Legal
Privacy notice under KVKK
This notice explains who processes your personal data when you use kaynaq.com or write to us, for what purpose and on what legal basis, as required by Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK)Source 1: 6698 sayılı Kişisel Verilerin Korunması Kanunu and the Communiqué on the Duty to InformSource 2: Aydınlatma Yükümlülüğünün Yerine Getirilmesinde Uyulacak Usul ve Esaslar Hakkında Tebliğ (RG 10.03.2018, 30356). The Turkish version prevails.
Who is the data controller?
- Legal name: [[DOLDUR: ticari unvan]]
- Address: [[DOLDUR: adres]]
- Email: info@kaynaq.com
- Registered email (KEP): [[DOLDUR: KEP adresi (varsa)]]
What data do we process, why and on what legal basis?
| Where | What data | Purpose | Legal basis (Art. 5/2) |
|---|---|---|---|
| Contact form | Name, email, company or website (optional), your message | Answering your intro-call request, preparing a proposal | (c) directly related to entering into a contract; (f) legitimate interest |
| Email correspondence | Name, email address, content of the correspondence | Answering your questions, running the service relationship | (c) entering into or performing a contract; (f) legitimate interest |
| Readiness test and AI bot access test | The web address you test, your IP address | Running the test, protecting the tool against excessive use and abuse | (f) legitimate interest |
| Server logs | IP address, browser details, requested address, date and time | Operating and securing the site, fixing errors | (f) legitimate interest |
| Client relationship | Contact person’s name and contact details, contract and invoice details | Performing the contract, invoicing, meeting legal obligations | (c) performance of a contract; (ç) legal obligation |
We do not ask for special categories of personal data such as health information; please do not share such data in the form or by email. Our site uses no cookies; see the Cookie Policy.
How do we collect data?
Your data is collected electronically when you fill in the form, email us or use the readiness test. Server logs are created automatically by the hosting infrastructure with every request to the site.
Our application does not write the address you test or your IP address to any database or log. The IP address is held in the server’s temporary memory only for the 10-minute rate limit and deleted when it expires.
Who receives your data?
We do not sell your data or share it with third parties for marketing. To provide the service, it may be transferred to the following recipients:
- Hosting provider: hosts the site and the server logs. [[DOLDUR: barındırma sağlayıcısı ve sunucu konumu — plan: Vercel, ABD]]
- Email delivery service: forwards form messages to us by email. [[DOLDUR: gönderim hizmeti — kodda Resend, ABD]]
- Business email provider: hosts our correspondence. [[DOLDUR: e-posta sağlayıcısı ve sunucu konumu]]
- Our accountant: invoice and contract details in a client relationship, for legal obligations.
- Competent public authorities: only where required by law.
The servers of our hosting and email providers may be located abroad. Transfers abroad follow Article 9 of the Law as amended by Law No. 7499: where there is no adequacy decision for the destination country, one of the appropriate safeguards, such as a standard contract, is put in place, and a standard contract is notified to the Personal Data Protection Authority within five business days of signatureSource 1: 6698 sayılı Kişisel Verilerin Korunması KanunuSource 3: Yurt dışına aktarım. Basis for each transfer: [[DOLDUR: her alıcı için aktarım dayanağı — hukukçu belirleyecek]]
How long do we keep your data?
| Data | Retention period |
|---|---|
| Form and email requests (if no contract follows) | [[DOLDUR: süre — öneri: son yazışmadan itibaren 1 yıl]] |
| Contract and invoice records | For the statutory periods under tax and commercial law |
| Readiness test: IP address | 10 minutes, in the server’s temporary memory only |
| Server logs | [[DOLDUR: barındırma sağlayıcısının kayıt saklama süresi]] |
When the period ends or the reason for processing no longer applies, we erase, destroy or anonymise the data.
What are your rights?
Under Article 11 of the Law, you may apply to us toSource 1: 6698 sayılı Kişisel Verilerin Korunması Kanunu:
- learn whether your personal data is processed
- request information about the processing if it is
- learn the purpose of processing and whether the data is used in line with it
- know the third parties in Türkiye or abroad to whom it is transferred
- request correction if it is incomplete or inaccurate
- request erasure or destruction under the conditions in Article 7 of the Law
- request that corrections, erasure and destruction be notified to the third parties who received the data
- object to a result against you that arises solely from automated analysis of the data
- claim compensation if you suffer damage from unlawful processing
How do you apply?
Applications must be made in Turkish, by one of these routesSource 4: Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ (RG 10.03.2018, 30356):
- In writing to [[DOLDUR: adres]]
- By registered email (KEP), secure electronic signature or mobile signature to [[DOLDUR: KEP adresi (varsa)]]
- From an email address you have previously given us and that is registered in our system, to info@kaynaq.com
Your application must include your name (and signature if in writing), your Turkish ID number if you are a Turkish citizen (or your nationality and passport or ID number if you are not), your address for notifications, your email and phone number if any, and the subject of your requestSource 4: Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ (RG 10.03.2018, 30356).
We conclude applications free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. If the action involves an additional cost, the fee in the tariff set by the Board may be chargedSource 1: 6698 sayılı Kişisel Verilerin Korunması KanunuSource 4: Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ (RG 10.03.2018, 30356).
If your application is rejected, you find our answer insufficient or we do not answer in time, you may complain to the Personal Data Protection Board within 30 days of learning of our answer, and in any case within 60 days of your applicationSource 1: 6698 sayılı Kişisel Verilerin Korunması Kanunu.
If this notice changes
If our processing changes, we update this notice; the date of the last update is shown at the top of the page. Our general privacy practices are in the Privacy Policy.
Sources
- [1]6698 sayılı Kişisel Verilerin Korunması KanunuMevzuat Bilgi Sistemi · accessed: 26 September 2026
- [2]Aydınlatma Yükümlülüğünün Yerine Getirilmesinde Uyulacak Usul ve Esaslar Hakkında Tebliğ (RG 10.03.2018, 30356)Mevzuat Bilgi Sistemi · accessed: 26 September 2026
- [3]Yurt dışına aktarımKişisel Verileri Koruma Kurumu · accessed: 26 September 2026
- [4]Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ (RG 10.03.2018, 30356)Mevzuat Bilgi Sistemi · accessed: 26 September 2026
Updates and corrections
No corrections on this page yet. If you spot an error, write to us; we publish every fix here with its date.