KVKK Privacy Notice

The controller for these activities is Veya Danışmanlık Limited Şirketi. Contact: [email protected]. This notice covers the marketing website, demo enquiries and related communication. Roles and obligations concerning customer documents or employee data within a separate SaaS service are determined separately in that service relationship.

Name, company, role and work email; optional phone and message; request language, time and contact acknowledgement are collected through an electronic form. Information you send us directly by email is also processed.

IP address, request origin and related technical information are processed through electronic network requests. Keyed hashes based on IP and request information, together with timestamps, counters and status records, are created for abuse prevention. The technical control table does not retain the raw form content. Special-category personal data is not requested.

Assessing and responding to a demo enquiry: necessary processing may fall under Article 5(2)(c) where directly related to entering into a contract to which the individual is a party. Business communication with company representatives and management of enquiries are assessed under the legitimate-interest ground in Article 5(2)(f), provided fundamental rights and freedoms are not prejudiced.

Website and form security, abuse prevention and duplicate control: Article 5(2)(f), based on the interest in providing a secure service balanced against fundamental rights. Compliance with a legal obligation: Article 5(2)(ç), where that obligation exists. Establishing, exercising or protecting rights in connection with claims or disputes: Article 5(2)(e), to the extent necessary.

The relevant condition must actually be met for each processing activity. The form’s contact acknowledgement is not a marketing subscription, and this notice does not replace an explicit-consent statement.

Authorised company personnel handle demo enquiries, supported by hosting, technical-security and email-delivery services. In the current application, requests are processed through Cloudflare Pages Functions, technical control records are held through D1, and enquiries are delivered through Resend to the company’s contact inbox.

Purpose-limited disclosure to competent authorities may be necessary to fulfil legal obligations, or to relevant advisers where needed to protect a right. International transfers must separately meet the conditions in Article 9 of the KVKK. This notice does not claim that a particular transfer mechanism is in place or that data is held exclusively in Türkiye.

Data is handled to the extent and for the period required by its purpose, taking relevant legal obligations and protection of rights into account. Article 7 and related legislation apply when all conditions for processing cease to exist. Email, hosting logs and time-limited application security records have distinct retention processes; no single period is promised for all of them.

The application includes request validation, origin checking, submission limits and keyed hashing. These measures are not guarantees of absolute security or irreversible anonymisation.

You may learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether use is consistent with that purpose; and learn which third parties receive it within Türkiye or abroad.

You may request correction of incomplete or inaccurate data; deletion or destruction under the conditions in Article 7; and notification of those actions to recipients. You may object to a result against you arising exclusively from automated analysis and seek compensation for damage caused by unlawful processing.

You may submit rights requests using the methods prescribed by Article 13 and the Communiqué on the Principles and Procedures for Requests to the Data Controller. Contact [email protected] for information about the request channel and procedure. The Communiqué permits requests using an email address previously supplied to and registered with the controller; an ordinary email may not establish identity in every case.

Necessary and proportionate identity verification may be requested. Requests are answered as soon as possible and within thirty days at the latest. If the procedure entails an additional cost, the tariff established by the Board may apply. Your right to complain to the Personal Data Protection Board under the statutory conditions is preserved.