SILVERA / INFORMATION

Privacy Policy

How Silvera Group handles information received through this website.

This policy explains the information processed when you visit the Silvera Group website or contact us. It concerns this website; separate projects or services may have additional notices.

1. Website operator and contact

This website is presented under the Silvera Group brand. For questions about privacy, contact info@silveragroup.com. The legal name and registered address of the data controller must be included in the website’s corporate disclosures once verified.

2. Categories of information

When you contact us, we receive your name, email address, selected area of interest and the contents of your message. The hosting environment may process IP addresses, request times and technical security logs to deliver and protect the website. Cookie preferences are stored locally in your browser.

3. Purposes and legal grounds

We use contact information to assess and respond to enquiries and, where appropriate, to take steps requested before a possible business relationship. Technical logs may be used to maintain availability, troubleshoot errors and protect the service. Processing must have a lawful basis under applicable legislation, including Turkey’s Law No. 6698.

4. Analytics and advertising

Optional analytics technology is disabled unless you actively accept it. The website does not currently load advertising or remarketing tags. You can change analytics preferences using the Cookie settings control in the footer.

5. Sharing and transfers

Information may be accessible to the hosting provider and, where configured, the email delivery provider solely as required for operating the website and responding to enquiries. We do not sell contact-form information. If a service provider processes information outside Türkiye, applicable cross-border transfer requirements must be fulfilled before enabling that service.

6. Retention and security

Contact correspondence is retained only for as long as reasonably necessary to handle requests, maintain relevant business records and meet legal obligations, then deleted or anonymized. Access is limited to authorized personnel; reasonable technical and organizational precautions are applied. Do not send passwords, sensitive personal data or other confidential information through the general contact form.

7. Your rights

Depending on the applicable law, you may request information, access, correction, erasure or other statutory action in relation to your personal data. Under Article 11 of the KVKK, eligible requests can be submitted through the contact channel above; identity verification may be requested before disclosure.

8. Changes

We may revise this policy as website features or legal requirements change. The latest version is published here. Read the contact-form information notice and cookie policy for more specific details.

9. Scope and data minimization

We aim not to request personal information that is unnecessary for corporate enquiries. Free-form messages may contain information beyond what we need. Please do not provide national identity numbers, payment card details, health information, passwords, special-category information or sensitive details about third parties. Receiving an unsolicited message does not mean that such information was intentionally requested.

10. Technical data that may be collected

Web infrastructure may process request URLs, browser characteristics, timestamps, response codes, limited device data and security-related logs. Such data should be used only where needed for diagnostics, abuse prevention, network security and continuity. The actual log configuration and retention periods depend on the hosting environment and must be verified before publication.

11. Exercising your rights

You may submit a request identifying the rights you wish to exercise and information reasonably needed to confirm your identity. Statutory procedures and response periods apply after the request reaches the data controller. Rights are assessed subject to lawful retention duties and the rights of other people. Additional identity verification may be necessary before information is disclosed.

12. Processors and contractual safeguards

Hosting, security, email transmission and technical support providers may have limited access to information to deliver their services. Roles, confidentiality obligations, instructions and security requirements should be set out in appropriate agreements. The operator must review the actual providers, processing locations and subcontractors used in production and update these disclosures accordingly.

13. International transfers

Using an overseas server, CDN, messaging platform or analytics provider may result in personal data being transferred abroad. Any such transfer must satisfy the requirements of applicable law, including the current international-transfer provisions of Türkiye’s Personal Data Protection Law No. 6698. Publishing this notice alone does not establish a valid transfer mechanism.

14. Security and incident response

Appropriate controls should include restricted access, maintained software, encrypted connections, controlled log access, backups and incident response procedures. No internet transmission is guaranteed to be completely secure. A suspected personal-data breach must be assessed promptly and applicable legal reporting duties followed.

15. External websites and embedded resources

The site may link to websites operated by other organizations, which have their own privacy practices. Some interactive 3D features may request software resources from external CDNs. Such requests should be reviewed when the site is deployed, and the real recipients and purposes documented as appropriate.

16. Children and sensitive information

This website is intended for business and project enquiries, not for collecting information from children or processing special-category data. If such data are sent unintentionally, the circumstances should be reviewed and appropriate action taken in accordance with relevant legal duties.

17. Retention schedules

Each category of data should have a documented retention period based on necessity, legal obligations, possible disputes and operational requirements. Enquiries should not be stored indefinitely. Once no longer necessary, information should be deleted, destroyed or anonymized in accordance with an approved retention schedule. Exact periods must reflect actual production operations.

18. Changes to this policy

New accounts, forms, analytics, advertising or payment features require another assessment of processing activities. Material changes should be communicated and consent mechanisms updated where necessary. This statement does not restrict any mandatory rights provided by applicable law.