Privacy Policy

Last Updated: March 2025

At Integrity Consulting, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, process, and store your information in compliance with the European Union's General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law (Law No. 6698 on Protection of Personal Data - KVKK).

Please read this Privacy Policy carefully to understand our practices regarding your personal data.

1. Data Controller Information

Integrity Consulting ("we," "us," or "our") is a sole proprietorship registered in Türkiye. We act as the data controller for personal data collected through our website and services.

Contact details:
Integrity Consulting
Yukarı Dikmen Mahallesi 664. Sokak No: 30/25
Çankaya - Ankara / Türkiye
Email: [email protected]

2. Personal Data We Collect

We may collect the following categories of personal data:

2.1 Information You Provide Directly

  • Contact Information: Name, email address, phone number, and physical address when you contact us through our forms or by email
  • Professional Information: Resume/CV, work experience, education, qualifications, and skills when you apply to join our expert network
  • Communication Data: Information contained in communications you send to us

2.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
  • Usage Data: Information about how you use our website and services
  • Cookies and Similar Technologies: Information collected through cookies and similar tracking technologies

3.1 Under GDPR

We process your personal data based on one or more of the following legal grounds:

  • Consent: Where you have given us clear consent to process your personal data for a specific purpose
  • Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
  • Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your fundamental rights and freedoms
  • Legal Obligation: Where processing is necessary for compliance with our legal obligations

3.2 Under Turkish Personal Data Protection Law (KVKK)

According to Article 5 of the KVKK, we process your personal data based on one or more of the following legal grounds:

  • Your explicit consent
  • Where specifically permitted by laws
  • Where necessary for the establishment or performance of a contract with you
  • Where necessary for compliance with a legal obligation to which we are subject
  • Where the data has been made public by you
  • Where necessary for the establishment, exercise, or defense of legal claims
  • Where necessary for our legitimate interests, provided that processing does not harm your fundamental rights and freedoms

4. How We Use Your Data

We use your personal data for the following purposes:

  • To provide and maintain our services
  • To respond to your inquiries and fulfill your requests
  • To assess your application for our expert network
  • To send administrative information, such as updates to our terms, conditions, and policies
  • To personalize your experience on our website
  • To improve our website and services
  • To protect against fraudulent, unauthorized, or illegal activity
  • To comply with legal obligations
  • For other purposes with your consent

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

  • The duration of our ongoing relationship with you
  • Our legal obligations under applicable laws
  • The applicable statute of limitations
  • The existence of any ongoing legal claims or potential disputes

When personal data is no longer necessary for the purposes for which it was collected, we will either delete or anonymize it, or if this is not possible, we will securely store your personal data and isolate it from any further processing until deletion is possible.

6. Your Rights

6.1 Rights Under GDPR

Under the GDPR, you have the following rights:

  • Right to Access: The right to request information about the personal data we hold about you and to receive a copy of your personal data
  • Right to Rectification: The right to request that we correct or update any inaccurate or incomplete personal data we hold about you
  • Right to Erasure ('Right to be Forgotten'): The right to request that we delete your personal data in certain circumstances
  • Right to Restrict Processing: The right to request that we restrict the processing of your personal data in certain circumstances
  • Right to Data Portability: The right to receive a copy of your personal data in a structured, machine-readable format and to request that we transfer it to another controller
  • Right to Object: The right to object to the processing of your personal data based on our legitimate interests or for direct marketing purposes
  • Right to Withdraw Consent: The right to withdraw your consent at any time where we rely on consent to process your personal data

6.2 Rights Under Turkish Personal Data Protection Law (KVKK)

Under Article 11 of the KVKK, you have the right to:

  • Learn whether your personal data is being processed
  • Request information about the processing if your personal data is being processed
  • Learn the purpose of processing and whether your data is being used in accordance with that purpose
  • Know the third parties to whom your personal data is transferred within Türkiye or abroad
  • Request rectification of incomplete or inaccurate personal data
  • Request erasure or destruction of your personal data under certain conditions
  • Object to any result that arises to your detriment through analysis of your processed personal data exclusively by automated means
  • Claim compensation for damages arising from unlawful processing of your personal data

6.3 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided in Section 13. We will respond to your request within 30 days. Please note that we may ask you to verify your identity before responding to such requests, and we may reject requests that are unreasonably repetitive, require disproportionate technical effort, risk the privacy of others, or would be extremely impractical.

7. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users of our website. This helps us provide you with a good experience when you browse our website and also allows us to improve our site.

7.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently, as well as to provide information to the website owners.

7.2 Types of Cookies We Use

  • Necessary Cookies: Essential cookies required for the operation of our website
  • Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our website
  • Functionality Cookies: Enable the website to provide enhanced functionality and personalization
  • Targeting Cookies: Record your visit to our website, the pages you have visited, and the links you have followed

7.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

8. Sharing Your Personal Data

We may share your personal data with the following categories of recipients:

  • Service Providers: Third-party vendors who perform services on our behalf, such as web hosting, data analysis, payment processing, and customer service
  • Business Partners: When necessary for providing services to you
  • Legal Authorities: When required by applicable law, court order, or governmental regulation
  • In Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company
  • With Your Consent or at Your Direction: To any other third party with your prior consent

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

9. International Data Transfers

As a consulting firm operating in the MENA region, we may transfer your personal data to countries outside the European Economic Area (EEA) and Türkiye. Whenever we transfer your personal data internationally, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

  • Transferring data to countries that have been deemed to provide an adequate level of protection by the European Commission or Turkish Data Protection Authority
  • Using specific contracts approved by the European Commission or Turkish Data Protection Authority that give personal data the same protection it has in Europe and Türkiye
  • For transfers to the US, working with providers that are part of approved frameworks, such as the EU-US Data Privacy Framework

If none of these safeguards is available, we may request your explicit consent to the specific transfer. You have the right to withdraw this consent at any time.

10. Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

  • Encryption of personal data where appropriate
  • Regular security assessments and testing of our systems
  • Restricted access to personal data on a need-to-know basis
  • Staff training on data protection and security
  • Secure cloud-based solutions for data storage

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child without verification of parental consent, we take steps to remove that information from our servers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material changes if and where this is required by applicable data protection laws.

You can see when this Privacy Policy was last updated by checking the "Last Updated" date at the top of this page.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer at:

Integrity Consulting
Yukarı Dikmen Mahallesi 664. Sokak No: 30/25
Çankaya - Ankara / Türkiye
Email: [email protected]

If you are located in the European Union, you have the right to lodge a complaint with your local data protection authority if you are not satisfied with our response to your concerns.

If you are located in Türkiye, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) if you are not satisfied with our response to your concerns.