LEGAL NOTICE

KVKK Privacy Notice

Under the Personal Data Protection Law No. 6698 (“KVKK”), we inform you about the personal data processed through vostra.tr and during your communications with Vostra.

Last updated: September 24, 2026

This English text is a courtesy translation. In case of any inconsistency, the Türkçe metin (Turkish original) prevails.

1. Data Controller

Your personal data is processed, in the capacity of data controller under the KVKK, by Furkan Yetiş (“Vostra”), a natural person providing digital services under the Vostra brand.

  • Data Controller: Furkan Yetiş
  • Brand / website: Vostra — vostra.tr
  • Email: info@vostra.tr
  • Postal address: The postal address for written applications will be provided upon request sent to info@vostra.tr.

2. Personal data processed

CategoryDataSource
IdentityFull name or brand / business nameContact form, email
ContactEmail address, phone numberContact form, email
Request informationSelected service, project description and message contentContact form, email
Transaction securityIP address, browser and device information, access timeHosting and security infrastructure
Customer transactionQuote, contract, invoice and payment information (only if a service relationship is established)Provided by you
MarketingOnline identifiers generated by advertising and measurement cookies (only if you give consent)Cookies

The form does not request special categories of personal data (health, religion, ethnic origin, etc.). Please do not share such information in your messages.

3. Purposes of processing personal data

  • Receiving and evaluating the request you send via the contact form or email, and responding to you;
  • Preparing a quote suited to your needs and scheduling a preliminary meeting;
  • If a service relationship is established, concluding and performing the contract and carrying out project communications;
  • Fulfilling obligations arising from legislation (e.g., tax and commercial records);
  • Ensuring the security of the website and preventing misuse and spam submissions;
  • Measuring and improving the website’s visitor statistics without identifying you;
  • If you give consent, measuring the effectiveness of advertising campaigns.

4. Legal bases and collection method

Your personal data is collected through the contact form on our website, email correspondence and (if you give consent) cookies, by partially or fully automated means. It is processed based on the following legal grounds set out in Article 5 of the KVKK:

  • Establishment or performance of a contract (Art. 5/2-c): evaluating your quote request and carrying out the service relationship;
  • Legal obligation (Art. 5/2-ç): record-keeping and notification obligations arising from legislation;
  • Establishment, exercise or protection of a right (Art. 5/2-e): retaining records in case of potential disputes;
  • Legitimate interest (Art. 5/2-f): website security, blocking spam submissions and anonymous visitor statistics;
  • Explicit consent (Art. 5/1 and Art. 9): transfer to service providers abroad, and marketing and measurement cookies.

5. Transfer of personal data

Domestic

Your personal data may be transferred, limited to the purposes above, to authorized public institutions and organizations upon request; to financial advisors and accounting service providers if a service relationship is established; and to legal advisors when necessary.

Abroad

The servers of some infrastructure services we use to operate our website are located abroad. For this reason, your personal data is transferred to the following service providers within the scope of Article 9 of the KVKK and based on your consent given in the form:

  • Web3Forms: Delivery of the contact form — forwarding the form content to Vostra as an email.
  • Cloudflare, Inc.: Hosting and security of the website, forwarding of emails sent to info@vostra.tr, and cookieless visitor statistics.
  • Google LLC (Gmail): The email service to which messages sent to info@vostra.tr are forwarded and in which they are stored.
  • Advertising platforms (Meta, Google): Only if you consent to marketing cookies in your cookie preferences, for the purpose of advertising measurement.

6. Retention period

Your personal data is retained for the retention periods prescribed by the applicable legislation. If a service relationship is established, commercial and financial records are kept for the periods specified in the applicable legislation, in particular the Turkish Commercial Code and the Tax Procedure Law. Data for which the legislation does not prescribe a specific period is retained for the period required by the purpose of processing and for the statutory limitation periods applicable to potential disputes.

Upon expiry of these periods, your personal data is erased, destroyed or anonymized in accordance with the Regulation on the Erasure, Destruction or Anonymization of Personal Data.

7. Your rights under Article 11 of the KVKK

By applying to Vostra regarding your personal data, you have the right to:

  1. Learn whether your personal data is processed;
  2. Request information about it if it has been processed;
  3. Learn the purpose of processing and whether the data is used in accordance with that purpose;
  4. Know the third parties to whom it is transferred domestically or abroad;
  5. Request its rectification if it has been processed incompletely or inaccurately;
  6. Request its erasure or destruction under the conditions set out in Article 7 of the KVKK;
  7. Request that the rectification, erasure or destruction be notified to the third parties to whom the data has been transferred;
  8. Object to any outcome to your detriment resulting from the analysis of the processed data exclusively through automated systems;
  9. Request compensation for damages if you suffer damage due to unlawful processing.

These are the rights you hold.

8. Application method

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests regarding your rights:

  • In writing, together with documents proving your identity;
  • By secure electronic signature, mobile signature or registered electronic mail (KEP);
  • By email to info@vostra.tr from the email address you previously provided to Vostra and that is registered in our system.

Your application must include your full name; your signature for written applications; for citizens of the Republic of Turkey, your Turkish identity number (T.C. kimlik numarası) (for foreign nationals, your nationality and passport number); your residential or business address for notification purposes; if any, your email address and phone number for notification; and the subject of your request.

Your application will be concluded free of charge as soon as possible depending on its nature and within 30 days at the latest. If the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, you find the response insufficient, or no response is given in due time, you may file a complaint with the Personal Data Protection Board.