Privacy Policy

1. Data controller

IQLOOP Group ("IQLOOP", "we") is the data controller for personal data collected through this website, within the scope of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR").

Company: IQLOOP Group [TODO: legal entity name] Address: Istanbul, Türkiye [TODO: full address] Email: [TODO: privacy contact email]

2. Personal data we collect

• Contact form: name, email address, company, country, the business area you select, and the content of your message
• Technical data: IP address, browser type, date and time of visit, pages viewed (server logs)
• Cookie data: cookie preference; analytics data only if you accept analytics cookies

3. Purposes

• Answering your enquiry and routing it to the relevant team within the group
• Business development and follow-up of commercial relationships you initiate
• Operating, securing and improving the website
• Meeting legal obligations

4. Legal basis

• Explicit consent when you submit the contact form or accept analytics cookies
• Legitimate interest for website security, operation and aggregated analytics
• Pre-contractual steps when your enquiry concerns a product, service or partnership
• Legal obligation where the law requires retention or disclosure

5. Recipients and transfers

• Email delivery: contact form messages are delivered through a self-hosted email service operated by our technical provider and Amazon Web Services (SES, eu-central-1, Frankfurt)
• Hosting: the website runs on infrastructure provided by Hetzner Online GmbH (Germany)
• Analytics: Google Analytics, only if you accept analytics cookies
• Group companies: your enquiry is shared with the relevant business area's team within IQLOOP Group
• Authorities: where required by law

Transfers outside Türkiye are made in line with Article 9 of the KVKK.

6. Retention

Contact form data is retained for 2 years after the enquiry is closed, unless a commercial relationship requires longer retention. Server logs are retained for a limited period for security purposes.

7. Your rights

Under Article 11 of the KVKK (and, where applicable, the GDPR) you may ask us to:

• confirm whether we process your personal data and provide information about it
• explain the purpose of processing and whether it is used accordingly
• tell you the third parties in Türkiye or abroad to whom data is transferred
• correct incomplete or inaccurate data
• delete or destroy data under the conditions of Article 7 of the KVKK
• notify third parties of corrections or deletions
• object to results produced solely by automated analysis
• compensate damage caused by unlawful processing

To exercise these rights, write to [TODO: privacy contact email].

8. Security

The website is served over TLS. Access to form data is limited to the people who answer enquiries. Security updates are applied regularly.

9. Changes

This policy may be updated. The current version is always published on this page.