LoadingLoadingAt Veltstack we process personal data transparently, proportionately and only as needed. This policy explains what we collect—and how we use it—when you visit our site, fill out a form or get in touch.
Last updated: September 2, 2026
Your privacy is part of how we work with you. This policy summarises what data we collect, why we process it, who we share it with (and when), and how you can exercise your rights.
We do not collect data for unrelated purposes and we do not sell marketing lists. We use data to communicate, deliver services, keep the site secure and meet legal obligations.
The data controller under this Privacy Policy is Ömer Halis Demir, operating under the Veltstack brand.
Until we know you, we typically work with the information you choose to share. The categories below are the ones that most often apply:
We process personal data for the following purposes:
Processing is grounded in the legal bases set out in Article 5 of Turkey’s Personal Data Protection Law (KVKK): establishing or performing a contract, complying with a legal obligation, protecting our legitimate interests and, where needed, explicit consent.
Marketing or promotional messages are sent only with your explicit consent; you may withdraw that consent at any time.
We keep data for as long as the processing purpose continues and as required by applicable limitation periods. When the purpose ends or the retention period expires, we delete, destroy or anonymise the data.
Contact and quotation records are generally kept for up to 2 years after the last interaction. Records we must retain by law are kept for the statutory period.
Under the KVKK you may ask whether your data is processed, request information if it is, request correction or deletion, learn who it has been shared with, object to processing and claim compensation for damage caused by unlawful processing.
Send requests to veltstack@outlook.com with enough detail for us to verify your identity. We respond within 30 days at the latest.
We apply proportionate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure—including HTTPS, access control, secure hosting and regular backups.
No system can promise absolute security; we commit to maintaining reasonable, up-to-date safeguards. If a breach is suspected, we will notify you and the competent authorities to the extent required by law.
Our services are not directed at anyone under 18. We do not knowingly collect personal data from children under 18. If we become aware that we have, we will delete it.
We may update this policy as our services, legal requirements or infrastructure change. The current version is always published on this page; significant changes may also be announced on the site.
Questions about our privacy practices, or requests to exercise your rights, can be sent via our Contact page.
For the detailed statutory notice under the KVKK, see our KVKK Disclosure page.
