Privacy policy
This privacy policy explains how Cloud Bilişim collects, uses, shares, protects and retains personal data through www.cloudbilisim.com.tr. It also explains your rights and how to contact us about your data.
Our goal here is not to leave a long text in legal language, but to write clearly what is actually on the site. Therefore, the lists below are the exact equivalent of the tools we use on the site: which cookie is placed, where which data goes, which one does not exist at all.
Effective date: August 25, 2026
Who and What Does This Policy Cover?
The policy applies to everyone who visits the site. There is no membership, shopping, payment, or newsletter subscription on the site; therefore, the only direct data collected from the visitor in the contact form They are information. Data outside this are automatically generated for the operation, security, and visitor statistics of the site.
The websites, e-commerce systems, and custom software we develop for our clients are outside the scope of this policy; in those systems, the data controller is the relevant client company.
Which Data Do We Collect?
All of the data collected on the site is in the table below. The table was prepared by verifying it through the site’s live source.
| Data | How is it collected | For what |
|---|---|---|
| Name, email address, phone number, message content | When you fill out the contact form | To respond to your request, prepare an offer |
| IP address, browser and device information, request time | Server and Cloudflare access logs, automatic | Security, prevention of misuse, error tracking |
| Bot protection signals: IP, browser features, interaction on the form | Cloudflare Turnstile, only when submitting the form | To prevent the form from being filled out by automated software |
| Pages viewed, source of visit to the site, device type, approximate location at the city level | Google Analytics 4, with cookie and measurement requests | Seeing which content works, improving the site |
| Preference record, for example your cookie choice | Cookie stored in your browser | Not asking your choice again on each visit |
Even those not on the site have informational value: advertising pixel (Meta/Facebook, LinkedIn, TikTok, and similar), advertising network cookie, profiling, automated decision making, purchase or payment data, a feature that requests location permission none. We do not sell your data under any circumstances, nor do we transfer it to third parties for marketing purposes.
For What Purpose and Under What Legal Basis Do We Process Data?
| Processing activity | Purpose | Legal basis in KVKK |
|---|---|---|
| Contact form records | Response to request, pre-offer and contract discussion | Article 5/2-c — directly related to the establishment or performance of the contract |
| Server and security logs, bot protection | Security of the site and visitor data | Article 5/2-f — legitimate interest |
| Visitor statistics (Google Analytics) | Content and performance improvement | Explicit consent — when you give cookie approval |
| Legal retention and information obligations | Compliance with legislation | Article 5/2-a and 5/2-ç — prescribed by laws, legal obligation |
How We Use Cookies?
The site uses mandatory (security and technical) cookies as well as analytical cookies that depend on your consent. We have detailed on a separate page which cookie does what, how long it lasts, and how to withdraw your consent: Cookie Policy.
Who Do We Share Your Data With?
We only share your data with service providers that we use for the site to function, only to the extent required by the service:
- Cloudflare — site traffic passes through this infrastructure; it provides security, acceleration, and bot protection (Turnstile) services.
- Google — with Google Analytics 4 for visitor statistics; embedded Google Maps component on the contact page.
- Our Hosting Provider — server and email infrastructure.
- Authorised public institutions and organisations — only in cases where the legislation requires it and within the limits of the request.
Transfer abroad: Since Cloudflare and Go operate on Google’s global infrastructures, this data may be processed on servers abroad. The transfer is based, under KVKK Art. 9, on your consent for analytic data and on technical necessity for security data.
How Long Do We Keep the Data?
| Data | Retention period |
|---|---|
| Contact form record and correspondence | 2 years from the closing of the request |
| Server and security access logs | 1 year |
| Google Analytics visit data | 14 months, automatically deleted on the Google side |
| Cookie preference record | 6 months, then asked again |
| Records arising from the contract and invoice relationship | Mandatory period in legislation, up to 10 years |
At the end of the period, the data is deleted, destroyed, or irreversibly anonymized.
How Do We Protect Your Data?
The site uses HTTPS for all traffic, administrative access is limited and recorded, updates are regularly applied, form submissions pass through bot protection, and backups are kept encrypted. Since cybersecurity is our daily business, we apply the same approach on our own site; on the corporate side, we explain these topics 5651 logging solutions in detail on the page.
Visiting from the European Union or Switzerland?
We also provide services in Europe through our Lausanne office. For visits from the EU (GDPR) and Switzerland (nLPD), analytics and advertising categories are by default rejected at the browser level unless you give consent. Under GDPR, you can exercise your rights to access, correction, deletion, restriction of processing, data portability, and objection through the same communication channels.
Are Children’s Data Being Collected?
The site is aimed at corporate IT services and does not contain content for children. We do not knowingly collect data from children; if such a record occurs, we delete it without delay.
What Are Your Rights and How Do You Use Them?
Article 11 of KVKK grants a series of rights, including learning whether your data has been processed, requesting information, correcting, deleting, knowing the recipients to whom it has been transferred, and requesting compensation for damage. The full list of rights and how to apply is written on the KVKK Disclosure Text page. You can send your applications to [email protected] and you will receive a response within 30 days at the latest.
Does this Policy Change?
The policy also changes when the tools we use on the site change. In updates, we renew the effective date, and in case of a comprehensive change, we indicate it separately at the top of the page. If you see a statement that does not exactly reflect the current status of the site, write to us so we can correct it.
Frequently Asked Questions About Privacy
Are there advertisements or social media pixels on the site?
No. The site does not have advertising or social media tracking pixels, advertising network cookies, or remarketing tags like Meta/Facebook, LinkedIn, TikTok. The only components that send data outside the site are Google Analytics, the embedded Go Google Maps on the contact page, and Cloudflare security services.
Where do my data go when I fill out the contact form?
The form submission is stored in the site’s database and simultaneously sent via email to [email protected]. Only the team responsible for handling your request has access to the record; it is not added to a marketing list or shared with third parties.
Why does a security verification appear on the form?
We use the Cloudflare Turnstile for form submissions. It prevents automatic software from filling out the form; while doing this, it transmits your IP address and browser characteristics to Cloudflare. Unlike traditional CAPTCHAs, it does not require any action from most visitors.
Are my data transferred abroad?
Yes, partially. Cloudflare and Google operate on global infrastructures; security logs and analytical data can be processed on servers abroad. On the analytics side, this transfer only occurs if you give cookie consent.
Can I completely disable analytics tracking?
Yes. You can change your choice on the cookie banner at any time; Google Analytics cookies will not be set if you withdraw analytic consent. It is also possible to block cookies from your browser settings or install Google’s official opt-out plugin for Go. Steps are on the Cookie Policy page.
How long do you retain my data?
We retain contact form records for 2 years from the closure of the request, server and security logs for 1 year, and Google Analytics data for 14 months. If a contractual relationship is established, longer periods prescribed by the regulations may apply.
Can I request the deletion of my data?
Yes. It is enough to write your request to [email protected]; your deletion request under Article 11 of KVKK will be processed within 30 days at the latest. Access to records with statutory retention obligations is restricted until the period expires, and the record is deleted at the end of the period.
Who is the data controller in the project we are a customer of?
In the website, e-commerce system, or custom software we developed for you, you are the data controller; we are in the position of data processor. This policy only covers our own corporate site. We also provide additional support for KVKK compliance in your projects, you can contact us.