Privacy Policy and Data Protection Notice

01Data controller

Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the data controller is the company whose details are given below (“Milenium Technology”, “we”).

Company name: Milenium Teknoloji Ticaret Limited Şirketi
Address: [REGISTERED ADDRESS]
MERSİS No: 0751092038600001
E-mail: [PRIVACY E-MAIL ADDRESS]
KEP: mileniumteknolojiticaret@hs01.kep.tr

This notice covers everyone who visits the website at https://www.mileniumtechnology.com (the “Site”) and fills in its forms.

02Personal data we process

Identity: first name, last name.
Contact: phone number, e-mail address.
Request details: request type, the solution you are interested in, and anything you share in your message (e.g. your store).
Transaction security: IP address, browser and device information, date and time of visit.
Usage data: only if you accept cookies — pages visited, clicks, approximate location and device information.

03Why we process it

To reply to contact form messages and dealer applications, and to assess applications.
To answer product, technical support and quotation requests.
To hold the discussions needed to set up a dealer relationship.
To keep the Site secure, prevent misuse and meet our legal obligations.
With your consent, to measure how the Site is used, improve it and measure advertising performance.

04How it is collected and legal grounds

Your personal data is collected electronically, partly by automated means, through the Site’s forms and cookies, and is processed on the following legal grounds under Article 5 of KVKK:

Entering into a contract (Art. 5/2-c): dealer applications and quotation requests.
Legal obligation (Art. 5/2-ç): record-keeping and disclosure duties under the law.
Legitimate interest (Art. 5/2-f): replying to your requests and keeping the Site secure.
Explicit consent (Art. 5/1): analytics and marketing cookies, and transfers abroad that take place through them.

05Sharing of personal data

We never sell your personal data. We may share it, only as far as the purposes above require, with:

Our service providers, such as hosting, e-mail and form infrastructure.
With your consent, analytics and ad measurement providers (Google, Meta, Microsoft).
Authorised public bodies, when they request it.

Some of our providers’ servers may be located outside Türkiye. In that case the transfer relies on the safeguards set out in Article 9 of KVKK or on your explicit consent.

06Retention

We keep personal data for as long as its purpose requires and for the limitation periods set by law. Contact and application records are kept for at most 2 years after the request is closed. When that period ends, the data is erased, destroyed or anonymised. Cookie lifetimes are listed in the Cookie Policy.

07Your rights under KVKK

Under Article 11 of KVKK you have the right to:

Learn whether your personal data is processed.
Request information about it if it is.
Learn the purpose of processing and whether the data is used accordingly.
Know the third parties in Türkiye or abroad to whom it is transferred.
Ask for it to be corrected if it is incomplete or inaccurate.
Ask for it to be erased or destroyed under the conditions of Article 7 of KVKK.
Ask for corrections, erasures and destructions to be notified to third parties the data was transferred to.
Object to an outcome against you that arises solely from automated analysis of the data.
Claim compensation if you suffer damage because of unlawful processing.

08How to apply

You can send requests about your rights, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller and with information that verifies your identity, in any of these ways:

In writing: [REGISTERED ADDRESS]
By KEP (registered e-mail): mileniumteknolojiticaret@hs01.kep.tr
By e-mail: [PRIVACY E-MAIL ADDRESS]

E-mail requests must come from an address you have previously given us and that is registered in our systems. Your request will be answered free of charge within 30 days at the latest; if it involves an additional cost, the fee schedule set by the Personal Data Protection Board may apply.

09Data security

We take appropriate technical and organisational measures — such as encrypted connections (HTTPS), access control and confidentiality obligations with our providers — to protect your personal data against unauthorised access, loss and misuse.

10Changes

We may update this notice as the law or the Site changes. The current version is always published on this page; the date of the last update is shown at the top.