Privacy policy and information notice

Data controller

The identity and contact details of the company that acts as data controller under the KVKK with regard to the processing of your personal data are set out below.

• Trade name: [Şirket unvanı]
• Address: [Adres]
• E-mail: [E-posta]
• Tax number: [Vergi numarası]
• MERSİS number: [MERSİS numarası]

Requests for information and applications within the scope of this notice may be sent to the address or to the e-mail address given above.

What data we process

Since the site has no contact form, no registration and no analytics tool, the personal data arising from your browsing of the site consist solely of the following technical information, which the hosting provider records automatically in its server logs and security systems:

• IP address
• browser and device information
• the page requested
• the date and time of the request

Separately, if you choose to write to the e-mail address published on the site, the information you share in that correspondence is processed: your name and surname, your e-mail address, and what you write about your project. Data other than the server logs therefore arise only when you send an e-mail. No special categories of personal data are collected on the site, and no profiling is carried out.

Purposes of processing and legal basis

Server and security logs are processed in order to keep the site available, to resolve faults and errors, and to prevent misuse such as automated attacks, excessive request traffic and unauthorised access attempts. The legal basis for this processing is subparagraph (f) of the second paragraph of Article 5 of the KVKK, that is, the legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Correspondence received by e-mail is processed in order to answer your questions and, if you so request, to conduct business discussions. If the correspondence relates directly to the conclusion or performance of a contract, the basis is subparagraph (c) of the second paragraph of Article 5 of the KVKK; for general enquiries it is again subparagraph (f) of the same paragraph.

Since all of the processing activities listed above rest on the conditions set out in the second paragraph of Article 5 of the KVKK, your explicit consent is not requested; there is no consent checkbox or consent screen on the site. Your data are not used for any purpose other than those listed above.

Transfer of data

The site is hosted on Cloudflare Pages and is served over Cloudflare's global network. Cloudflare also operates servers outside Türkiye; for this reason the data in the server logs may be processed abroad while the page is delivered to your browser and while security filtering is carried out.

The two fonts used in the design are loaded from Google's servers. When your browser sends that request, Google receives your IP address. Apart from these two services, the site uses no other resource or service that causes your browser to send requests to third-party servers.

These transfers abroad are carried out in accordance with the conditions laid down in Article 9 of the KVKK. Apart from these, personal data are not shared with third parties. Data are not sold and are not transferred to any party for advertising or marketing purposes. This is without prejudice to transfers made to legally authorised public institutions and organisations within the scope of obligations arising from legislation.

Retention period

Server and security logs are kept for the period determined by the hosting provider. At the end of that period the logs are deleted by the provider; no separate copy or archive of these logs is kept.

E-mail correspondence is retained for the period necessary to answer your question and to conduct the business relationship, if any, or for the mandatory retention periods laid down in legislation, whichever is longer. When the reason requiring the processing ceases to exist and the retention periods expire, the correspondence is deleted or destroyed.

Cookies

The site places no cookies in your browser. No tracking or profiling cookies, advertising cookies or third-party analytics cookies are used; since there is no membership structure requiring a session, there are no strictly necessary cookies either. As there is no cookie that requires your consent, no cookie notice is shown on the site.

If an analytics tool is added in the future, this section and, where necessary, the other relevant parts of this notice will be updated first, and explicit consent or cookie consent will be obtained separately where required. No such tool will be put into use without informing you.

Your rights under the KVKK and how to exercise them

Under Article 11 of the KVKK you have the following rights, and you may exercise them by applying to the data controller:

• To learn whether your personal data are processed
• To request information about the processing if they have been processed
• To learn the purpose of the processing and whether the data are used in accordance with that purpose
• To know the third parties in Türkiye or abroad to whom the data are transferred
• To request the correction of data that have been processed incompletely or inaccurately
• To request the erasure or destruction of the data under the conditions set out in the KVKK
• To request that correction, erasure and destruction operations be notified to the third parties to whom the data have been transferred
• To object to a result against you that arises from analysis carried out solely by automated systems
• To request compensation for the damage if you suffer damage because your personal data have been processed unlawfully

You may send your application in writing to [Adres] or by e-mail to [E-posta]. The application must clearly state your name and surname, the subject of your request and information suitable for verifying your identity; the procedures and principles are governed by the Communiqué on the Procedures and Principles of Application to the Data Controller.

Applications are answered as soon as possible and in any event within thirty days of the request reaching the data controller. If your application is rejected, if you find the response insufficient or if you do not receive a response within the time limit, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

Changes and effective date

This notice may be updated because of developments in legislation or changes in how the site operates. The text in force is always the most recent text published on the site. The version in force is dated [Tarih]. Where a substantial change is made, this will be stated separately in this section.