IP address, browser information) are generated on the server of our hosting provider. These records are kept by the provider for system administration and security; we do not use them for marketing, profiling or analytics.
Why we process it
We use the data we collect only for the following purposes:
- Responding to the request you send through the contact form, phone, WhatsApp or e-mail
- Scheduling the free site survey and appointments
- Preparing a quotation for your request and sending it to you
- Carrying out the installation, maintenance or service work and staying in touch with you throughout, if your request turns into a job
- Preventing automated abuse of the contact form and keeping the site secure
We do not use your data for anything beyond these purposes. We do not send you advertising or bulk marketing messages without your consent, and we do not sell your data.
Legal grounds and collection method
Your personal data is collected electronically, by partly automated means: through the contact form when you fill it in and submit it, or through the relevant channel when you reach us by phone, WhatsApp or e-mail.
Our processing relies on the conditions listed in Article 5(2) of the Law:
- Art. 5(2)(c): Processing is directly related to the conclusion or performance of a contract. Your survey, quotation and job request are part of pre-contractual discussions.
- Art. 5(2)(ç): Compliance with a legal obligation of the data controller. Keeping documents for the periods required by law once a job turns into a contract or invoice falls here.
- Art. 5(2)(f): The legitimate interests of the data controller, provided this does not harm your fundamental rights and freedoms. Keeping a record of requests, tracking request history and preventing abuse of the form fall here.
The consent box on the form is there to confirm that you have read this notice and accept that your contact details will be used to reply to your request. Because the legal grounds above are sufficient, we do not additionally rely on your explicit consent.
We do not collect special categories of personal data such as health, religion or membership; please do not include such information in the message field.
Transfer of data
We do not transfer or sell your data to third parties for marketing. The limited and necessary cases where a third party comes into contact with the data are:
- Hosting provider: Our website and e-mail service run on the servers of a hosting provider established in Türkiye. Because form records and incoming e-mails are held on that server, the provider is technically able to access the data as part of system administration. This transfer takes place within Türkiye; we do not transfer data abroad.
- Google Maps: The map showing our office on the contact and home pages is content embedded by Google. When the map loads, your browser connects directly to Google servers; Google may receive your IP address and browser information and may set its own cookies. That connection is subject to Google’s own privacy policy and is outside our control.
- Authorised public authorities: Only where required by law and limited to the information requested.
No data is transferred to any advertising network, analytics service or data broker.
Retention period
We keep each record only as long as the purpose it was collected for requires:
| Record | Retention period |
|---|---|
| Contact form records and incoming e-mails | Up to 2 years after your request is closed |
| Documents of jobs that turn into a contract, quotation or invoice | The period required by law (5 years under tax legislation) |
| Form submission counter (IP digest and submission time) | Up to 10 minutes |
| Session cookie | Deleted when you close your browser |
| Server access records | A limited period set by the hosting provider’s system configuration |
Records are deleted once the period ends. You may also request deletion before then; the application procedure is explained below.
Cookies
This site uses no advertising, tracking, analytics or social media cookies. No measurement tool such as Google Analytics or the Meta pixel is installed. All fonts, images, stylesheets and scripts are served from our own server; no external CDN is used.
The only cookie set by the site itself is the technical (strictly necessary) session cookie below:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| PHPSESSID | Cross-site request forgery (CSRF) protection on the contact form, displaying form error and success messages, keeping the short-term submission counter | Session | Strictly necessary / technical |
This cookie carries only a randomly generated session identifier; it contains no name, phone number or message and is not used to track you across sites. It is deleted when you close your browser.
You can delete or block cookies in your browser settings. If you block the session cookie, the security check cannot run and the contact form will not work; in that case you can reach us by phone, WhatsApp or e-mail.
When the embedded Google Maps map loads, Google may set its own cookies. Those cookies do not belong to us, cannot be read by us, and are not loaded on pages without the map.
Your rights
Under Article 11 of the Law you may apply to the data controller and request the following:
- To learn whether your personal data is processed
- To request information if it has been processed
- To learn the purpose of processing and whether the data is used in line with that purpose
- To know the third parties in Türkiye or abroad to whom the data is transferred
- To request correction if the data is incomplete or incorrect
- To request erasure or destruction within the conditions of Article 7 of the Law
- To request that correction, erasure or destruction be notified to the third parties the data was transferred to
- To object to a result against you arising from analysis of the data solely by automated systems
- To claim compensation if you suffer damage due to unlawful processing
No decision producing an adverse result for you is made on this site through analysis by automated systems alone.
How to apply
You can submit a request regarding your rights in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, in the following ways:
- In writing: a signed letter sent to Bayındır Mah. 322. Sk. No:24/1, 07030 Muratpaşa/Antalya (in person or through a notary).
- By e-mail: from the e-mail address you have previously notified to us and which is registered in our records, to info@devkadogalgaz.com.
Your application must clearly state your name and surname, your Turkish ID number (or, for foreign nationals, your nationality and passport number), your address for notification, your e-mail address and phone number if any, and the subject of your request. You may also attach supporting documents.
We conclude applications free of charge as soon as possible and within thirty days at the latest, depending on their nature. If the process incurs an additional cost, a fee from the tariff set by the Personal Data Protection Board may be charged.
If your application is rejected, you find our reply insufficient or you receive no reply in time, you may file a complaint with the Personal Data Protection Board within thirty days of learning the reply and in any case within sixty days of the application date.
Effective date and updates
This notice took effect on 7 September 2026.
If the way the site works or the legislation changes, we update this notice and always publish the current version on this page. The effective date above is renewed with every change, so you can tell which version you are reading from that date.