Privacy Notice
This notice explains how personal data is handled when you use the Rootcastle Engineering & Innovation website, send a project inquiry or subscribe to technical updates. It is not a request for marketing consent.
Controller and contact
The data controller is Rootcastle Engineering & Innovation, proprietor Batuhan Ayrıbaş. Registered business and notification address: İnönü Mahallesi, 1788 Sokak, Onlar 2. Kısım, No: 2/69, Yenimahalle, Ankara, Türkiye. Tax office: OSTİM Vergi Dairesi. Send privacy requests to admin@rootcastle.com.
Data and purposes
The project form collects your name, email, inquiry type and technical description, plus optional organizational and project context. We use it to assess and answer the inquiry. Newsletter email addresses follow a separate double-confirmation flow.
Collection and legal basis
Information comes from forms you submit and necessary security logs. Newsletter signup uses a separate double-confirmation flow; optional analytics begins only after your cookie choice. The specific condition under Article 5 of Türkiye’s Personal Data Protection Law (KVKK) for each processing activity is still being verified; this notice does not assert an unverified legal basis.
Recipients and international transfers
Hosting and email providers may process information to deliver the website service. Cloudflare Turnstile protects the contact form; Google Analytics is used only with permission. Internal KVKK records also identify Google Maps / Google Maps API, AWS and/or Microsoft Azure as potential service providers, and competent public authorities as potential recipients where disclosure is legally required. This does not mean every listed provider is used for every website activity. The records refer generally to KVKK Articles 8 and 9, but no specific approved international-transfer mechanism or safeguard for Google, AWS or Azure has yet been verified and documented.
Retention periods
According to Rootcastle’s internal records, operational personal data, including location history, diagnostics and alerts, is actively retained for 90 days; invoice and accounting information for 10 years; employment contracts and related employment records for 10 years; transaction records for 5 years; and security and audit logs for 2 years. An applicable statutory retention period prevails over the general period. After the relevant period, personal data is deleted or anonymised.
Your rights
Send requests for information, access, correction, erasure and other applicable rights under KVKK Article 11 to admin@rootcastle.com. We may need to verify your identity using an appropriate method.