Privacy Policy

Last updated: October , 2026

This Privacy Policy explains how Sibel Avcı Sehlikoğlu, trading as SS Process Systems Consultancy (“we”, “us”, “our”), collects, uses, shares and protects personal data when you visit www.ssprocsys.com (the “Website”) or contact us about our services. We process personal data in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the EU/UK General Data Protection Regulation (“GDPR”).

1. Data Controller

Sibel Avcı Sehlikoğlu, trading as SS Process Systems Consultancy
Address: Cevizli Mah. Zühal Cad. A Ticari Blok Apt. No:46/50 Maltepe İstanbul, Türkiye
Email: info@ssprocsys.com
Phone: +90 542 387 33 60

2. Personal Data We Collect

Data you provide to us

  • Identity and contact data: name, surname, job title, company name, email address, phone number.

  • Business enquiry data: the content of your messages, project requirements and any information you share when requesting a consultation or proposal.

  • Contract and invoicing data: where we enter into an engagement, billing details and contract information.

Data collected automatically

  • Technical data: IP address, browser type and version, device type, operating system, referring page, pages viewed and access times.

  • Cookie and similar technology data (see Section 8).

We do not intentionally collect special categories of personal data (such as health, religion or biometric data) through the Website, and we ask that you do not send them to us.

3. Purposes and Legal Bases

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

4. How We Collect Your Data

We collect data through website contact forms, email, phone, video calls, professional networks such as LinkedIn, and contract and invoicing processes, by automated and non-automated means.

5. Sharing of Personal Data

We do not sell your personal data. We may share it only as needed with:

  • Service providers (processors), such as our website hosting and domain provider (Squarespace), email and productivity tools, video-conferencing tools, accounting and invoicing providers, and analytics providers, who process data on our instructions;

  • Professional advisers, such as accountants, legal counsel and insurers;

  • Public authorities where required by law or to protect our legal rights;

  • Business partners and software vendors (for example Atlassian or Atlassian Marketplace vendors) only where you have asked us to involve them in an engagement and only to the extent necessary.

6. International Data Transfers

Some of our service providers are located outside Türkiye and the European Economic Area, including in the United States. Where we transfer personal data abroad, we do so in compliance with KVKK Article 9 and, where applicable, GDPR Chapter V, relying on appropriate safeguards such as adequacy decisions, standard contractual clauses, the provider’s certification under an approved framework, or your explicit consent where required.

7. Retention

We keep personal data only as long as necessary for the purposes above:

  • Enquiries that do not lead to an engagement: up to [24] months after the last contact.

  • Contract, invoicing and accounting records: for the periods required by Turkish tax and commercial law (generally up to 10 years).

  • Marketing data: until you withdraw consent or unsubscribe.

  • Website technical data: as described in the relevant provider or cookie settings.

When these periods expire, data is deleted, destroyed or anonymised.

8. Cookies and Analytics

The Website is hosted on Squarespace, which uses cookies and similar technologies that are necessary for the site to function and to keep it secure. Non-essential cookies are used only with your consent where the law requires it. You can manage or delete cookies through the cookie banner (if shown) and your browser settings.

9. Your Rights

Under KVKK Article 11 and, where applicable, the GDPR, you have the right to:

  • learn whether your personal data is being processed and request information about it;

  • learn the purposes of processing and whether data is used accordingly;

  • know the third parties, in Türkiye or abroad, to whom data is transferred;

  • request correction of incomplete or inaccurate data;

  • request deletion, destruction or anonymisation of your data;

  • request that such actions be notified to third parties to whom the data was transferred;

  • restrict or object to processing, and object to a decision based solely on automated processing that affects you;

  • receive your data in a structured, commonly used format (data portability, where GDPR applies);

  • withdraw consent at any time;

  • claim compensation for damages arising from unlawful processing.

10. How to Exercise Your Rights

Send your request to privacy@ssprocsys.com or to the postal address in Section 1, including enough information for us to verify your identity. We respond within 30 days at the latest. The response is free of charge, but a fee based on the tariff set by the Personal Data Protection Board may be charged if the request requires additional cost.

11. Right to Lodge a Complaint

If you believe your data has been processed unlawfully, you may complain to the Turkish Personal Data Protection Authority (KVKK, www.kvkk.gov.tr) or, if you are in the EU/EEA or UK, to your local data protection supervisory authority.

12. Data Security

We apply appropriate technical and organisational measures, such as access control, encryption in transit and the use of reputable service providers. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

13. Children

The Website and our services are intended for businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, please contact us and we will delete it.

14. Third-Party Links

The Website may link to third-party sites (for example LinkedIn). We are not responsible for their privacy practices; please read their policies.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with the “Last updated” date.

16. Contact

Sibel Avcı Sehlikoğlu, SS Process Systems Consultancy
Email: sibel.avci@ssprocsys.com
Phone: +90 542 387 33 60

Purpose Legal basis (GDPR / KVKK)
Responding to your enquiries and requests Legitimate interests / Steps prior to entering a contract (GDPR Art. 6(1)(b),(f); KVKK Art. 5(2)(c),(f))
Preparing proposals, delivering consulting services, contract management and invoicing Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c))
Complying with legal, tax and accounting obligations Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(a),(ç))
Operating, securing and improving the Website; analytics Legitimate interests, or consent where cookies require it (GDPR Art. 6(1)(f),(a); KVKK Art. 5(2)(f))
Sending newsletters or marketing communications (if applicable) Consent (GDPR Art. 6(1)(a); KVKK Art. 5(1))
Establishing, exercising or defending legal claims Legitimate interests / Legal claims (GDPR Art. 6(1)(f); KVKK Art. 5(2)(e))

Türkçe KVKK Aydınlatma metni

KVKK Aydınlatma Metni