Privacy Policy & Personal Data Protection (KVKK & GDPR)

Data Controller Identity & Corporate Governance

Pursuant to Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the European Union General Data Protection Regulation (EU GDPR 2016/679), the data controller is SERMODULA Modular Architecture & Engineering, operating under the laws of the Republic of Türkiye.

Legal Entity SERMODULA Modüler Mimarlık & Mühendislik Founding Architecture & Engineering Studio

Headquarters & Studio Address Cevizli Mah. Orhan Gazi Cad. 24/B Maltepe / İstanbul İstanbul / Türkiye

Proposal & Project Lead İdris YAĞMAHAN Architect · Founding Partner

Data Protection Desk [email protected] +90 (505) 507 04 18

Categories of Personal Data Processed

When visiting our website or utilizing preliminary estimation tools, only the following categories of data are processed strictly in accordance with architectural feasibility and communication purposes:

Identity & Contact

Name, surname, company/developer title, corporate email, telephone, country and destination city.

Project & Plot Parameters

Plot size, building storeys, target typologies, budgetary framework, foundation and logistics preferences.

Technical Session Data

Chosen UI language preference, anonymized HTTP protocol headers, server request timestamps and essential logs.

Purposes of Processing and Legal Grounds

Your data is processed under Article 5 of Turkish Law No. 6698 and Article 6 of the EU GDPR pursuant to the following lawful grounds:

Performance of Pre-contractual Measures & Contracts (GDPR Art. 6/1-b): Formulating modular feasibility benchmarks, drafting multi-disciplinary engineering proposals, calculating scope hours and presenting formal quotation files upon your direct request.

Compliance with Legal Obligations (GDPR Art. 6/1-c): Maintaining mandatory international trade documentation, customs clearance records, tax compliance and statutory construction archive requirements.

Legitimate Interests of the Controller (GDPR Art. 6/1-f): Safeguarding network and information security, ensuring high-availability server performance and preventing malicious denial of service or spam submissions.

Client-Side Privacy-by-Design Architecture

The SERMODULA digital platform has been engineered under a strict privacy-by-design architecture that refrains from silent user tracking:

Zero-Database Preliminary Briefing:

Inputs provided in our interactive cost calculators are not piped into server profiling databases. Calculations exist solely within your local browser session. You may download your customized brief as a local text document or transmit it directly via WhatsApp under your own conscious initiative to Architect İdris YAĞMAHAN.

Data Transfers & Cross-Border Delivery Safeguards

SERMODULA maintains fabrication facilities in Türkiye and delivers volumetric modular assemblies across 57 European destinations. Cross-border data flows are restricted to the following boundaries:

Zero Commercial Resale: Personal details, land coordinates and project briefs are never commercialized, rented or sold to marketing aggregators, third-party advertising brokers or external contractors.
Accredited Engineering Disclosure: Only upon execution of a formal contract, engineering parameters are transferred under strict non-disclosure terms to accredited local structural engineers, statutory verification bodies and international customs agents.
Statutory & Judicial Compliance: Data is disclosed to governmental bodies or judicial authorities solely when strictly required by enforceable statutory obligations or court orders.

Data Retention Schedules, Erasure & Security Measures

Personal data is retained only for the duration required by its specific operational purpose and applicable statutory limitation periods:

Preliminary Inquiries & Briefs

Unformalized briefs and general inquiries are permanently erased or anonymized within 12 months following last contact.

Executed Architectural Contracts

Executed contracts, statics calculations and CAM fabrication documentation are archived securely for 10 years in compliance with construction liability and civil codes.

Technical Security Controls: All platform traffic is secured via 256-bit SSL/TLS encryption. We operate with zero external CDN dependencies, hosting all assets locally with hardened firewall protocols and role-based access control.

Data Subject Rights under KVKK & EU GDPR

Pursuant to Article 11 of Turkish Law No. 6698 and Articles 15 to 22 of the EU GDPR, data subjects are entitled to the following enforceable rights:

1. Right of Access Ascertain whether personal data is processed and request copy/disclosure.

2. Right to Rectification Demand the correction of incomplete, inaccurate or outdated personal records.

3. Right to Erasure Request the total erasure or destruction of records when legal grounds cease.

4. Restriction of Processing Obtain restriction of processing pending verification of data accuracy.

5. Data Portability Receive your data in a structured, commonly used and machine-readable format.

6. Right to Object Object to processing based on legitimate interests and lodge regulatory complaints.

Compliance Desk and Formal Application Protocol

To exercise any of the statutory rights specified above, you may deliver your written request accompanied by verification of identity through either of the following channels:

Electronic Submission (Email):

Via your registered corporate email address or digitally signed transmission:

[email protected]

Written Service (Registered Post):

SERMODULA Modüler Mimarlık & Mühendislik
Cevizli Mah. Orhan Gazi Cad. 24/B Maltepe / İstanbul, İstanbul / Türkiye

Applications will be evaluated without charge and concluded within thirty (30) calendar days at the latest. Where responding requires additional administrative expenditures, standard statutory tariffs may be assessed.

Knowledge Base

Frequently Asked Questions

Does SERMODULA store the inputs I enter in the cost calculator in a database?

No. Our cost calculator and project briefing forms operate purely client-side within your browser. Floor areas, typologies and estimated figures are not harvested into a server database or sold to advertisers. Data is only stored locally on your device if you download the text brief, or transmitted end-to-end encrypted if you voluntarily launch WhatsApp.

Are my plot coordinates and project briefs shared with third parties or competitors?

Never. SERMODULA maintains strict commercial and architectural non-disclosure principles. Prior to formal contract signing, your plot coordinates, typologies and budget envelopes are evaluated solely by our in-house engineering team. Following contract execution, data is disclosed strictly to accredited local statics engineers and logistics agents under signed NDA.

How can I request the erasure, rectification or anonymization of my personal data?

Pursuant to Article 17 of the EU GDPR and Article 11 of Turkish Law No. 6698, you may submit an erasure or rectification request at any time by emailing [email protected] or writing to our corporate headquarters. We process and confirm your request in writing within a maximum of 30 calendar days.

How are the rights of visitors residing in the European Union (EU GDPR) protected?

Visitors residing in the EU enjoy the complete spectrum of rights under GDPR Chapter 3: Right of Access (Art. 15), Rectification (Art. 16), Erasure / Right to be Forgotten (Art. 17), Restriction of Processing (Art. 18), Data Portability (Art. 20) and Right to Object (Art. 21). Cross-border data protocols between Türkiye and the EU adhere to standardized technical safeguards.

How is the confidentiality of project briefs sent via WhatsApp secured?

WhatsApp transmission is strictly voluntary and user-initiated. Our website executes no background server-to-server dispatch; your browser merely pre-fills the formulated brief into your WhatsApp client. All messages are protected via end-to-end Signal Protocol encryption and arrive directly at our Project & Quotations Lead Architect İdris YAĞMAHAN.

Privacy Policy & Personal Data Protection