GDPR Privacy Notice

ImaConsult — Process, Technology & Software Consulting Effective date: September 07, 2026 | Last updated: September 07, 2026

1. Who This Notice Is For

This GDPR Privacy Notice applies to individuals located in the European Economic Area (EEA) or the United Kingdom (UK) who interact with the ImaConsult website or submit a contact form inquiry.

2. Data Controller

ICI Tech Teknoloji A.Ş.

Websitehttps://imaconsult.com/
Emailapp@icitech.com.tr
OfficeMaslak Mah. Bilim Sk. Sun Plaza Blok No:5A İç Kapı No:41 Sarıyer, İstanbul, Turkey
Phone+90 212 366 57 26

Turkey has applied for an EU adequacy decision; negotiations are ongoing. In the meantime, data transfers from the EEA are covered by Standard Contractual Clauses (SCCs) under GDPR Article 46(2)(c).

3. Personal Data We Process

Contact form: full name, company name, email address, phone number, service interest, project description.

Analytics cookies (with consent): anonymised website usage data — pages visited, session duration, traffic source, device type.

4. Legal Bases Under GDPR Article 6

Processing activityLegal basis
Responding to your contact form inquiryArt. 6(1)(b) — performance of pre-contractual steps
Maintaining CRM records for follow-upArt. 6(1)(f) — legitimate interests
Web analytics and marketing cookiesArt. 6(1)(a) — consent
Compliance with legal obligationsArt. 6(1)(c) — legal obligation

5. Retention Periods

Contact form and CRM records: 3 years from last interaction. Analytics data: as per provider terms (typically up to 24 months). Legal/compliance records: as required by applicable law.

6. International Data Transfers

ICI Tech is based in Turkey. Turkey has applied for an EU adequacy decision; negotiations are ongoing. All data transfers from the EEA are covered by Standard Contractual Clauses (SCCs) under GDPR Article 46(2)(c). Transfers to third-party processors are similarly protected by SCCs or equivalent safeguards.

7. EU Representative (GDPR Article 27)

As a non-EU establishment processing EEA personal data, ICI Tech Teknoloji A.Ş. currently falls within the SME exemption under GDPR Article 27(2)(a) — processing is not large-scale, not regular, and does not involve special category data. Should our processing activities change, we will appoint an EU representative and update this notice accordingly.

8. Your Rights Under GDPR

You have the right to:

  • Access — obtain a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — restrict processing in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — withdraw analytics/marketing cookie consent at any time via the Cookie Settings link in the footer

To exercise any right, contact us at: app@icitech.com.tr — Subject: "GDPR Data Rights Request — ImaConsult"

We respond within 30 days of a verified request.

9. Right to Lodge a Complaint

If you are in the EEA, you have the right to lodge a complaint with your national supervisory authority. For example:

For UK residents: ICO — https://ico.org.uk

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (GDPR Article 33). Where the breach is likely to result in a high risk, we will also notify affected individuals without undue delay (GDPR Article 34).

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

12. Contact

Email: app@icitech.com.tr — Subject: "GDPR Privacy Notice Inquiry — ImaConsult" Office: Maslak Mah. Bilim Sk. Sun Plaza Blok No:5A İç Kapı No:41 Sarıyer, İstanbul Phone: +90 212 366 57 26