Privacy policy

We do not sell your personal data and we do not share it with anyone except in the cases described in this policy. We see protecting our users' privacy as a fundamental responsibility, and we remain committed to this principle and to being as transparent as possible.

In this policy, "KUTBU", "we", "us" or "our" means KUTBU YAZILIM BİLİŞİM TEKNOLOJİ SANAYİ VE TİCARET A.Ş., located at Küçükbakkalköy Mahallesi, Sonay Sokak, No: 6, Kat: 4, 34750 Ataşehir, İstanbul, Türkiye. KUTBU acts as the data controller when processing your personal data. This policy explains in plain language how, why and when we process your personal data, as well as your rights and our obligations. Our general principle is to collect only the information necessary to provide you with our products and services. For detailed information under Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu), see our "Personal data protection notice" page.

Under Law No. 6698 on the Protection of Personal Data (KVKK), personal data means any information relating to an identified or identifiable natural person. This includes your name and surname, email address, phone number and online identifiers such as your IP address. For our visitors located in the European Union, the EU General Data Protection Regulation ("GDPR") is also taken as a basis to the extent it applies; the GDPR similarly defines personal data as any information relating to an identified or identifiable natural person.

We obtain your personal data in the following ways: - when you fill in the contact, feedback, application and newsletter forms on the www.kutbu.com website, - when you contact us by email or phone, - when you conclude a contract to use our services and manage your account on KUTBU ID (https://id.kutbu.com), - when you visit the site: your IP address and server logs automatically, and analytics data only if you allow it.

We do not collect more than is needed to provide our products and services: - In forms and correspondence: your name and surname, email address, optionally your phone number, the service or topic you are interested in and your message. - For the newsletter: your email address and consent record. - For security: your IP address, server logs and the CSRF token that secures forms. - For our customers: contract, invoice and payment records. - If you allow it: analytics data on the use of the site through Google Analytics. We do not track you for advertising purposes; no advertising or marketing cookies or pixels are used on our site. Our site does not collect or store card details. A detailed breakdown of which data we process, for what purposes and on what legal grounds, is available on our "Personal data protection notice" page.

We use your personal data only to respond to your requests, prepare quotes, conclude and perform the service contract, provide support, issue invoices, fulfil our legal obligations, keep our site secure and, if you consent, send you our newsletter and measure the use of the site. We do not sell your data. We do not disclose or share your data except with the service providers, business partners and competent authorities specified in this policy and on our "Personal data protection notice" page.

Your data are shared only with the following recipients and only to the extent necessary: - Our service providers: cloud hosting, delivery of form submissions as emails (Postmark) and, if you allow it, site analytics (Google Analytics). - A licensed payment institution, where card payment is chosen. - Our business partners: only where necessary to provide the service you request. - Competent public institutions and organisations and judicial authorities: in the cases provided for by law.

As the infrastructure of some of the service providers we use is located outside Türkiye, your data may be transferred abroad. These transfers are made in accordance with the conditions set out in Article 9 of the KVKK and, for visitors in the European Union, with the international transfer provisions of the GDPR to the extent it applies. Details are available on our "Personal data protection notice" page.

We retain your personal data for the period prescribed by the relevant legislation or required by the purpose of processing. Your newsletter data are kept until you withdraw your consent, and analytics cookies until you withdraw your consent or they expire. When these periods end, your data are deleted, destroyed or anonymised.

Under Article 11 of the KVKK, you have the right to learn whether your personal data are processed; to request information if they have been processed; to learn the purpose of processing and whether they are used in accordance with that purpose; to know the third parties to whom they are transferred; to request their correction if processed incompletely or inaccurately; to request their deletion or destruction under the conditions set out in the Law; to request that these operations be notified to the third parties to whom they were transferred; to object to a result against you arising from analysis exclusively by automated systems; and to request compensation for damage suffered due to unlawful processing. Our visitors located in the European Union also have, to the extent the GDPR applies, the rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw your consent at any time for processing based on consent. You can send your requests to merhaba@kutbu.com or through the other application channels listed on our "Personal data protection notice" page. We may ask you to verify your identity before fulfilling your request. Customers can view and update their account details on KUTBU ID (https://id.kutbu.com). If you are not satisfied with the outcome of your application, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). Our visitors located in the European Union may also contact the data protection authority of their country.

We take and maintain appropriate technical and administrative measures to protect your personal data against unauthorised access, alteration, disclosure or destruction: - System access controls: access to our systems is restricted, depending on the nature of the processing, by methods such as passwords and two-factor authentication, documented authorisation processes and access logging. - Data access controls: personal data can be accessed only by personnel authorised for their role and only to the extent they need. - Transmission controls: data transmitted between our site and your browser travel over an encrypted connection (HTTPS); forms are protected by CSRF protection and rate limiting. - Data minimisation: forms submitted through the site are not stored in a website database, and only the necessary data are collected. - Backup and separation: in systems hosted by us, data are backed up regularly and data collected for different purposes are processed separately.

You are not obliged to provide us with your personal data. However, as this information is necessary for us to respond to your requests or provide our services, we may not be able to offer some or all of our services if you do not provide it.

Our website and services are not directed at persons under the age of 16, and we do not knowingly collect personal data from them. Service contracts are concluded only with persons who have the legal capacity to contract. If you become aware that someone under the age of 16 has provided us with personal data, please contact us and we will take the necessary steps to delete that data.

Our site uses cookies and browser storage that are strictly necessary for it to work (e.g. form security and storing your cookie preferences), a functional storage entry that remembers your theme preference and, only if you allow it, Google Analytics analytics cookies. No advertising or marketing cookies are used. You can change your preferences at any time via the "Cookie settings" link in the site footer. For details, see our "Cookie policy" page.

We may update this policy as legislation, industry standards or our services change. Changes are published on this page, and the date of the last update is shown at the top of the page. If we make changes that materially affect your privacy rights and we hold your contact details, we will also notify you by email.

For any questions or requests about this policy or your personal data, you can write to merhaba@kutbu.com or apply to Küçükbakkalköy Mahallesi, Sonay Sokak, No: 6, Kat: 4, 34750 Ataşehir, İstanbul, Türkiye.