Privacy and Data Protection Notice

Which data, why, and for how long.

This notice is prepared under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and covers ONLY THE POLİÇEK MARKETING SITE. The application you use after signing in is subject to its own notice.

Last updated: 30 August 2026

This text is a DRAFT. The data controller details will be completed once the company is incorporated, and the text will be reviewed by legal counsel. The disclosure the law requires is not complete until the controller's identity is stated.

1. Data controller

Your personal data is processed by the organisation below in its capacity as data controller. POLİÇEK is a product name; the data controller is that organisation.

Legal name: [to be completed on incorporation]
Address: [to be completed on incorporation]
MERSİS: [to be completed on incorporation]
Tax office / number: [to be completed on incorporation]
Application email: [to be completed on incorporation]
KEP: [to be completed on incorporation]

2. Personal data processed

There are two separate processing activities on this site, independent of one another.

A) VISIT RECORD — created as you browse. Our visitor counter SETS NO COOKIE. Your identity is a one-way digest derived from your IP address that CHANGES EVERY DAY; tomorrow the same visit produces a different digest, so you cannot be followed across days.

On every visit: date and time, page viewed, page language and browser language, country / region / city, time zone, the name of your internet service provider, device / operating system / browser class, the site you arrived from and any campaign tags.
ONLY with your explicit consent: your raw IP address and browser signature (User-Agent). Without consent both fields stay empty; the rule is enforced in the software and in a database constraint together.
If you complete the contact form: your name, email address, organisation name if given, subject and message text.

3. Purposes and legal bases

The cookieless part of the visit record is processed to understand which parts of the site are read, to improve the content and to detect faults and abuse, on the basis of LEGITIMATE INTEREST under KVKK Art. 5/2-(f). No persistent identifier is used in this part.

The raw IP address and browser signature are processed ONLY with your EXPLICIT CONSENT under KVKK Art. 5/1. You may withdraw consent at any time from the cookie preferences panel; from that moment on these fields are not written.

Contact form data is processed to respond to your request, under KVKK Art. 5/2-(c) and Art. 5/2-(f).

4. Method of collection

The visit record is collected automatically through a measurement request embedded in the page; contact data is collected electronically when you complete and submit the form.

5. Transfers, including transfers abroad

The following service providers are used so the service can operate. Their servers may be located outside Türkiye; the processing may therefore involve a transfer abroad within the meaning of KVKK Art. 9.

Cloudflare — serving the site, infrastructure security and the bot check on the contact form.
Neon — the PostgreSQL database in which visit records are stored.
Resend — delivering contact form messages as email.
Google Fonts — loading the page typefaces. The request sets no cookie but does send your IP address to Google; self-hosting the fonts removes the transfer entirely, and that change is planned.

6. Retention periods

Visit records are deleted automatically after 400 DAYS. The period was chosen so that comparison with the same period of the previous year remains possible, while preventing records from accumulating indefinitely.

The live-visitor record is deleted within 24 hours. Contact form messages are kept in an email inbox; they are not written to any database on this site.

7. Your rights

Under KVKK Art. 11 you may apply to the data controller and exercise the following rights:

To learn whether your personal data is being processed and, if so, to request information about it.
To learn the purpose of processing and whether the data is used in line with that purpose.
To know the third parties to whom the data is transferred, in Türkiye or abroad.
To request correction where the data is incomplete or inaccurate.
To request erasure or destruction within the conditions set out in the law.
To request that correction, erasure and destruction be notified to third parties to whom the data was transferred.
To object to a result adverse to you arising from analysis carried out solely by automated systems.
To claim compensation where you suffer damage due to unlawful processing.

8. How to apply

You may submit requests concerning your rights in writing, or through registered electronic mail (KEP), to the address below, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application will be concluded within thirty days at the latest.

THE CONTACT FORM IS NOT A SUBSTITUTE FOR AN APPLICATION: the form can be completed anonymously, whereas a KVKK application requires that your identity can be verified. The form is for general questions only.

9. Cookies

Which records this site creates, who sets them and how long they are kept is listed item by item on a separate page. The list is not boilerplate — it is the site as measured in a browser.

Read the full cookie policy

10. The application is separate

This notice covers the marketing site only. The POLİÇEK application you use after signing in uses session cookies, processes your policy documents, and is subject to its own notice.

11. Changes

When this text changes, the update date above changes with it. Material changes are additionally notified.