KVKK Information Notice

1. Data controller

Data controller: Nazım Çeltekli. For any questions or requests about this notice, contact us at merhaba@cinderhash.com.

2. Personal data we process

When you contact us or visit our website, we may process the following data:

• Identity and contact details: full name, email address, phone number, company name.
• Request details: the services you are interested in, your project summary, budget range, maintenance plan preference and the time you confirmed reading the Terms of Service and this notice.
• Security data: your IP address (stored encrypted), browser type, request time, the requested page if access was blocked, and the result of anti-abuse verification.
• Site usage information: pages visited, referring site or campaign, device type, browser, approximate location (city level) and form steps; if you gave analytics consent, also in-page clicks, scroll depth and visit duration and your live online status while you are on the site.

3. Purposes of processing

• Responding to your quote and information requests and communicating with you.
• Conducting pre-contract discussions and preparing quotes.
• Seeing which page or campaign quote requests come from and improving the site.
• Keeping the website and our systems secure and preventing spam and abuse.
• Meeting our legal obligations and protecting our rights in potential disputes.

4. Collection method and legal bases

Your personal data is collected from what you tell us through website forms, email, WhatsApp and similar channels, and automatically while you use the website.

We process it on the following legal bases under Article 5(2) of the KVKK: it is directly related to entering into or performing a contract (c), it is necessary to comply with a legal obligation (ç), it is necessary to establish, exercise or protect a right (e), and our legitimate interests, provided they do not harm your fundamental rights and freedoms (f).

Detailed analytics relies solely on the explicit consent you give in your cookie preferences (KVKK Art. 5/1). You can withdraw it at any time via the “Cookie preferences” link at the bottom of the page.

5. Transfers

Your personal data may be shared, only for the purposes above and only as necessary, with business partners that provide hosting, database, email delivery, security verification, error monitoring and encrypted backup services for the website, and with public authorities legally entitled to request it.

Because some of these providers have servers outside Turkey, your data may be transferred abroad in accordance with Article 9 of the KVKK.

6. Retention

We keep your personal data for as long as the purpose of processing requires and for the periods set by the applicable legislation; after that it is deleted, destroyed or anonymised. Detailed periods are listed in our Privacy Policy.

7. Your rights

Under Article 11 of the KVKK, you have the right to apply to the data controller to:

• learn whether your personal data is processed and, if so, request information about it,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties in Turkey or abroad to whom it is transferred,
• request correction if it is incomplete or inaccurate, request deletion or destruction under the conditions in Article 7 of the KVKK, and request that these actions be notified to the third parties it was transferred to,
• object to a result against you arising solely from automated analysis,
• claim compensation if you suffer damage because of unlawful processing.

8. How to apply

You can send requests about your rights to merhaba@cinderhash.com, together with information verifying your identity, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. We respond within 30 days at the latest; if the request involves an additional cost, the fee set by the Personal Data Protection Board may apply.