Last updated: June 30, 2026
Data Protection Notice (GDPR & KVKK)
Data protection notice by Kordevo Soft Sp. z o.o. on the processing of personal data — GDPR (RODO) primary, Turkish KVKK complementary.
1. Data Controller / Administrator
This notice is provided to inform you about the processing of your personal data under GDPR Articles 13-14 and KVKK Article 10. The data controller (administrator under RODO) is KORDEVO SOFT Spółka z ograniczoną odpowiedzialnością (KORDEVO SOFT Sp. z o.o.), established in Poland. • KRS 0001251108 · NIP 7272902217 · REGON 54512385800000 • Address: Łąkowa 7A, 90-562 Łódź, Polska • Email: info@kordevoyazilim.com · Phone: +48 793 701 398 Your requests are generally answered within one month under GDPR Art. 12 (thirty days under KVKK) from receipt.
2. Legal Framework
The primary legal framework is the directly applicable EU General Data Protection Regulation (GDPR — "RODO" in Poland). As the data controller is an EU (Polish) company, the GDPR applies regardless of the visitor's location. For visitors accessing from Türkiye whose data is processed in Türkiye, the Turkish Law No. 6698 (KVKK) applies as a complementary framework. Where the two conflict, the provision more protective of the data subject prevails.
3. Data Processed and Purposes
Identity (full name), contact (email, phone, WhatsApp), customer transaction (company/project name, request, budget, correspondence), and transaction security (IP, browser, server logs) data are processed to respond to contact requests, provide proposals, establish and perform contracts, fulfil legal obligations, and ensure site security. Analytics data relies solely on your explicit consent. Special category data is not processed.
4. Legal Bases
GDPR Art. 6: contract (6(1)(b)), legal obligation (6(1)(c)), legitimate interest (6(1)(f)), and consent (6(1)(a)). KVKK Art. 5: contract (5/2(c)), legal obligation (5/2(ç)), legitimate interest (5/2(f)), and explicit consent (5/1). Detailed explanations of purposes, legal bases, recipients, international transfers, and retention periods are set out in the Privacy Policy.
5. Recipients and International Transfers
Data may be transferred to hosting (Vercel Inc.), email delivery (Resend Inc.), and security/analytics (Google LLC) providers. Transfers to the USA are carried out with safeguards under Chapter V of the GDPR via EU Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework. Where legally required, data may be shared with competent public authorities.
6. Your Rights
Under GDPR Art. 15-22 you have rights of access, rectification, erasure (to be forgotten), restriction, portability, objection, not to be subject to solely automated decisions, and to withdraw consent. The corresponding rights under KVKK Art. 11 are reserved. To exercise your rights, contact info@kordevoyazilim.com, including information to verify your identity.
7. Complaint to a Supervisory Authority
Poland/EU: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw — uodo.gov.pl. Türkiye: Personal Data Protection Authority (KVKK) — kvkk.gov.tr. It is recommended to first submit your request to the data controller before lodging a complaint.
8. Updates
This notice may be updated in line with changes in legislation or data processing activities. The current version is published at https://kordevoyazilim.com/en/privacy-notice.