Privacy Policy

1. Data Controller

This notice explains how personal data relating to visitors, prospective clients and other persons contacting Urla MEP through this website is processed.

The data controller is Nexus Infra Mühendislik ve Danışmanlık Limited Şirketi. Urla MEP is the customer-facing engineering brand operated by the company.

Legal company name: Nexus Infra Mühendislik ve Danışmanlık Limited Şirketi

2. Scope

This notice applies to personal data processed through the Urla MEP website, contact forms, email enquiries and website-related communications.

Separate privacy information may apply where Urla MEP enters into a proposal, consultancy appointment, employment process, supplier relationship or other contractual arrangement.

3. Personal Data We May Process

• Identity information, such as name and surname

• Contact information, such as business email address and telephone number

• Professional information, such as company, position and business sector

• Enquiry information, including project descriptions, messages and requested services

• Files and documents voluntarily submitted with an enquiry

• Communication records, including subsequent email correspondence

• Website and technical information, such as IP address, browser, device, access time and security logs

• Cookie and analytics information, where applicable and permitted

Please do not submit sensitive personal data, identity documents, confidential third-party information or protected project information through the general contact form unless specifically requested and an appropriate secure channel has been agreed.

4. Purposes of Processing

Personal data may be processed for the following purposes:

• Responding to enquiries and requests

• Evaluating potential projects and business relationships

• Preparing proposals and defining the requested scope of services

• Communicating with prospective clients, partners, suppliers and project stakeholders

• Managing appointments, meetings and correspondence

• Operating, securing and improving the website

• Preventing fraud, misuse and cybersecurity incidents

• Maintaining business and legal records

• Establishing, exercising or defending legal claims

• Complying with legal and regulatory obligations

• Measuring website use where analytics have been enabled and the required permissions have been obtained

5. Collection Methods and Legal Grounds

Personal data may be collected directly from you through website forms, email, telephone, meetings and documents you choose to provide. Technical data may also be collected automatically when you access the website.

Depending on the processing activity, personal data may be processed on the basis of applicable legal obligations, the establishment or performance of a contract, the establishment, exercise or protection of a right, the legitimate interests of the data controller where these do not override the fundamental rights and freedoms of the data subject, or explicit consent where legally required.

6. Recipients and Service Providers

• Personal data may be shared, where necessary and proportionate, with:

• Hosting, website and cloud-service providers

• Business email and collaboration providers

• IT support and cybersecurity providers

• Professional advisers, including legal and accounting advisers

• Consultants and specialist partners involved in preparing or delivering a requested service

• Public authorities, courts and regulators where legally required

• Other recipients authorised by the data subject or permitted by applicable law

The website is hosted through Google Sites. Depending on the features used, website-related information may also be processed through Google services such as Google Forms, Google Maps, YouTube or Google Analytics.

7. International Transfers

Some website, email, cloud-storage or technical service providers may process data through infrastructure located outside Türkiye.

Where personal data is transferred abroad, the company will apply the transfer mechanism and safeguards required under applicable Turkish data-protection legislation. Further information concerning relevant service providers and safeguards may be requested through the privacy contact address.

8. Retention

Personal data is retained only for the period necessary for the relevant purpose and for any additional period required by applicable legal, contractual, accounting or limitation requirements.

General website enquiries that do not result in a business relationship are periodically reviewed and deleted or anonymised when no longer required. Where an enquiry develops into a proposal, contract, dispute or ongoing business relationship, the associated records may be retained for the applicable contractual and legal periods.

9. Security

The company applies reasonable administrative, technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

No internet transmission or storage system can be guaranteed to be completely secure. Visitors should avoid sending confidential project data through unsecured channels and may contact Urla MEP to arrange an appropriate transfer method.

10. Data-Subject Rights

Subject to the conditions and limitations of applicable law, data subjects may request information about whether their personal data is processed, obtain information about processing, learn the purpose of processing and whether data is used accordingly, learn the recipients of transferred data, request correction of incomplete or inaccurate data, request deletion or destruction where the relevant conditions are met, object to certain results arising from automated analysis, and seek compensation where damage has arisen from unlawful processing.

Requests concerning personal data may be submitted using the contact methods on Contact page. Applications should contain sufficient information to verify the applicant’s identity and identify the requested processing activity. Additional information may be requested where reasonably necessary to verify identity and protect personal data.

11. Changes

This notice may be updated to reflect changes in website functionality, company practices, service providers or applicable legal requirements. The current version and last-updated date will be published on this page.