Privacy notice

This notice is published under Article 10 of Turkey's Personal Data Protection Law No. 6698 (KVKK) by [Company legal name], the data controller.

Legal name

[Company legal name]

Address

[Registered address]

MERSİS

[MERSİS no]

Email

info@torundigital.com

• Contact form: your name, email address, optionally your phone number and company name, the topic you choose and your message.
• Assistant: when you ask to be contacted through the assistant, your name, email address, optional phone number and a short summary of the conversation, collected in a separate small form.
• Security: a keyed hash of your IP address, to prevent abuse. We do not store the IP address itself.

We use your data only to reply to your request, understand what you need and, if you ask, prepare a proposal. The IP hash protects the form and the assistant from abuse such as automated spam. We do not use your data to send marketing messages, and we never sell it.

Your data is collected electronically, when you send it through the form or the assistant on this site.

The legal basis is that replying to a request you started is directly related to entering into a contract (KVKK Art. 5(2)(c)). The IP hash we keep to prevent abuse rests on our legitimate interest (Art. 5(2)(f)). As none of this relies on your explicit consent, we do not ask you to tick a consent box.

To handle your request we work with the providers below. Some of them are outside Turkey, so your data is transferred abroad within the meaning of KVKK Art. 9.

• Hosting (Hostinger, Frankfurt, Germany): this site and our request database run on Hostinger's server in Frankfurt. The requests you send are stored on that server, which means your data is transferred abroad.
• Email (Google Gmail and Cloudflare, USA): so we can reply, your full request is forwarded to us by email. Mail sent to our company address is routed through Cloudflare to our mailbox on Google's Gmail service; their servers are outside Turkey.
• Telegram: when a new request arrives, we get a Telegram notification with only its number, source (form or assistant), topic and language. Your name, contact details and message are never sent to Telegram.
• Google Gemini: the assistant's replies are generated by Google's Gemini service. What you type to the assistant is sent to Gemini after email addresses and phone numbers in it are masked; your name, email and phone are not sent. Please don't share personal details in your messages to the assistant.

Beyond these, we disclose your data only to public authorities where the law requires it.

Requests, including the IP hash stored with them, are kept for 365 days and then deleted automatically. The counters we use to prevent abuse are deleted within 48 hours.

Under KVKK Art. 11 you can apply to us to:

• find out whether your personal data is processed,
• request information about it if it is,
• learn why it is processed and whether it is used for that purpose,
• know the third parties in Turkey or abroad it is transferred to,
• have it corrected if it is incomplete or wrong,
• have it erased or destroyed under the conditions of KVKK Art. 7,
• have corrections, erasure or destruction passed on to those third parties,
• object to an outcome against you that results solely from automated analysis of your data,
• claim compensation if unlawful processing causes you damage.

Send requests about your rights by email to info@torundigital.com, or in writing to [Registered address]. We answer within 30 days at the latest, free of charge (KVKK Art. 13). If your application is refused, you find our answer insufficient or you get no answer in time, you can complain to the Personal Data Protection Board (KVKK Art. 14).