1. Data controller
The data controller is PLEC Mühendislik Danışmanlık Çözümleri ve Ticaret Limited Şirketi, Türkiye. Contact: consult@plec.solutions.
2. Data and purposes
We may process contact and company details, project type and timing, inquiry messages and engineering briefs, optional CAD/supporting files, admin authentication/session information, and aggregated website analytics. We use these data to respond to project inquiries, protect admin access, and understand site usage.
3. Collection method and legal grounds
Information is collected through the quote form, uploaded files, admin sign-in, and website requests. The legal ground depends on the purpose and may include steps requested before a contract, legal obligations, legitimate interests, or consent where required. The applicable ground for each activity should be assessed under KVKK.
4. Recipients and transfers
Replit — hosting and storage: Replit provides PLEC’s development workspace, website hosting, managed database, and Object Storage. Replit’s published Data Processing Agreement describes Replit as a processor for customer personal data handled on the customer’s behalf. PLEC’s Workspace and published Project are configured for the EU geography. Replit says published compute, database, and Object Storage are colocated in the selected geography, but resources created before publishing may be in another location. We have not confirmed the region of the private Object Storage bucket used for uploaded files, so we cannot confirm that those files are stored in the EU. Replit’s public subprocessor list identifies Google, Inc. (USA) and Cloudflare (USA) for cloud infrastructure; those supplier locations do not establish the location of each PLEC data resource.
Replit references: Project geography — https://docs.replit.com/features/publishing/project-geography; subprocessor list — https://replit.com/subprocessors; Data Processing Agreement — https://replit.com/dpa.
Clerk — authentication: Clerk acts as a processor for PLEC’s admin authentication and session personal data. Project inquiries and uploaded files are processed in Replit-hosted application, database, and storage services, not by Clerk. Clerk states that it does not offer regional data residency and hosts data in the United States. Its public materials identify Google Cloud and Cloudflare as infrastructure providers. Clerk’s current detailed subprocessor list is available through its Trust Center; its public subprocessor page links to that list.
Clerk references: Trust Center — https://trust.clerk.com/; public subprocessor page — https://clerk.com/legal/subprocessors; Data Processing Agreement — https://clerk.com/legal/dpa.
International transfers: Replit’s published DPA describes transfers to adequate countries or under appropriate safeguards, including EU Standard Contractual Clauses and UK transfer terms where applicable. Clerk’s DPA describes the EU-U.S. Data Privacy Framework, its UK extension, and the Swiss-U.S. framework where applicable, and Standard Contractual Clauses when Clerk cannot rely on the Framework for a GDPR-covered transfer. These are provider-published terms; PLEC must confirm which agreements apply and assess transfer requirements under the laws governing each transfer, including transfers from Türkiye under KVKK.
5. Retention and security
We review personal information at least annually and delete or anonymize it when no longer needed, subject to legal retention duties. Appropriate technical and organizational measures are used to protect it.
6. Your rights and applications
You may contact consult@plec.solutions to submit a request concerning your personal data. Requests will be handled through the applicable KVKK procedure and statutory time limits. This notice may be updated; the date above identifies this version.