At Netbold Web Agency, we care about the security of your personal data. This notice explains, under Turkey's Personal Data Protection Law No. 6698 (“KVKK”), the purposes for which your personal data is processed, with whom it is shared, how long it is retained, and what rights you have.
Data Controller
Under Law No. 6698 (KVKK), your personal data is processed by Netbold Web Agency as the data controller, within the scope of the contact details below.
- Data Controller
- Netbold Web Agency
- Address
- Ayazağa, Vadi İstanbul, Azerbaycan Cd. No:9 D:69, 34396 Sarıyer / İstanbul
- Phone
- (0540) 560 34 44
- info@netbold.com.tr
- Website
- www.netbold.com.tr
Definitions
The key terms used in this text carry the following meanings:
- Personal Data
- Any information relating to an identified or identifiable natural person (name, email, phone, IP address, etc.).
- Special Category Personal Data
- Data categories that are protected more strictly and listed in KVKK Art. 6, such as health, religion, ethnicity, and biometric data.
- Data Subject
- The natural person whose personal data is processed; “you” in this text.
- Data Controller
- The party that determines the purposes and means of processing and is responsible for setting up and managing the data recording system; here, Netbold Web Agency.
- Data Processor
- The party that processes data on behalf of the data controller under its authorization (e.g. a hosting or email provider).
- Processing
- Any operation such as obtaining, recording, storing, transferring, or deleting data.
- Explicit Consent
- Consent given freely and based on information, regarding a specific matter.
- Disposal
- Erasure, destruction or anonymization of personal data.
Personal Data Processed
Depending on how you use our website and how you communicate with us, the following categories of personal data may be processed:
- Identity information: first and last name.
- Contact details: email address, phone number.
- Request/complaint details: the message content and service topic you send via the contact form or email.
- Marketing/consent information: for newsletter subscriptions, your email address, your opt-in/opt-out status for commercial electronic messages, and your cookie preferences.
- Transaction security and technical data: IP address, browser and device information, visit/click history, cookie records, server log records.
Our website is not intended to collect special categories of personal data (health, religion, ethnicity, etc.). Please do not share such data in the contact form or your messages.
Purposes of Processing and Legal Bases
Your personal data is processed for the following purposes, based on the legal grounds set out in Article 5 of the KVKK:
- Responding to your contact and quote requests and carrying out the quote and service process — legal basis: formation/performance of a contract and legitimate interest (art. 5/2-c,f).
- Ensuring the security, operation, and performance of the website — legal basis: legitimate interest and legal obligation (art. 5/2-f, ç).
- Measuring visitor behavior and improving the quality of our service through analytics cookies subject to your explicit consent — legal basis: explicit consent (art. 5/1).
- Running interest-based advertising and remarketing through marketing/advertising cookies subject to your explicit consent — legal basis: explicit consent (art. 5/1).
- Sending e-newsletters and commercial electronic messages with your explicit consent — legal basis: explicit consent (art. 5/1) and Law No. 6563.
- Fulfilling legal obligations and responding to legal requests — legal basis: legal obligation and the establishment/protection of a right (art. 5/2-ç, e).
Method of Collecting Personal Data
Your personal data is collected electronically through the contact you establish via the contact form, e-newsletter form, email, phone and WhatsApp on our website; and also by automated means during your visit to the site (cookies, server log records and embedded third-party services).
Transfer of Personal Data
Your personal data may be transferred to the following parties, limited to the purposes above and with the necessary security measures in place:
- Hosting provider: our website and email infrastructure are hosted on servers located in Turkey by Güzel.net (guzel.net.tr).
- Analytics and advertising providers: with your explicit consent, measurement/advertising services such as Google Analytics and Google Ads.
- Maps service: an embedded Google Maps is used on the contact page to show our office location; this service may set Google cookies.
- Authorized institutions and organizations: judicial and administrative authorities, where required by law.
Cross-Border Transfers
Since our servers are in Turkey, your communication and form data is stored domestically. That said, services like Google Analytics, Google Ads and Google Maps may process data through providers whose servers are located abroad (e.g. the USA); this constitutes a transfer abroad.
These transfers are carried out under Article 9 of the KVKK and the related regulation, provided that your explicit consent exists or appropriate safeguards (standard contracts, etc.) are in place. If you do not consent to analytics and advertising cookies, these services do not run and no transfer takes place.
Note: The rules on cross-border data transfers changed in Law No. 6698 in 2024; our practice is updated in line with the legislation in force.
Commercial Electronic Messages (Newsletter)
We add your email address to our newsletter form only if you give explicit consent, and under Law No. 6563 on the Regulation of Electronic Commerce we send you digital marketing, campaign and content newsletters.
- As required by law, your consent is recorded through the Message Management System (İYS).
- You have the right to unsubscribe (opt out) free of charge at any time, within every message and through the İYS.
- Your opt-out request is carried out within 3 business days at the latest, after which no commercial electronic messages will be sent to you.
Cookies
Our website uses essential, analytics, and marketing cookies. Essential cookies are required for the site to function and don't need consent; analytics and marketing cookies run only with your explicit consent. You can change your cookie preferences at any time from the cookie panel on the site. For details, see our Cookie Policy page.
Retention Period
Your personal data is retained for as long as necessary for the purpose it was processed and throughout the statute-of-limitations periods set out in the relevant legislation; at the end of that period it is deleted, destroyed or anonymized. Our general retention principles:
- Contact/quote requests: until the request is resolved + a maximum of 3 years against potential disputes.
- Newsletter data: kept for as long as your subscription continues; deleted within a reasonable time after you unsubscribe.
- Cookie and log records: kept for the lifetime of the relevant cookie and as long as legal log-retention obligations require.
Data Security
Technical and administrative measures are taken to prevent the unlawful processing of your personal data and unauthorized access to it:
- Technical: secure connections (SSL/TLS), up-to-date server and software security, access authorization, and logging.
- Administrative: limiting data access to authorized personnel only, confidentiality obligations, and the principle of data minimization.
Children's Personal Data
Our website is not intended for children, and we do not knowingly collect personal data from anyone under 18. If you are under 18, please do not use the contact or subscription forms without the consent of a parent or guardian.
Automated Decision-Making and Profiling
No decision producing legal effects concerning you, or significantly affecting you, is made solely by automated systems. Analytics and advertising cookies that depend on your explicit consent may involve limited profiling solely for aggregate/anonymous measurement and interest-based advertising; you can stop this profiling by declining these cookies.
Data Breach Notification
If your personal data is unlawfully obtained by others, we report the situation as soon as possible to the affected individuals and to the Personal Data Protection Board, in accordance with KVKK art. 12.
Your Rights Under KVKK
Under Article 11 of KVKK, you may apply to the data controller to exercise the following rights:
- To learn whether your personal data is being processed,
- To request information if data has been processed,
- To learn the purpose of processing and whether the data is used in line with that purpose,
- to know the third parties to whom data is transferred, whether domestically or abroad,
- Requesting correction if it has been processed incompletely or incorrectly,
- to request its deletion or destruction in accordance with the regulations,
- Requesting that corrections/deletions be communicated to the third parties to whom the data was transferred,
- to object to a result reached against you solely through analysis by automated systems,
- To request compensation if you suffer damage due to unlawful processing.
How to Apply
You can submit requests regarding your rights, together with information that confirms your identity, by email to info@netbold.com.tr or in writing to Ayazağa, Vadi İstanbul, Azerbaycan Cd. No:9 D:69, 34396 Sarıyer / İstanbul. Depending on the nature of the request, your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest; if the process requires an additional cost, the fee set in the tariff determined by the Board may be charged.
Your application should include your full name, a signature if it’s in writing, your Turkish ID number, an address for notification, and the subject of your request (Communiqué on the Procedures and Principles of Application to the Data Controller).
Changes to This Policy
This Privacy Policy and Privacy Notice may be revised in line with legislative changes and updates to our services. The current version is published on this page with the “Last updated” date above.