Privacy Notice

1. Data controller

For the purposes of the KVKK and the GDPR, the data controller is:

2. Personal data we collect

We collect only what we need:

• Information you provide. When you use our contact form or email us, we collect your name, email address, and the content of your message.
• Technical data. Our hosting provider automatically logs limited technical information, such as your IP address, browser type, and the pages you view, for the security and proper operation of the site.

We do not intentionally collect special categories of personal data, and we ask that you do not include sensitive information in your messages.

3. Why we use your data

We process personal data to respond to your enquiries and provide information about our services, to take steps at your request before any possible engagement, to maintain the security and integrity of our website, and to comply with our legal obligations.

4. Legal bases for processing

Under the GDPR, we rely on the performance of steps taken at your request prior to a contract (Article 6(1)(b)), our legitimate interests in responding to enquiries and keeping our site secure (Article 6(1)(f)), and your consent where you voluntarily choose to contact us (Article 6(1)(a)).

Under the KVKK, we rely on the grounds set out in Article 5, in particular processing that is necessary for the establishment or performance of a contract (Article 5/2-c) and processing necessary for our legitimate interests (Article 5/2-f), and, where applicable, your explicit consent (Article 5/1).

5. Sharing your data

We do not sell your personal data. We use trusted service providers who act as data processors on our behalf and only on our instructions, including our website hosting provider (Netlify) and our email and productivity provider (Google Workspace). We may also disclose personal data where required to do so by law or by a competent authority.

6. International transfers

Because our hosting and email providers operate globally, your personal data may be stored or processed on servers located outside Türkiye and the European Economic Area, including in the European Union and the United States. Where this happens, we rely on appropriate safeguards and, for transfers subject to the KVKK, on the transfer conditions set out in that law.

7. How long we keep your data

We keep enquiry data only for as long as needed to respond to you and for a reasonable period afterwards, after which we delete or anonymise it, unless a longer retention period is required by law.

8. Your rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is being processed; to request information about the processing; to learn its purpose and whether the data is used accordingly; to know the third parties to whom it is transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction of your data; to object to any adverse outcome arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.

If the GDPR applies to you, you also have the rights to access, rectification, erasure, restriction of processing, objection, and data portability, and the right to withdraw consent at any time.

To exercise any of these rights, please contact us at gundemir@vivioresearch.com. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, kvkk.gov.tr) or, if you are in the EEA or the UK, with your local data protection supervisory authority.

9. Cookies

Our website currently uses only strictly necessary cookies required for its basic operation and security. We do not use advertising, analytics, or tracking cookies, and we do not build profiles of our visitors. Because we set no non-essential cookies, we do not display a cookie consent banner.

If we introduce analytics or other non-essential cookies in future, we will update this notice and, where the law requires it, ask for your consent beforehand. You can control or delete cookies at any time through your browser settings.

10. Data security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, disclosure, or alteration.

11. Changes to this notice

We may update this notice from time to time. The date shown at the top indicates when it was last revised.

12. Contact

For any question about this notice or about how we handle your personal data, please contact the data controller at gundemir@vivioresearch.com.