SC DEFENCE
Website Visitor Privacy Notice
Learn about your website visit, contact enquiries and rights concerning your personal data.
1. Data controller and purpose of this notice
1.1. This Privacy Notice has been prepared by SC Savunma Sanayi ve Ticaret Anonim Şirketi (the Company) to inform visitors to scdefence.com under Article 10 of Turkish Personal Data Protection Law No. 6698 (the Law). The Company's English trading name is SC Defence Industry and Trade JSC.
1.2. The data controller's address is Etiler Mh. 829 Sk. A Plaza No:3/601, 07010 Muratpaşa / Antalya, Türkiye. The email address for contact and personal data applications is info@scdefence.com; the telephone number is +90 242 324 41 01.
1.3. This notice is limited to browsing the website, managing browser preferences and general communications initiated voluntarily through the website. It is not a company-wide privacy notice covering all employee, applicant, supplier, contractual or classified-project processes.
2. Personal data categories and collection methods
2.1. You do not need to create an account, provide identity documents or submit contact details to view the website. However, when web pages are served, your IP address and HTTP request information reach the hosting infrastructure.
2.2. Technical access data is processed automatically and includes your IP address, access time, requested page or resource, HTTP response information, browser/client information and referring page information to the extent sent by your browser. The Company limits this processing to serving pages, troubleshooting and security; it does not use routine records to create advertising profiles.
2.3. Browser preferences include your selected language and the dismissal time, expiry time and version of the privacy notice record stored in your browser. These records contain no unique visitor identifier or browsing history. Detailed names and retention periods are explained in the Cookie and Similar Technologies Policy, document SC-KVKK-WEB-02.
2.4. If you choose to submit the contact form, your name, email address, country, subject and message, together with company and telephone details if supplied, are processed to receive and answer your enquiry. These details are not a condition of browsing the website.
3. Processing purposes and legal grounds
3.1. Technical access data is processed to serve web pages, resolve routine technical errors and protect website security on the legal ground in Article 5(2)(f) of the Law: processing must be necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
3.2. Limited preference records are processed to apply your requested language and prevent the same dismissed notice from reappearing in the same browser. To the extent that they constitute personal data, Article 5(2)(f) of the Law applies. These records are not used for advertising, marketing or cross-site tracking.
3.3. Assessing and answering general questions and meeting requests submitted through the website relies on Article 5(2)(f) of the Law. If an enquiry directly concerns entering into or performing a contract, Article 5(2)(c) applies only to the information necessary for that purpose.
3.4. This version does not process consent-based cookies for analytics or advertising. If such processing is introduced, the activity, purposes, providers, recipients and retention periods will be disclosed in advance. Processing requiring explicit consent under Article 5(1) will not begin before your separate, active choice. Reading this notice or using the website does not constitute explicit consent.
4. How optional contact works
4.1. The 'Send a Message' action sends the form fields over HTTPS to the Company's hosting service. The server forwards the enquiry to info@scdefence.com using the existing GoDaddy email service. The website does not save these fields in persistent browser storage. Technical request information is also processed for delivery and security.
4.2. A success notice appears only after the mail server accepts the message for sending. It does not guarantee inbox placement. If sending cannot be confirmed, the form retains your entries so you can try again or contact info@scdefence.com. Repeated submissions may require Google reCAPTCHA verification; the verification service loads only when that check is required. Messages are handled in connection with your enquiry, not as marketing consent.
4.3. Do not include special categories of personal data, identity documents, classified project information or unrelated information about third parties in general contact fields. Contacting the Company is not treated as permission to send advertising or commercial electronic messages.
5. Retention and deletion
5.1. The periods below apply to website records under the Company's control. Retention is limited to the purpose of the data; hosting subscription or domain renewal dates do not determine these periods.
5.2. The notice record remains valid for 180 days after dismissal. As localStorage does not delete itself automatically, an expired record is removed the next time the website code runs. If you do not revisit the website, the physical record may remain in your browser. The language record is limited to the tab session; browser session restoration may preserve it.
5.3. For general enquiries, the six-calendar-month period starts when the enquiry is concluded. Enquiries awaiting a reply with no further action are treated as closed 30 days after the last correspondence. If correspondence becomes a record that must be retained for a quotation, contract, commercial transaction, legal obligation or the establishment, exercise or protection of a right, only the necessary data is subject to the justified retention period for that process. The general contact period does not apply indiscriminately to all company business correspondence and is not automatically extended for unrelated correspondence.
5.4. Personal data for which processing conditions no longer exist is erased, destroyed or anonymised. Company backups containing personal data use a cycle of no more than 30 days; after source data is deleted, its backup copy leaves the cycle within at most 30 days. Previous deletion decisions are reapplied after restoration. Any specific statutory retention or rights-protection requirement is recorded separately with its justification and duration.
| Record | Starting point and period |
|---|---|
| Notice dismissal record | Valid for 180 days after dismissal; physical deletion is explained in section 5.2. |
| Language preference | Tab session, subject to the session-restoration exception. |
| Routine access and error records | 30 days from creation. |
| Record reserved for a specific security incident | 90 days after the incident is closed. |
| General contact initiated through the website | 6 calendar months after the enquiry is concluded. |
| Company backup containing personal data | 30-day cycle; at most 30 days after source deletion. |
6. Recipients and international transfers
6.1. The website uses GoDaddy hosting services. Technical access data may be processed by the hosting/infrastructure provider and authorised subcontractors required for the service to deliver pages and secure the infrastructure. The Company's email service at info@scdefence.com uses Titan infrastructure. General contact data you send may be processed by Company personnel responsible for handling your enquiry and, to the extent necessary to receive, store, secure and transmit email, by the email provider and its authorised subcontractors.
6.2. Browser language and notice records are not transmitted by the website application to analytics/advertising providers or the Company's local file archive. Transfers to authorised public bodies are limited to the scope of a legally valid request and the requirements of applicable legislation.
6.3. Where hosting abroad, support access from abroad or email processing abroad is involved, processing does not begin until the transfer conditions in Article 9 of the Law are met. The service country, relevant provider and transfer mechanism are entered in this notice's service information before visitor data processing begins. Cookie choices or reading this notice do not provide general permission for international transfers.
6.4. External links, such as maps, open the relevant third-party website when you click them. This version does not use automatically loaded third-party map embeds. Processing on the external website is subject to the relevant provider's notice.
7. Cookie choices and explicit consent
7.1. Selecting 'Necessary only' does not activate any optional service requiring consent. It does not mean that explicit consent has been obtained for necessary processing; such processing remains limited to its applicable legal grounds.
7.2. 'Accept all cookies' can apply only to consent-based categories actually in use and disclosed in advance. As this version has no such categories, the option is disabled; advance consent is not collected for processing that does not exist or may be introduced later.
7.3. If an optional service is added in the future, 'Accept all cookies' will authorise only the consent-based purposes disclosed in the panel at that time. It does not mean accepting every provision of the Law, approving this privacy notice, waiving rights, consenting to marketing emails or authorising unlimited data processing. Withdrawal of consent stops subsequent consent-based processing; it does not retrospectively alter lawful processing before withdrawal.
8. Your rights and how to apply
8.1. Under Article 11 of the Law, you have the right to learn whether your data has been processed; request information if it has; learn the processing purpose and whether data is used in accordance with that purpose; and know the recipients in Türkiye and abroad.
8.2. You may request correction of incomplete or inaccurate data, erasure or destruction under the conditions in Article 7 of the Law, and notification of these actions to recipients. You may object to a result against you arising solely from automated analysis and request compensation for damage caused by unlawful processing.
8.3. You may apply in writing to the address in section 1.2 or by the methods in the Communiqué on the Principles and Procedures for Applications to the Data Controller. Email applications are sent to info@scdefence.com; under the Communiqué, you must apply from an email address previously supplied to the Company and registered in its system. Your right to apply by the other methods in the Communiqué is reserved.
8.4. Applications must include your name and surname; signature if in writing; national identity number for Turkish citizens; nationality and passport number, or identity number if available, for foreign nationals; address for service of notices; contact information for notifications if available; and the subject of your request. These details are requested only to assess an application, not for ordinary website browsing.
8.5. Requests are concluded as soon as possible and no later than 30 days. If processing entails an additional cost, the fee provisions of the Communiqué may apply. Your right to complain to the Personal Data Protection Board under Article 14 of the Law is reserved.
9. Access and effective date
9.1. This notice is always accessible through the website footer's Privacy Policy link and the cookie panel. Access does not depend on accepting cookies or completing a form. PDF downloads will be enabled after the Company's document approval and publication authorisation; until then, the text can be read on this page.
9.2. This document takes effect when approved by the Company and published on the website. If processing conditions change, the notice is updated and a new version is published. Changing the notice does not replace any required explicit consent.
