Last updated: 18 October 2026
This notice explains how MDS Savunma Teknolojileri ve İnşaat Ticaret A.Ş. (“MDS”, “we”) processes personal data through www.mdsdefense.com, in line with the EU General Data Protection Regulation (GDPR, in particular Articles 13 and 14), the Turkish Personal Data Protection Law No. 6698 (KVKK) and Qatar’s Personal Data Privacy Protection Law No. 13 of 2016.
1. Data controller
| Controller | MDS Savunma Teknolojileri ve İnşaat Ticaret A.Ş. |
| Address | Cemal Nadir Sokak No: 13, Çankaya, Ankara, Türkiye |
| Doha office | Palm Tower B, Floor 49, Office 01, West Bay, Doha, Qatar |
| Contact for privacy matters | info@mdsdefense.com |
MDS is registered in the Turkish Data Controllers’ Registry (VERBİS).
2. Personal data we process
- Contact form: full name, e-mail address, phone number (optional), and the content of your message.
- Technical data (server logs): IP address, date and time of access, page requested, browser and operating system type, referring page.
- Cookie: a single strictly necessary cookie that stores your language choice. See our Cookie Policy.
We do not use analytics, advertising or social-media tracking, and we do not load fonts or scripts from third parties.
3. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Responding to your inquiry; pre-contractual discussions | Contact form data | Art. 6(1)(b) steps prior to a contract; Art. 6(1)(f) legitimate interest in answering inquiries |
| Operating and securing the website, investigating misuse | Technical data | Art. 6(1)(f) legitimate interest in IT security |
| Remembering your language choice | Language cookie | Strictly necessary for the service you requested (ePrivacy exemption) |
We do not sell personal data, use it for marketing, or carry out automated decision-making or profiling.
4. Recipients and international transfers
- Microsoft 365 (e-mail hosting) receives contact-form messages as our processor under a data processing agreement. Data may be stored in Microsoft data centers inside or outside the EU/EEA.
- MDS is established in Türkiye, which does not have an EU adequacy decision. Personal data you send us from the EU is therefore transferred to Türkiye; we rely on Art. 49(1)(b) GDPR (transfer necessary for pre-contractual measures taken at your request) for messages you choose to send us, and apply appropriate safeguards for any other transfers.
- We disclose data to public authorities only where legally required.
5. Retention
| Data | Retention period |
|---|---|
| Contact form messages | 3 years, then deleted |
| Server log files | 1 year, then deleted |
| Language cookie | Up to 1 year in your browser |
6. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, workplace or the place of the alleged infringement (Art. 77).
Equivalent rights apply under KVKK (Art. 11) and Qatari law. To exercise them, write to info@mdsdefense.com. We respond within one month (GDPR Art. 12(3)).
7. Security
All connections to this website are encrypted (HTTPS/TLS). Contact messages are stored only in our corporate mailbox and are accessible only to staff who handle your request. Our servers run behind a firewall in an access-restricted environment.
8. Children
This website is intended for businesses and public institutions and is not directed at children. We do not knowingly collect children’s data.
9. Changes
We may update this notice when our website or the law changes. The date at the top shows the latest revision.