Legal
Data Protection Notice
This notice is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the related Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains how personal data of visitors to cyserp.com (the "Site") and of people who use the demo request form is processed.
1. Data controller
Your personal data is processed by the company identified below, acting as data controller ("CYS" or the "Company").
- Legal name: [[COMPANY LEGAL NAME]]
- Registered address: [[REGISTERED ADDRESS]]
- Trade registry / MERSIS no: [[MERSIS NUMBER]]
- E-mail: info@cyserp.com
2. Personal data we process
| Category | Data | Source |
|---|---|---|
| Identity | First name, last name | Demo request form |
| Contact | E-mail address, phone number (optional) | Demo request form |
| Customer transaction | Company name, message, node module of interest | Demo request form |
| Transaction security | IP address, browser and device information, access time, reCAPTCHA verification result | Server logs, Google reCAPTCHA |
| Usage data (consent-based) | Sections viewed, session duration, approximate location (city level), device and browser type | Google Analytics 4 cookies |
3. Purposes
- Receiving and evaluating demo requests and contacting you about them
- Answering your questions, requests and suggestions
- Keeping the Site secure and preventing automated or malicious form submissions
- Measuring Site usage and improving its content (only if you consented to analytics cookies)
- Meeting legal obligations and responding to requests from competent authorities
4. Legal bases
- KVKK Art. 5/2-c — Processing directly related to the establishment or performance of a contract: handling your demo request.
- KVKK Art. 5/2-f — Legitimate interests of the controller: Site security, bot prevention, server logs.
- KVKK Art. 5/1 — Explicit consent: Google Analytics cookies. You can withdraw consent at any time from the cookie notice or the Cookie preferences link in the footer.
- KVKK Art. 5/2-ç — Compliance with legal obligations: statutory retention and notification duties.
5. Transfers
Limited to the purposes above, your personal data may be transferred to the following recipients:
- Google LLC (USA) — reCAPTCHA v3 bot verification and Google Workspace e-mail infrastructure; Google Analytics 4 if you consent. International transfers are made under KVKK Art. 9 with the standard contractual clauses and safeguards provided by Google.
- Hosting provider — The servers running the Site and the contact form service.
- Competent public authorities — Where required by law.
6. Collection method
Data is collected electronically through the demo request form and, during your visit, automatically through server logs, reCAPTCHA and (subject to your consent) cookies.
7. Retention
- Demo request records: Up to 2 years after the request is closed; where a business relationship follows, for the periods required by applicable law.
- Server access logs: Up to 2 years, including obligations under Law No. 5651.
- Analytics data: 14 months in Google Analytics. Cookie lifetimes are listed in the Privacy Policy.
8. Your rights under KVKK Art. 11
- To learn whether your personal data is processed
- To request information if it has been processed
- To learn the purpose of processing and whether the data is used in line with it
- To know the third parties to whom it is transferred, in Türkiye or abroad
- To request correction of incomplete or inaccurate data
- To request erasure or destruction under the conditions of KVKK Art. 7
- To request that corrections, erasure or destruction be notified to third-party recipients
- To object to a result against you produced exclusively by automated analysis
- To claim compensation for damage caused by unlawful processing
If you are located in the EEA or the United Kingdom, you have equivalent rights under the GDPR / UK GDPR and may exercise them the same way.
9. How to apply
Send your request to info@cyserp.com or in writing to the postal address above, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are answered free of charge within 30 days at the latest; where the process incurs additional cost, the fee schedule set by the Personal Data Protection Board may apply.
For details on cookies and third-party services, see the Privacy Policy.