Privacy Notice

Data controller

The data controller is ARCWARE. Address: Söğütözü Mah. Söğütözü Cad. No: 2C İç Kapı No: 17, 06530 Çankaya / Ankara, Türkiye. Email: contact@arcware.tr.

Data we process and why

When you visit the site or use the contact form, we process the following data for the purposes stated:

• Identity and contact data (name, email address) and message content: to evaluate your inquiry, reply to you, and set up a potential engagement.
• Transaction security data (server logs such as IP address, browser details, and access time): to keep the site secure, prevent abuse, and meet legal obligations.
• Analytics data (page views and usage information collected through cookies): only if you consent, to understand how the site is used and improve it.

How data is collected and legal bases

Your data is collected electronically through the contact form, server logs, and cookies, and processed on the following legal bases under KVKK Article 5:

• Contact form data: processing is directly related to establishing or performing a contract (Art. 5/2-c), and our legitimate interest in responding to your inquiry (Art. 5/2-f).
• Server logs: processing is necessary to meet our legal obligations (Art. 5/2-ç), and our legitimate interest in keeping the site secure (Art. 5/2-f).
• Analytics cookies: your explicit consent (Art. 5/1). You give it through the cookie notice and can withdraw it at any time with the link on this page.

Transfers, including abroad

Your personal data is shared only with the following service providers, limited to the stated purpose. Because their servers are located outside Türkiye, these are transfers abroad under KVKK Article 9:

• DigitalOcean, LLC (servers in the Netherlands): website hosting and server logs.
• Resend, Inc. (USA): delivering contact form messages to us by email.
• Google LLC (USA): visit statistics through Google Analytics, only if you give explicit consent.

Transfers abroad are made in line with the conditions set out in KVKK Article 9. Otherwise, your data is shared with competent public authorities only where legally required, and it is never used for marketing or sold.

Retention

• Contact form data: up to 2 years after our last correspondence, or for the period required by law if an engagement follows.
• Server logs: for the period required by law, up to 2 years.
• Analytics data: for the retention period set in Google Analytics.

When the period ends, your data is deleted, destroyed, or anonymized.

Your rights

Under KVKK Article 11, you may apply to the data controller to:

• learn whether your personal data is processed;
• request information about it if it is;
• learn the purpose of processing and whether data is used for that purpose;
• know the third parties it is transferred to in Türkiye or abroad;
• request correction of incomplete or inaccurate data;
• request deletion or destruction under the conditions of KVKK Article 7;
• request that corrections, deletions, or destruction be notified to third parties the data was transferred to;
• object to an outcome against you that results exclusively from automated analysis of your data;
• claim compensation if you suffer damage from unlawful processing.

How to apply

To exercise your rights, send your application in line with the Communiqué on the Procedures and Principles of Application to the Data Controller: in writing to the address above, from your registered electronic mail (KEP) address, with a secure electronic or mobile signature, or from an email address you have previously given us and that is in our records, to contact@arcware.tr. Applications are answered within 30 days free of charge; if handling requires a separate cost, the fee set by the Personal Data Protection Board may apply.