Who we are
This website is operated by Odeon Teknoloji Limited Şirketi (“Odeontech”), headquartered at Kolektif House, Barbaros Mah. Begonya Sok. No: 1/2, 34746 Ataşehir / İstanbul, Türkiye. For the personal data described here, Odeontech is the data controller.
Contact: info@odeontech.com, +90 216 599 19 09, or by post to the address above.
Odeontech is established in Türkiye, so the Turkish Personal Data Protection Law No. 6698 (KVKK) applies to data processed through this site wherever you live. The Turkish-law details are in our KVKK notice. The EU GDPR and the UK GDPR apply as well, to the extent they cover our activities.
What we process, why and for how long
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form and the form on the Engagement Models page | First and last name, email, company, phone, topic, message, attachments, and the page and language of the form. The form on the Engagement Models page also sends your answers and the model it recommended | Answering your enquiry and preparing a proposal if you ask for one | Legitimate interest in answering business enquiries (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). If you are asking for a contract for yourself: steps before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) | 2 years after our last contact if no contract follows |
| Lite form | First and last name, email, phone, company, stage, package, budget, link, message, attachments, and the page and language of the form | Answering your enquiry and preparing a proposal if you ask for one | Legitimate interest in answering business enquiries (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). If you are asking for a contract for yourself: steps before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) | 2 years after our last contact if no contract follows |
| Email, phone and WhatsApp | First and last name, email address or phone number, your message and attachments, and what you tell us on the phone | Answering your enquiry and preparing a proposal if you ask for one | Legitimate interest in answering business enquiries (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). If you are asking for a contract for yourself: steps before a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) | 2 years after our last contact if no contract follows |
| Commercial records | Correspondence that becomes a commercial record | Keeping the records the law requires | Legal obligation under the Turkish Commercial Code, Art. 82 (KVKK Art. 5(2)(ç)); our legitimate interest in keeping the records Turkish law requires of us (GDPR Art. 6(1)(f)) | 10 years |
| Job applications | See the job applicant notice | — | — | — |
| Visiting the site | IP address, browser details, the page requested, date and time | Running the site and protecting it | Legitimate interest in a working, secure site (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) | Cloudflare keeps these records as long as it needs them to run and protect its service, and states no fixed period: see its privacy policy. We do not export or store them ourselves |
| Legal claims | The records relevant to the dispute | Establishing, exercising or defending a legal claim | GDPR Art. 6(1)(f); KVKK Art. 5(2)(e) | Until the limitation period ends |
The forms show which fields are required. Without them we cannot reply to you. Everything else you share is your choice.
Please keep special categories of data, such as health, religion or political views, and other people’s details out of messages and attachments. We do not need them.
We do not run analytics on this site. What the site stores in your browser is in the Cookie Policy.
How we collect it
Directly from you, through the forms on this site, by email, by phone and on WhatsApp; and automatically, in electronic form, as server logs, when you visit the site. Messages sometimes name other people, such as colleagues. We use those details only to answer your enquiry.
Who receives it
| Recipient | What it does | Role | Country |
|---|---|---|---|
| Cloudflare, Inc. | Hosts this site, runs its forms and protects it from attacks. Your visit passes through its network, and it keeps the technical records | Processor | USA; the site is served from its data centres around the world |
| Plus Five Five, Inc. (Resend) | Delivers what you send through the forms to our mailbox. It keeps the message and the delivery record for up to 30 days | Processor | USA |
| Zoho Corporation B.V. and its group companies | Business email: messages and applications are stored here | Processor; controller of spam-filtering and fraud-prevention data | Netherlands (contract), USA (data centre), India (sub-processor) |
| WhatsApp (Meta) | Only if you write to us there. WhatsApp’s own terms and privacy notice apply | Independent controller | Outside Türkiye |
| Lawyers, advisers, courts and public authorities | Only where the law requires it or a legal claim needs it | Controller | Türkiye |
| Cloudflare Turnstile | Tells people from bots on the forms | Processor; controller for improving its detection | USA |
We do not sell personal data.
Transfers abroad
We are based in Türkiye, so what you send us is processed there. Cloudflare and Resend are in the USA, and Cloudflare serves the site from data centres around the world, usually the one closest to you. Zoho keeps our email in its US data centre and uses its group company in India as a sub-processor. Your data is therefore also transferred to the USA and India, and your visit may pass through other countries. Türkiye and India have no EU or UK adequacy decision.
Where the GDPR or UK GDPR applies, transfers to these providers rest on the following. Cloudflare, Inc. is listed under the EU-US Data Privacy Framework and its UK Extension (checked on 4 November 2026), so transfers to it rely on the European Commission’s adequacy decision and the UK regulations for that Framework. Its data processing addendum also contains the EU standard contractual clauses and the UK Addendum.
Transfers to Resend rely on the EU standard contractual clauses and the UK transfer clauses in its data processing addendum.
Zoho is not listed under that Framework. You can ask us about the safeguards for these transfers at info@odeontech.com.
For transfers under Turkish law, see the KVKK notice.
Your rights in the EEA and the UK
| Right | What it means |
|---|---|
| Access | You can ask what we hold about you and for a copy. |
| Correction | You can ask us to correct inaccurate data. |
| Erasure | You can ask us to delete your data. This does not apply where we must keep it or need it for a legal claim. |
| Restriction | You can ask us to pause the use of your data in certain cases. |
| Portability | For data you gave us that we process by automated means on the basis of consent or a contract, you can ask for a portable copy. |
| Withdrawing consent | Where we rely on consent, you can withdraw it at any time. This does not affect what we did before you withdrew. |
Your right to object. You can object at any time, on grounds relating to your situation, to processing based on legitimate interests. We then stop, unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or we need the data for a legal claim. You can object to direct marketing at any time without giving a reason. Write to info@odeontech.com.
To use a right, write to info@odeontech.com. Requests are free. We answer without undue delay and within one month; for complex requests we can extend this by two months and will tell you why. If we have reasonable doubts about who you are, we may ask you to confirm your identity.
You can complain to the data protection authority where you live, where you work or where the issue occurred (list of EEA authorities). If the UK GDPR applies to your data, you can complain to us by email at info@odeontech.com or by post to the address under “Who we are”: we acknowledge within 30 days and tell you the outcome without undue delay. You can also complain to the UK Information Commission (ICO).
Your rights under KVKK
KVKK Art. 11 gives you the right to:
- learn whether your personal data is processed
- ask for information if it has been processed
- learn the purpose of processing and whether it is used accordingly
- know the third parties it is transferred to, in Türkiye or abroad
- ask for correction if it is incomplete or inaccurate
- ask for deletion or destruction under KVKK Art. 7
- ask that these actions be notified to the third parties the data was transferred to
- object to a result against you that arises solely from automated analysis
- claim compensation for damage caused by unlawful processing
How to apply and to complain is explained in the KVKK notice.
Security
We use encryption in transit and apply security measures that reference ISO 27001 controls. No method is completely secure.
Work for clients
When we process personal data on behalf of clients, roles and terms are set in the contract for each engagement. This policy does not cover that processing.
Changes
We update this page when our processing changes, with a new date at the top. Before we use your data for a new purpose, we tell you.