Version 1.0Last updated:
1. Controller
The controller responsible for processing your personal data is MST Çağrı Merkezi E-Ticaret Dijital Pazarlama Limited Şirketi (“MST Global”, “we”).
- Address
- 80. Yıl Bulvarı No: 45/1B, Huzurevleri Mahallesi, Çukurova / Adana, Türkiye
- [email protected]
- Phone
- +90 505 741 76 01
2. Representative in the Union
For the processing described here we have not designated a representative in the Union under Article 27 GDPR. We process data of people in the EU only occasionally — when you visit our website or contact us — not on a large scale and without special categories of personal data, and this processing is unlikely to result in a risk to your rights and freedoms (Article 27(2)(a) GDPR).
3. Visiting the website
When you open our website, our server and our infrastructure provider process technical connection data: IP address, date and time, the page requested, the referring page, and browser and operating-system details.
We do this to deliver the website, keep it secure and fend off misuse and attacks. The legal basis is our legitimate interest in a secure, working website (Article 6(1)(f) GDPR). Server logs are deleted after about ten days.
4. Delivery and protection by Cloudflare
The website is delivered through the network of Cloudflare, Inc. (USA), which also protects it against attacks and automated abuse. Cloudflare processes the connection data listed in section 3 on our behalf. The legal basis is Article 6(1)(f) GDPR; for the transfer to the USA see section 9.
6. Contact and quote requests
When you contact us through the form, by email, by phone or on WhatsApp, we process the details you give us — such as your name, company, email address, phone number, the services and languages you are interested in, and your message — to answer your request and, where relevant, to prepare a quote.
The legal basis is Article 6(1)(b) GDPR where your request is aimed at a contract, and otherwise our legitimate interest in answering enquiries (Article 6(1)(f) GDPR). Form submissions are not stored in a database on the website; they are sent by email to our mailbox [email protected].
If you write to us on WhatsApp, WhatsApp (Meta) also processes your data under its own terms. Please send us confidential information by email.
7. Job applications
We process applications sent through our form or to [email protected] — your name, contact details, languages, CV and message — to decide on your application (Article 6(1)(b) GDPR). Please do not include special categories of personal data, such as information about your health, religion or political opinions.
We delete applications six months after the selection process ends. With your explicit consent we keep them for one year for future openings (Article 6(1)(a) GDPR); you can withdraw this consent at any time with effect for the future (Article 7(3) GDPR).
8. Recipients
- netcup GmbH, Germany — website hosting; the servers are in a data centre in the European Union,
- Cloudflare, Inc., USA — delivery and protection of the website,
- TurkTicaret.net, Türkiye — our business email mailboxes,
- authorities and courts, where we are required by law.
These providers process data on our behalf. We do not sell your data or pass it on for advertising.
9. Transfers to third countries
Our company is based in Türkiye, for which there is no adequacy decision of the European Commission. When you send us an enquiry or an application, we process your data in Türkiye. Where this is a transfer within the meaning of Articles 44 et seq. GDPR, it is necessary for pre-contractual measures taken at your request (Article 49(1)(b) GDPR).
Cloudflare, Inc. is based in the USA. Transfers there rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (Article 45 GDPR) insofar as the recipient is certified under it, and otherwise on standard contractual clauses (Article 46(2)(c) GDPR).
10. Retention
| Data | Kept for |
|---|---|
| Server logs | about 10 days |
| Contact and quote requests | 2 years after the request is closed; longer where the law requires it (for example once a contract is concluded) |
| Job applications | 6 months after the selection process ends; 1 year with your consent |
| Cloudflare cookies | see section 5 |
11. Your rights
Under the GDPR you have the right to:
- access the data we hold about you (Article 15),
- have inaccurate data corrected (Article 16),
- erasure (Article 17) and restriction of processing (Article 18),
- data portability (Article 20),
- withdraw a consent you have given, with effect for the future (Article 7(3)).
Right to object (Article 21 GDPR): where we process data on the basis of legitimate interests (Article 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation.
Right to lodge a complaint (Article 77 GDPR): you can complain to a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
To exercise your rights, write to [email protected] or to our postal address.
12. Providing data and automated decisions
You are under no legal or contractual obligation to give us your data, but without contact details we cannot answer your request. We make no automated decisions, including profiling (Article 22 GDPR).
13. Links and social networks
Our website links to our profiles on Instagram, LinkedIn, Facebook, X and YouTube, and to WhatsApp and Google Maps. No content or plugins from these services are embedded; data flows only when you follow a link, and the provider's own privacy terms then apply.
14. Turkish data protection law
As a company in Türkiye we also process personal data under the Turkish Personal Data Protection Law No. 6698 (KVKK). The information required by Turkish law is in our KVKK Aydınlatma Metni (in Turkish).
15. Changes
When our processing changes, we update this notice and publish the new version on this page.