Privacy Policy

1. Data Controller

This Privacy Policy relates to the personal data processing activities carried out through the website (alalea.com.tr) operated by Alalëa Sürdürülebilirlik ve Karbonsuzlaşma Danışmanlığı ("Alalëa" or "Company").

• Contact: [email protected]
• Address: FSM Mah. Poligon Cad. Buyaka 2 Sitesi, Kule: 3 No: 8C/1 Umraniye, Istanbul / Turkey
• Phone: +90 (216) 225 84 38

2. Personal Data Collected

The following data may be processed when you visit our website or use forms:

• Identity/Contact: name, email, phone (if shared), company/position (if shared)
• Message content: contact form messages, request/feedback content
• Subscription: email address (newsletter/announcement subscription)
• Technical data: IP address, browser type, device/operating system information, access time, referring page, cookie data
• Site analytics data: page views, clicks, session duration and other usage statistics (depending on measurement tools used)

3. Purposes of Processing Personal Data

Your data may be processed for the following purposes:

• Responding to your contact requests, managing meeting/proposal processes
• Sending subscription/announcement and content updates (with your consent)
• Providing information about our services, managing requests and complaints
• Ensuring website security, preventing misuse
• Improving site performance and user experience (analytics/statistics)
• Fulfilling obligations under applicable legislation

4. Legal Basis

Your personal data may be processed based on:

• Your explicit consent (e.g., marketing newsletters, certain cookies)
• Necessity for establishing/performing a contract (e.g., proposal/collaboration processes)
• Legal obligations of the data controller
• Legitimate interests (e.g., site security, basic analytics)

5. Cookies and Similar Technologies

Cookies may be used on our website for session management, security, remembering preferences, and analytics purposes. You can manage/delete or block cookies through your browser settings. (Some site features may not work properly if cookies are disabled.)

6. Transfer of Personal Data

Your personal data may be transferred, limited to the above purposes and with necessary security measures, to:

• Website hosting/infrastructure providers
• Email and communication service providers (e.g., form submissions/newsletter sending)
• Analytics/measurement and security service providers
• Legally authorized public institutions and judicial authorities

7. International Data Transfers

Some infrastructure services we use (hosting, email delivery, analytics, etc.) may operate through servers located abroad. In this case, transfers may be made in accordance with applicable legislation, with necessary administrative/technical measures taken and, where necessary, based on explicit consent/other appropriate transfer mechanisms.

8. Retention Periods

Your personal data is retained for the period required by the processing purpose and taking into account the statute of limitations/retention obligations stipulated in relevant legislation. Data is deleted, destroyed, or anonymized at the end of the period.

9. Data Security

Technical/organizational measures such as access control, authorization, encryption, logging, backup, and network security are implemented to ensure data security.

10. Data Subject Rights

Under applicable data protection laws, you may exercise your rights including: learning whether your personal data is being processed, requesting information if processed, learning whether it is being used in accordance with its purpose, requesting correction of incomplete/incorrectly processed data, requesting deletion/destruction, and other rights within the framework of relevant legislation.

You can submit your requests by sending an email to [email protected].

11. Updates

This policy may be updated when deemed necessary. The current text is effective from the date of publication on the website.

Effective date: January 23, 2026