1. Data controller and contact
PLEC Mühendislik Danışmanlık Çözümleri ve Ticaret Limited Şirketi, Türkiye, is the data controller for the processing described here. For privacy requests, contact consult@plec.solutions.
2. Information we process
When you submit an inquiry, we may process your name, work email, company, project type and timing, message or engineering brief, and files you choose to upload, including CAD or supporting documents. Admin sign-in may involve authentication and session information processed by Clerk.
For website analytics, we record page views and active reading time aggregated by page, day, and country. The server uses the request IP address to derive country; raw IP addresses and visitor IDs are not retained in the analytics records.
3. Purposes and legal grounds
We use inquiry information to review and respond to project requests and follow up with you; authentication data to protect administrative access; and aggregated analytics to understand site usage and improve the website. Processing is based on the applicable legal grounds for each purpose, including steps requested before a potential contract, legal obligations, legitimate interests, or consent where required.
4. Service providers and transfers
Replit — hosting and storage: Replit provides PLEC’s development workspace, website hosting, managed database, and Object Storage. Replit’s published Data Processing Agreement describes Replit as a processor for customer personal data handled on the customer’s behalf. PLEC’s Workspace and published Project are configured for the EU geography. Replit says published compute, database, and Object Storage are colocated in the selected geography, but resources created before publishing may be in another location. We have not confirmed the region of the private Object Storage bucket used for uploaded files, so we cannot confirm that those files are stored in the EU. Replit’s public subprocessor list identifies Google, Inc. (USA) and Cloudflare (USA) for cloud infrastructure; those supplier locations do not establish the location of each PLEC data resource.
Replit references: Project geography — https://docs.replit.com/features/publishing/project-geography; subprocessor list — https://replit.com/subprocessors; Data Processing Agreement — https://replit.com/dpa.
Clerk — authentication: Clerk acts as a processor for PLEC’s admin authentication and session personal data. Project inquiries and uploaded files are processed in Replit-hosted application, database, and storage services, not by Clerk. Clerk states that it does not offer regional data residency and hosts data in the United States. Its public materials identify Google Cloud and Cloudflare as infrastructure providers. Clerk’s current detailed subprocessor list is available through its Trust Center; its public subprocessor page links to that list.
Clerk references: Trust Center — https://trust.clerk.com/; public subprocessor page — https://clerk.com/legal/subprocessors; Data Processing Agreement — https://clerk.com/legal/dpa.
International transfers: Replit’s published DPA describes transfers to adequate countries or under appropriate safeguards, including EU Standard Contractual Clauses and UK transfer terms where applicable. Clerk’s DPA describes the EU-U.S. Data Privacy Framework, its UK extension, and the Swiss-U.S. framework where applicable, and Standard Contractual Clauses when Clerk cannot rely on the Framework for a GDPR-covered transfer. These are provider-published terms; PLEC must confirm which agreements apply and assess transfer requirements under the laws governing each transfer, including transfers from Türkiye under KVKK.
5. Retention and security
We review personal information at least annually and delete or anonymize it when it is no longer needed, subject to legal retention duties and the handling of legal claims. We use appropriate technical and organizational measures to protect personal information.
6. Your rights and requests
You may contact consult@plec.solutions to ask about your personal information or submit a request to exercise rights available under applicable data-protection law. Requests are handled under the applicable rules and time limits.
7. Updates
We may update this notice when our practices or legal obligations change. The date above identifies this version.