Privacy notice (KVKK Article 10)
Last updated: 15 November 2026
1. Data controller
This notice is given by PBC Teknoloji Sanayi ve Ticaret A.Ş. (“PBC Technology”), as data controller, under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). It covers personal data collected through www.pbc-tech.com.
Address: Sanayi Mahallesi, Teknopark Bulvarı, Teknopark İstanbul 2A No: 402, Pendik / İstanbul. Email: info@pbc-tech.com.
2. Personal data processed, purposes and legal grounds
- Contact and assessment request form. Full name, organization, job title, email address, phone number and the content of your message. Purpose: to assess your request, reply to you and prepare an offer where one is requested. Legal ground: processing is necessary for the establishment of a contract (KVKK Art. 5/2-c) and for the legitimate interests of the data controller in answering business enquiries (Art. 5/2-f).
- Newsletter form. Email address. Purpose: to send the company newsletter. Legal ground: your explicit consent (Art. 5/1), which you can withdraw at any time.
- Website analytics. Online identifiers, approximate location derived from the IP address, device and browser information and the pages viewed. Purpose: to measure how the website is used. Legal ground: your explicit consent given in the cookie banner (Art. 5/1). Nothing is collected for this purpose unless you switch analytics on. See the Cookie policy.
- Technical data. IP address and request records are processed by the hosting provider to deliver the website and keep it secure. Legal ground: legitimate interests of the data controller (Art. 5/2-f).
Job applications are covered separately in section 3.
3. Job applicants
When you apply through the careers page, PBC Technology processes your full name, email address, phone number, the position applied for, your LinkedIn profile address if you give it, your CV and your cover letter. Purpose: to assess your application and contact you about it. Legal ground: processing is necessary for the establishment of an employment contract (Art. 5/2-c) and for the legitimate interests of the data controller in recruitment (Art. 5/2-f).
Please do not include special categories of personal data in your CV or cover letter (for example health data, religion, political opinions, trade-union membership or criminal convictions). Such data is not needed for the assessment.
Applications that do not lead to employment are deleted at the end of the retention period in section 6. If PBC Technology wishes to keep your application for future vacancies, it will ask for your explicit consent separately.
4. Method of collection
Personal data is collected electronically, by partly automated means: through the forms you fill in on the website and, if you consent, through analytics cookies. Form submissions are delivered to the company mailbox by email.
5. Recipients and transfers
- Microsoft. The website is hosted on Microsoft Azure and form submissions are delivered through Microsoft Azure and Microsoft 365. Microsoft acts as a service provider (data processor). Its servers used for this purpose are located outside Türkiye, in the European Union.
- Google. If you accept analytics, usage data is sent to Google (Google Analytics). If you choose to display the map on the contact page, your IP address is sent to Google (Google Maps). Google’s servers are located outside Türkiye.
- Authorized public bodies. Where the law requires it, data may be shared with authorized public institutions.
Personal data is not sold and is not shared with third parties for their own marketing.
6. Retention
Personal data is kept only for as long as the purpose requires and is then deleted, destroyed or anonymized.
Enquiries sent through the contact form are kept for two years from the last correspondence. Job applications that do not lead to employment are kept for six months from the date of application. Newsletter email addresses are kept until you unsubscribe. Where the law requires a longer period, the statutory period applies.
7. Your rights
Under Article 11 of the KVKK you have the right to:
- learn whether your personal data is processed;
- request information about the processing;
- learn the purpose of the processing and whether the data is used for that purpose;
- know the third parties, in Türkiye or abroad, to whom the data is transferred;
- request correction of incomplete or inaccurate data;
- request erasure or destruction of the data under the conditions in Article 7;
- request that corrections, erasure or destruction be notified to third parties to whom the data was transferred;
- object to a result against you that arises from analysis solely by automated systems;
- claim compensation for damage caused by unlawful processing.
8. How to make a request
You can send your request to PBC Technology in writing to the address above, by registered electronic mail (KEP), with a secure electronic or mobile signature, or from the email address you previously gave to PBC Technology and that is on record, to info@pbc-tech.com. Under the applicable communiqué, requests must be made in Turkish and must include your name, signature where applicable, Turkish ID number (or nationality and passport number for foreign nationals), address, contact details and the subject of the request.
Requests are answered free of charge within thirty days at the latest. If answering involves an additional cost, the fee set by the Personal Data Protection Board may be charged. If your request is rejected, you find the answer insufficient or you receive no answer in time, you may lodge a complaint with the Personal Data Protection Board.