KVKK privacy notice
This privacy notice explains how Cloud Bilişim processes personal data from website visitors and contact-form users under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK). It covers the data controller, purposes, legal grounds, transfers and your rights.
Effective date: August 25, 2026
Who is the Data Controller?
The data controller Cloud Bilişim is.
- Address: Kartaltepe Neighborhood, Alpay İzer Street No:6 Office:14, Bakırköy / Istanbul
- Email: [email protected]
- Phone: 0532 385 02 17 · 0539 853 39 63
- Web: www.cloudbilisim.com.tr
Our services in Europe are conducted through our office at Rue de la Forge 2, 1410 Lausanne / Switzerland. For requests coming from the European Union or Switzerland, rights under GDPR and nLPD can also be exercised through the same channels.
Which Personal Data of Yours is Being Processed?
| Data category | Processed data | Source |
|---|---|---|
| Identity | Name | Filling out the contact form |
| Contact | Email address, phone number | Filling out the contact form |
| Customer transaction | Message content, subject of request, correspondence history | Forms, emails, and phone calls |
| Transaction security | IP address, browser and device information, access logs, cookie logs, bot protection signals | Server and Cloudflare logs, Cloudflare Turnstile, automatic |
| Marketing / statistics | Viewed pages, source of arrival, device type, approximate location at city level | Google Analytics 4, only when you have given cookie consent |
Does not request or process special category personal data (health, biometric data, etc.). There is no profiling or system that makes automated decisions about individuals on the site.
For What Purposes Are Personal Data Processed?
- Responding to contact requests, answering questions
- Preparation of proposals, conducting pre-contract negotiations
- Provision of the service, monitoring business and contract processes
- Ensuring the security of the site and visitor data, preventing misuse
- Improving site performance and content (only when you approve)
- Fulfilling obligations arising from the legislation to retain information, inform, and provide information to authorised institutions
What is the legal basis of processing?
| Processing | Legal basis under KVKK Art. 5 |
|---|---|
| Contact form, proposals and pre-contract negotiations | 5/2-c — directly related to the establishment or performance of the contract |
| Security records, bot protection, prevention of abuse | 5/2-f — legitimate interest of the data controller |
| Analytical measurement and cookies | Explicit consent — giving consent in the cookie banner |
| Legal retention and information obligations | 5/2-a and 5/2-c — explicitly provided in the laws, legal obligation |
To Whom Are Personal Data Transferred?
Your data may be transferred to the following parties to the extent required for business operations and within the scope of KVKK Articles 8 and 9:
- Our hosting and infrastructure provider — server, database, and email services
- Cloudflare — security, content delivery network, and bot protection (Turnstile)
- Google — Google Analytics 4 measurement and embedded Google Maps component
- Authorised public institutions and organisations — in cases required by legislation, at the request limit
Transfer abroad: Since Cloudflare and Google operate on global infrastructures, transaction security and statistical data may be processed on servers located abroad. The transfer of analytical data is based on your explicit consent, while the transfer of security data is based on the technical necessity of the service.
How Long Are the Data Retained?
- Communication form records and correspondence: 2 years from the closure of the request
- Server and security access logs: 1 year
- Google Analytics visit data: 14 months (automatically deleted by Google)
- Cookie preference record: 6 months
- Records arising from contract and invoice relations: mandatory period in the legislation, up to 10 years
When the period expires, data is deleted, destroyed, or anonymized in an irreversible manner. Details of our retention and destruction approach for all collected data, retention periods, and parties with whom it is shared in the Privacy Policy can be found on the page.
What Are Your Rights under Article 11 of KVKK?
As a data subject, you have the following rights:
- To find out whether your personal data is being processed
- If it has been processed, to request information about it
- To learn the purpose of processing and whether it is used in accordance with the purpose
- Knowing the third parties to whom the data is transferred domestically or abroad
- Requesting correction if it is incomplete or inaccurately processed
- Requesting deletion or destruction when the conditions in the law are met
- Requesting that correction, deletion, and destruction processes be notified to the third parties to whom the data is transferred
- Objecting if an analysis conducted by automatic systems results against you
- Requesting compensation if you have suffered damage due to unlawful processing
How to Apply?
You can submit your requests along with information sufficient to verify your identity through the following methods:
- Email: [email protected]
- Mail: Kartaltepe Neighborhood, Alpay İzer Street No:6 Office:14, Bakırköy / Istanbul
- Form: on our contact page via form
Applications are responded to free of charge within 30 days . If the request additionally requires a cost, a fee specified in the tariff determined by the Personal Data Protection Board may be requested. If your application is rejected or you find the response insufficient, you can file a complaint with the Personal Data Protection Board within 30 days from the date you learn the answer and in any case within 60 days from the application date.
Is There a Separate Text for Cookies?
Yes. It explains which cookie is placed on the site, how long it stays, and how to withdraw your consent Cookie Policy is written in a table on the page. Analytical cookies only work with your explicit consent; if you do not give approval, measurement is carried out anonymously.
Frequently Asked Questions About KVKK
Who does this text cover?
It covers everyone who visits the site and those who use the contact form, or reach us by email or phone. For the data in the systems we develop for our customers, the data controller is the relevant customer company; there, we are in the position of data processor.
How do I apply, and how long does it take to get a response?
You can write to [email protected], send mail to our Istanbul office address, or use the contact form. You need to include information sufficient to verify your identity. The response time is up to 30 days, and the application is free of charge.
When I request the deletion of my data, is everything deleted?
Records without legal retention obligations are deleted. For records such as contracts or invoices, which the legislation requires to be kept for a certain period, access is restricted; when the period expires, the record is deleted or anonymized.
Are my data transferred abroad?
Yes, partially. Since Cloudflare and Go use Google’s global infrastructures, transaction security and statistical data may be processed on servers abroad. On the analytics side, this transfer only occurs if you give cookie consent.
Will marketing emails be sent to me?
No. There is no newsletter subscription on the site, and information received through the contact form is not added to the marketing list. You will only be contacted within the scope of the request you submitted.
Do you perform profiling or automated decision making?
No. There is no system on the site that automatically makes decisions, scores, or creates profiles about a person. Analytical measurement produces aggregate and anonymous statistics; it does not evaluate individuals.
What are my complaint rights?
If your application is rejected or you find the response insufficient, you can file a complaint with the Personal Data Protection Board within 30 days from the date you learn the response, and in any case within 60 days from the date of application.
Do you provide support for our own company's KVKK compliance?
Yes, we do. Data inventory preparation, disclosure and cookie texts, keeping log records in compliance with legislation, and technical measures are topics we work on frequently. The logging side covered by 5651 5651 logging solutions is explained on the page.