Last updated: May 15, 2026
Privacy Notice (KVKK)
Comprehensive privacy notice regarding the processing of personal data through Kordevo website, contact forms, and services, prepared under Turkish Personal Data Protection Law No. 6698.
1. Data Controller
This Privacy Notice has been prepared pursuant to Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK"). The data controller is Kordevo, a digital services brand operated solely by Olcay Düzgün without a separate legal entity. All data subject requests and communications should be directed to info@kordevoyazilim.com. Requests will be responded to within thirty (30) days of receipt in accordance with Article 13 of the KVKK.
2. Personal Data Processed
The following categories of personal data may be processed: • Identity data: First name, last name. • Contact data: Email address, phone number, WhatsApp contact details. • Customer transaction data: Company/project name, request and message content, project scope, budget range, preliminary proposals and correspondence records. • Transaction security data: IP address, browser type and version, operating system, session information, server access logs. • Marketing data (only with explicit consent): Site usage statistics, page views and click data. Special categories of personal data (health, biometric, criminal record, religion, ethnic origin, etc.) are not collected. If such data is transmitted through forms, it will be destroyed immediately without processing.
3. Purposes of Processing
Your personal data is processed for the following purposes: • Responding to contact and information requests, evaluating project needs, and scheduling preliminary meetings. • Managing correspondence and documentation records in the course of establishing and performing service agreements. • Fulfilling legal obligations and complying with requests from administrative and judicial authorities. • Ensuring website security, preventing unauthorized access and misuse. • Storing cookie preferences and maintaining technical operation of the site. • Evaluating analytics data related to site usage within the scope of your explicit consent.
4. Legal Basis for Processing
Personal data is processed on the following legal bases under Article 5 of the KVKK: • Art. 5/2(c) — Necessity for establishment or performance of a contract: Data related to contact requests and project/service processes. • Art. 5/2(ç) — Compliance with a legal obligation: Tax, accounting, and legally mandated retention obligations. • Art. 5/2(f) — Legitimate interests: Website security and transaction security logs (provided they do not prejudice fundamental rights and freedoms). • Art. 5/1 — Explicit consent: Analytics cookies and marketing data processing are conducted solely on the basis of explicit consent.
5. Data Collection Methods
Personal data is collected electronically through automated or semi-automated means via the website contact form, email correspondence, phone and WhatsApp communications, and server access logs. Analytics data processing conducted through automated means is subject to the data subject's explicit consent.
6. Data Transfers
Personal data may be transferred to the following recipient groups, limited to the processing purpose: • Hosting and infrastructure service providers (Vercel Inc. — server services). • Email and messaging service providers (Resend Inc. — form delivery infrastructure). • Security, verification, and bot prevention service providers (Google LLC — reCAPTCHA v3). • Analytics service providers (Google LLC — Google Analytics 4, only with explicit consent). • Legally authorized public authorities and judicial bodies (only when required by law). For international transfers, data is transferred to countries with an adequate level of protection under Article 9 of the KVKK, or based on your explicit consent, or within the framework of standard contractual clauses.
7. Retention Periods
Personal data is deleted, destroyed, or anonymized when the processing purpose ceases or the applicable legal retention obligation expires. Retention periods are as follows: • Contact and project proposal records: Up to 3 (three) years after the request is resolved; up to 10 (ten) years from termination of the service agreement if concluded (Turkish Code of Obligations general limitation period). • Transaction security and server access logs: For the technical security period, maximum 2 (two) years. • Cookie preferences: For the validity period of the cookie preference, maximum 1 (one) year. • Analytics data: Limited to the duration of explicit consent and the retention settings of the relevant service provider.
8. Your Rights
Under Article 11 of the KVKK, you have the following rights: • To learn whether your personal data is being processed. • To request information if your data has been processed. • To learn the purpose of processing and whether data is used in accordance with its purpose. • To know the third parties to whom your data has been transferred domestically or abroad. • To request correction if your data is incomplete or inaccurate. • To request deletion or destruction of your data under the conditions set forth in Article 7 of the KVKK. • To request that corrections and deletions be notified to third parties to whom data has been transferred. • To object to a result arising to your detriment through processing conducted exclusively by automated systems. • To claim compensation for damages arising from unlawful processing of your data. You may submit your requests in writing to info@kordevoyazilim.com, including information to verify your identity. Requests are responded to free of charge under Article 13/2 of the KVKK; if the process requires additional cost, the fee schedule determined by the Personal Data Protection Board may apply.
9. Right to Lodge a Complaint
If you believe your rights have been violated, you are required to submit your request to the data controller first. If no response is received within thirty (30) days, or if the response is deemed insufficient, you have the right to lodge a complaint with the Personal Data Protection Authority (KVKK). Contact details are available at www.kvkk.gov.tr.
10. Policy Updates
This Privacy Notice may be updated in line with changes in legal regulations or developments in data processing activities. The current version is always published at https://kordevoyazilim.com/kvkk. Notification by email may be provided for significant changes.