Privacy Policy

Machware Teknoloji A.Ş is the data controller — the veri sorumlusu under Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and the controller under the EU General Data Protection Regulation (GDPR) where that regulation applies.

This policy covers this website and the enquiries sent through it. It does not cover the systems we build or operate for clients. When we process personal data on a client’s behalf we act as a processor (veri işleyen), and that processing is governed by the agreement and data processing terms signed with that client, not by this page.

What you give us. The contact form asks for your name, your email address, the topic of your enquiry and your message. Company name is optional. We receive exactly what you type — nothing is inferred, enriched or bought from a third party.

What our hosting produces. Like any web server, the infrastructure serving this site records technical request data such as IP address, browser user-agent, the page requested and a timestamp. These logs exist to keep the site running and to detect abuse.

What we do not collect. This site sets no cookies. It loads no analytics, advertising, session-recording or social media tracking scripts. There is no account system, so there is no profile to build. We do not sell personal data, and we do not use it to profile you or make automated decisions about you.

• To answer your enquiry and prepare a possible engagement. GDPR Art. 6(1)(b) — steps taken at your request before entering a contract. KVKK Art. 5/2-(c) — directly related to the conclusion of a contract.
• To keep a record of business correspondence. GDPR Art. 6(1)(f) — our legitimate interest in a reliable record of who asked us what. KVKK Art. 5/2-(f) — legitimate interest, balanced against your rights.
• To keep the site secure and available. GDPR Art. 6(1)(f) and KVKK Art. 5/2-(f) — our legitimate interest in preventing abuse of our infrastructure.
• To meet legal obligations. GDPR Art. 6(1)(c) and KVKK Art. 5/2-(a) — where tax, commercial or other law requires us to keep or disclose records.

We do not ask for special categories of data, and we ask that you do not send them through the contact form.

We do not sell or rent personal data, and we do not share it for anyone else’s marketing. It is disclosed only to:

• Service providers acting on our instructions — hosting and infrastructure, email delivery and, where used, a customer relationship system. They may process data only to provide the service to us and are bound by contract to do so.
• Our professional advisers — such as lawyers or accountants, where they need it to advise us.
• Authorities — where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend a legal claim.

Our hosting and email providers may store or process data on servers outside Türkiye, including in the European Union and the United States. Where that happens we rely on the transfer mechanisms KVKK Art. 9 provides and, for data protected by the GDPR, on the appropriate safeguards in Chapter V — in practice, Standard Contractual Clauses with the provider. You can ask us which providers are involved and where they operate; write to info@machware.com.tr.

Enquiries that do not lead to an engagement are kept for up to 24 months from the last message, so we recognise the thread if you come back, and are then deleted. Correspondence that becomes part of a client engagement is kept for the life of that engagement and for the retention period set by the applicable commercial and tax law. Server logs are kept for a short operational period, typically no more than 12 months. You can ask us to delete your enquiry sooner.

Under KVKK Art. 11 and, where it applies, the GDPR, you can ask us to:

• confirm whether we hold personal data about you, and get a copy;
• correct data that is wrong or incomplete;
• delete data, or restrict how we use it;
• receive data you gave us in a portable, machine-readable form, or have it sent to another controller;
• object to processing we base on legitimate interest, including at any time to direct marketing;
• know which third parties your data was disclosed to, and have any correction or deletion passed on to them;
• object to a decision produced solely by automated analysis — we do not make any, but the right stands.

Write to info@machware.com.tr and we will answer as soon as we can, and in any case within 30 days as KVKK requires, or within one month where the GDPR applies. We may need to confirm your identity first. Exercising these rights is free unless a request is manifestly unfounded or excessive.

If our answer does not satisfy you, you can complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) at kvkk.gov.tr. If you are in the European Economic Area or the United Kingdom, you can complain to the supervisory authority where you live or work. We would rather hear from you first, so please try info@machware.com.tr before you do.

The measures we take — access control, encryption, secure development practice and how to report a problem — are set out on our Security page. No system is perfectly secure, but we take the protection of what you send us seriously.

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, contact info@machware.com.tr and we will delete it.

If we change how we handle personal data, we will update this page and the date at the top. Material changes will be highlighted here for a reasonable period. This version is dated 4 September 2026.

Questions about this policy, or about anything we hold on you, go to info@machware.com.tr.