Privacy Notice

How and why we process your personal data when you visit this website or contact us, and on what legal basis, under the Turkish KVKK and the EU GDPR.

Last updated:

1. Data controller

Your personal data is processed by Antrek Labs Yazılım ve Bilgi Teknolojileri Ltd. Şti. ("Antrek Labs", "we") as data controller.

  • Registered name: Antrek Labs Yazılım ve Bilgi Teknolojileri Ltd. Şti.
  • Email: professionalservices@antreklabs.com
  • Website: antreklabs.com

2. Personal data we process

Visit statistics (unless you have declined them):

  • Pages and page titles you view, the site or campaign (UTM) that brought you here, time spent on pages, how far you scroll, and the buttons and links you click
  • Your IP address with its last part removed (masked), and the approximate location derived from your IP address: country, region, city, approximate coordinates, time zone and internet provider
  • Browser, operating system, device type and model, screen resolution, browser language and time zone, connection type
  • A visitor identifier that groups your visits within one day. It is derived with a secret key that changes daily and cannot be reversed; it is not stored in your browser and does not let us recognise you across days

When you use the contact form:

  • Identity and contact: full name, email address, phone number (optional)
  • Company information: company name (optional)
  • Request details: request type, the service or product you are interested in (optional), your message, language and time of submission

For security:

  • Your IP address is held in server memory for at most 1 hour to prevent abuse of the form and the admin panel and is not stored; if an unusual submission is detected, it may be written to server logs
  • Before sending, your browser performs a short calculation for bot protection; no cookies or third-party services are used for this
  • We check through DNS whether your email address’s domain can receive email; only the domain is looked up
  • Login attempts to the admin panel (username, masked IP, approximate location, browser details) are recorded for security

Please do not include special categories of personal data (such as health, religious or biometric data) in your message.

3. Purposes

  • Reviewing and answering your request and arranging a call with the right engineer
  • Preparing a proposal or preliminary work for the service or product you asked about
  • Measuring which content on the website is of interest, improving the content and user experience, and assessing the effect of our promotional work
  • Keeping the website, the contact form and the admin panel secure and preventing spam and abuse
  • Meeting our legal obligations and protecting our rights in a dispute

5. How we collect data

Your data is collected electronically and automatically through this website: visit statistics while you browse, request details when you send the contact form. When the form opens an email draft, your details reach us directly through your own email application.

6. Transfers

Your data may be shared, only for the purposes above and to the extent necessary, with:

  • The infrastructure provider that hosts the website and its database (Hostinger International Ltd.; servers in the United Kingdom)
  • The email delivery service that forwards contact form requests to us (SingleMail)
  • Competent public authorities, where required by law

Transfers that take place because servers are located abroad follow Article 9 of the KVKK and the Regulation on the Procedures and Principles for the Transfer of Personal Data Abroad. Location is looked up from your IP address on our own server; your IP address is not sent to a third party for this. We do not sell your data or share it with third parties for marketing.

7. Retention

  • Visit statistics: at most 13 months (395 days); deleted automatically afterwards
  • The daily secret key behind the visitor identifier: 1 day; then deleted, so earlier identifiers cannot be recomputed
  • Enquiries and related correspondence: 2 years from the last contact
  • If the enquiry leads to a contract: the periods required by applicable law (for example 10 years under the Turkish Commercial Code)
  • Admin panel login records: 1 year
  • IP address used for rate limiting: at most 1 hour, in server memory only

When these periods end, the data is deleted, destroyed or anonymised. When you decline visit statistics, the records about you from that day are deleted at once.

8. Your rights under the KVKK

Under Article 11 of the KVKK you may ask us to:

  • Confirm whether we process your personal data
  • Provide information about that processing
  • Tell you the purpose of processing and whether data is used accordingly
  • Tell you the third parties in Türkiye or abroad to which data is transferred
  • Correct incomplete or inaccurate data
  • Delete or destroy data under the conditions of Article 7 of the KVKK
  • Notify third parties to whom data was transferred of a correction, deletion or destruction
  • Object to a result against you that arises solely from automated analysis
  • Compensate damage you suffer from unlawful processing

9. Visitors in the European Union (GDPR)

If you visit from the European Economic Area, your data is also protected by the General Data Protection Regulation (GDPR). Our legal bases are Article 6(1)(b) (steps before a contract) for answering your requests, Article 6(1)(f) (legitimate interests) for visit statistics and security, and Article 6(1)(c) for legal obligations.

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interests. To object to visit statistics, choose "Decline" under "Cookie preferences". You may also lodge a complaint with the data protection authority in your country.

10. How to apply

Send your request to professionalservices@antreklabs.com with enough information for us to verify your identity. We respond free of charge within 30 days at the latest, depending on the nature of the request. If the request involves an additional cost, the fee set by the Turkish Personal Data Protection Board may apply.

11. Changes

We may update this notice when our processing or the law changes. The current version is always published on this page, with the date of the last update at the top.