Privacy Policy

Who is responsible

This website is operated by Codefacture Yazılım A.Ş., which is the data controller for the personal data described here.

Mustafa Kemal Mah. 2118. Cd. Maidan İş Merkezi 4C Blok - No: 140 Çankaya / Ankara, Türkiye

Email: info@codefacture.com Telephone: +1 848 272 7583

What this site collects

This site is deliberately minimal. It runs no analytics, no advertising, no tracking pixels and no third-party scripts. There is no account system and nothing to sign up for.

Three things do involve data:

1. The contact form

When you submit the contact form, the data is sent to this website's own server, which validates it and then forwards it to our customer relationship system at crm.codefacture.com. That system is operated by Codefacture Yazılım A.Ş. - the same company that operates this site - and it is where we manage enquiries.

What is transmitted:

• Your name, email address and telephone number, which the form requires.
• Your company name and website, if you provide them.
• The message you wrote, with the page you sent it from added as a first line so we know which of our sites the enquiry came from.
• The language you were reading the site in.
• Your IP address, which is forwarded so that the receiving system can apply its own rate limiting to the sender rather than to our server.
• Your privacy acknowledgement, and your marketing consent if you ticked that optional box. Both are stored as you left them; neither is assumed.
• The time of submission.

We use this to answer you and, if we go on to work together, to carry out that work.

Legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to enquiries. Where you ticked the optional box to receive articles, the basis for that is your consent, which you can withdraw at any time by replying to any message or writing to the address above.

Retention: enquiries that do not lead to work are deleted within 12 months. Correspondence relating to work we carried out is kept for as long as commercial and tax law requires.

2. Server logs

Our hosting provider records standard technical information when a page is requested: the IP address, the time, the URL requested, the referring page and the browser's user-agent string. This is how the server is operated and how abuse is detected; it is not used to profile visitors.

The contact endpoint additionally keeps a short-lived, in-memory count of recent submissions per IP address, so that the form cannot be used to flood us. It is not written to disk and does not survive a restart.

Legal basis: legitimate interest in operating and securing the service.

Retention: short-term, under the hosting provider's own log policy.

3. A language cookie

One cookie stores which language you chose. It is described in full in our Cookie Policy.

Who else sees this data

Our hosting provider processes requests on our behalf, and our email provider handles correspondence. Both act as processors under contract.

Enquiries submitted through the contact form are received by the customer relationship system described above, which is operated by the same company and is not a third party in the sense that a separate vendor would be.

We do not sell personal data and we do not share it for advertising.

Because this site is served from a global content network, a request may be handled by infrastructure outside your country. Transfers out of the EEA rely on the European Commission's standard contractual clauses.

Your rights

If you are in the EEA or the UK, the GDPR gives you the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. If you are in Türkiye, Law No. 6698 (KVKK) gives you equivalent rights under Article 11.

Write to info@codefacture.com to exercise any of them. You may also complain to a supervisory authority - in Türkiye, the KVKK Board; in the EEA, the authority where you live.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If this policy changes materially we will update the date at the top of this page. Please check it when you next contact us.