Demircode Yazılım ve Teknoloji ("Demircode", "we") provides this notice in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform you about the personal data we process through our website (demircode.com) and our communication channels.
1. Data Controller
- Legal name: Demircode Yazılım ve Teknoloji
- Address: Fatih Sultan Mehmet Mah. Balkan Cad. No: 62 A, 34771 Ümraniye/İstanbul, Türkiye
- Email: info@demircode.com
- Phone: +90 543 326 47 77
- Website: demircode.com
2. Personal Data We Process
- Identity: Name and surname
- Contact: Email address, phone number (optional in the quote form); address in order forms; website address (optional) in the contact form
- Customer transaction: Company name, the content of your message, the products and modules you select in a quote request, records relating to the offer and order process; tax number and tax office in order forms
- Transaction security: IP address, browser information (user agent), the Google reCAPTCHA v3 spam risk score, server security logs
- Marketing: Only with your explicit consent: data collected through analytics and advertising cookies and, if you arrive through an advertising campaign, the campaign information (utm_source, utm_medium, utm_campaign) and Google click ID (gclid) kept in the session storage of your browser during your visit. Campaign information is not saved in our database and is not sent with forms or by email
3. Purposes and Legal Bases of Processing
- Establishment or performance of a contract (Art. 5(2)(c) KVKK): Responding to your quote and contact requests, preparing and sending offers, handling order and contract processes, providing customer support
- Compliance with a legal obligation (Art. 5(2)(ç) KVKK): Keeping commercial books, invoices and accounting records; responding to requests from competent authorities
- Our legitimate interest, provided that your fundamental rights and freedoms are not harmed (Art. 5(2)(f) KVKK): Ensuring website and form security, preventing spam and automated submissions, following up on your requests and the offer process (including reminder emails about your offer)
- Explicit consent (Art. 5(1) KVKK): Analytics and advertising measurement (Google Analytics 4, Google Ads), including keeping campaign information in your browser (analytics and marketing cookies); your consent is given through your cookie choices and can be withdrawn at any time
4. Method of Collection
Your personal data is collected electronically through the quote, contact and order forms on our website, through cookies and similar technologies, and by email and telephone, by fully or partially automated means or, where it forms part of a data recording system, by non-automated means.
5. Transfer of Personal Data
Your personal data may be transferred to the following recipients, limited to the purposes above and in accordance with Articles 8 and 9 KVKK:
- Our hosting provider: Our website and database are hosted in a data centre in Germany (Contabo GmbH); the data you submit through our forms is stored on these servers
- Google (Google LLC / Google Ireland Limited): Business email service (Google Workspace), through which form notification emails are delivered; form security (reCAPTCHA v3); analytics and advertising measurement only with your explicit consent (Google Analytics 4, Google Ads); the map on our contact page (Google Maps); product videos only when you click play (YouTube)
- Competent public authorities: Within the scope of our legal obligations and upon request of legally authorised bodies
Transfers abroad: Because our website and database are hosted on servers in Germany (Contabo GmbH), personal data processed through our website, including the data you submit through our forms, is stored outside Türkiye. In addition, personal data processed through Google services may be processed on Google servers outside Türkiye. Such transfers are carried out under Art. 9 KVKK on the basis of the appropriate safeguards provided for by law (e.g. standard contractual clauses) or, for cookie-based analytics and advertising services, on the basis of your explicit consent.
6. Retention Periods
- Contact and quote form data: Up to 2 years after our last interaction, unless a contract follows
- Contract, invoice and accounting records: For the statutory retention periods (10 years under the Turkish Commercial Code)
- Cookie consent records: 2 years
- Server security logs: For the short period required for security purposes
When the retention period expires, the data is erased, destroyed or anonymised.
7. Your Rights under Article 11 KVKK
- Learn whether your personal data is being processed
- Request information about the processing if your personal data has been processed
- Learn the purpose of the processing and whether your data is used in line with that purpose
- Know the third parties in Türkiye or abroad to whom your personal data has been transferred
- Request the rectification of your personal data if it is incomplete or inaccurate
- Request the erasure or destruction of your personal data under the conditions set out in Art. 7 KVKK
- Request that any rectification, erasure or destruction be notified to the third parties to whom your personal data has been transferred
- Object to a result to your detriment arising from the analysis of your data exclusively by automated systems
- Claim compensation for damage suffered as a result of the unlawful processing of your personal data
Visitors located in the European Union or the European Economic Area can find their rights under the GDPR in our Privacy Policy.
8. How to Apply
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit requests regarding your rights as follows:
- In writing: By delivering your application with a wet-ink signature in person or by sending it by post to Fatih Sultan Mehmet Mah. Balkan Cad. No: 62 A, 34771 Ümraniye/İstanbul, Türkiye
- Electronically: By email to info@demircode.com, sent from the email address you have previously notified to us and that is registered in our system, or signed with a secure electronic signature or mobile signature
Your application must include your name and surname and, for written applications, your signature; for citizens of the Republic of Türkiye, your Turkish ID number, and for foreign nationals, your nationality and passport number or, if any, ID number; your place of residence or business address for notifications; your email address for notifications, if any; your phone number; and the subject of your request.
Your application will be concluded free of charge as soon as possible depending on the nature of the request, and within 30 days at the latest; if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, if you find our response insufficient, or if we do not respond in time, you may lodge a complaint with the Personal Data Protection Board under Art. 14 KVKK.
9. Updates
This notice is updated whenever our personal data processing activities change. Detailed information on the use of our website can be found in our Privacy Policy, and information on cookies in our Cookie Policy.
Last updated: October 15, 2026