Privacy and data protection notice
Under Turkish Personal Data Protection Law (KVKK, No. 6698) and the GDPR, this notice explains what personal data botafix.com processes and why. The cookie policy is in section 8.
1. Data controller
This notice is issued by Işıl Akgündüz Artifitech as data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the GDPR, and explains how personal data of botafix.com (“the Site”) visitors is processed. The Site's use of cookies is explained in section 8.
The Site is a marketing site; there is no membership, login or payment. This notice covers only personal data processed through botafix.com.
| Field | Detail |
|---|---|
| Data controller | Işıl Akgündüz Artifitech (a sole proprietorship registered in Türkiye) |
| Trademark | Botafix is a trademark registered to Işıl Akgündüz; it is not a separate legal entity |
| Address | Aksoy Mah. Yalı Blv. No:386 İç Kapı No: 386, Karşıyaka / İzmir, Türkiye |
| Data protection enquiries | info@artifitech.com.tr |
| Web | artifitech.com.tr |
2. What we process and why
The Site collects only the data required to provide the service. It comes from two sources: the contact form and the server's access logs.
- Information sent through the form is not written to a database; it reaches the controller directly as an email and is kept in the mailbox.
- No special categories of personal data (health, religion, biometrics and the like) are collected or requested.
| Data | When it is collected | Purpose |
|---|---|---|
| First and last name | When the contact form is submitted | Replying to the enquiry |
| Email address, phone number | When the contact form is submitted | Getting in touch |
| Company name | When the contact form is submitted | Assessing the enquiry correctly |
| “How did you hear about us?” | When the contact form is submitted (optional) | Measuring our channels |
| Message | When the contact form is submitted | Answering the enquiry |
| IP address, browser, requested URL and time | On every visit, as a server log entry | Security, error tracking and access logging required by Turkish Law No. 5651 |
3. Legal basis
No processing on the Site relies on consent; there is no consent checkbox and no cookie banner.
- Steps taken at your request prior to entering into a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)): answering the enquiry sent through the contact form.
- Legitimate interest (KVKK art. 5/2-f; GDPR art. 6(1)(f)): assessing the enquiry correctly, preventing abuse, improving the service.
- Legal obligation (KVKK art. 5/2-ç; GDPR art. 6(1)(c)): server access logs kept under Turkish Law No. 5651, and requests from public authorities.
4. Recipients and transfers abroad
Data is never sold or transferred to third parties for marketing purposes. It may be shared only as far as running the service requires, with processors bound by confidentiality.
- Transfers abroad: the Site is hosted in Türkiye; information sent through the contact form and the server access logs are stored and processed in Türkiye and are not transferred abroad.
| Provider | What for | Which data | Location |
|---|---|---|---|
| Çizgi Telekomünikasyon A.Ş. (Turhost) | The server the Site runs on; sending the contact form notification by email and the mailbox that receives it | Requests to the Site (IP address, browser; access logs kept under Turkish Law No. 5651) and information sent through the contact form | Türkiye, Türk Telekom Gayrettepe data centre, Beşiktaş, Istanbul |
| Cloudflare, Inc. | Domain name resolution (DNS) only; site traffic does not pass through Cloudflare | The domain name query (it comes from your browser's DNS resolver and contains no personal data relating to the Site) | Global network |
| Public authorities | Only upon a lawful request | As much as the request requires | Türkiye |
5. Retention periods
The Site holds no accounts, orders or payment records. At the end of the period, data is deleted, destroyed or anonymised.
| Data | Period |
|---|---|
| Contact form records (in the mailbox) | 2 years after the enquiry is closed |
| Server access logs | 2 years (required by Turkish Law No. 5651) |
6. Security
Connections are encrypted with TLS. The marketing site has no database connection; the only record kept is the server's access log, accessible only to the server administrator.
The contact form is protected without a third-party verification service: a hidden field and a server-side hourly submission limit. This protection sets no cookie and makes no outbound request.
No system is absolutely secure; in the event of a breach, the Turkish Data Protection Authority is notified within 72 hours under KVKK art. 12 and affected individuals are informed.
7. Your rights
Under KVKK art. 11 and the GDPR you have the right to:
- learn whether your personal data is processed and request information about it,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties it is transferred to at home or abroad,
- request correction of incomplete or inaccurate data,
- request erasure or destruction where the conditions are met,
- request that correction, erasure and destruction be notified to third parties,
- object to a result produced solely by automated analysis (no such processing takes place on the Site),
- claim compensation for damages caused by unlawful processing.
- How to apply: send your request, in a form that allows your identity to be verified, to info@artifitech.com.tr or to the postal address in section 1. Requests are answered free of charge within 30 days at the latest. If a request is refused, the answer is inadequate or no answer is given in time, you may complain to the Turkish Data Protection Authority.
8. Cookies and similar technologies
The Site does not use cookies. As there is no membership or login, there is no session cookie either; no advertising, tracking or profiling cookies are used. For this reason no cookie consent banner is shown.
- Visitor measurement: there is no third-party measurement or advertising tool on the Site; only the server's own access logs are kept (as required by Turkish Law No. 5651).
- Embedded content: no video, map, font or social media widget from another site is embedded in these pages. The Instagram and WhatsApp links are links only; nothing is requested unless they are clicked.
- Bot protection: the contact form is protected without a third-party verification service, using a hidden field and a server-side request limit; it sets no cookie.
- Blocking cookies in browser settings does not affect how the Site works.
9. Commercial electronic messages
No campaign or newsletter emails are sent through the Site, and the form contains no consent box for them. A reply to a contact form enquiry is an answer to that enquiry and is not a commercial electronic message under Turkish Law No. 6563.
Should a newsletter be offered in future, consent will be collected with a separate, optional box; information sent through the form is not extended to that purpose.
10. Changes
This notice is updated as the service or the infrastructure changes; the effective date is shown at the top of the page.
This notice is not legal advice; it was prepared to meet the controller's duty to inform under KVKK.