Privacy and KVKK notice

Data controller

The data controller is Neslihan Akbulut. Gridcomet is the trade name of Neslihan Akbulut's sole proprietorship. Address: Tabakhane Mah., Simav / Kütahya, Türkiye.

Contact: hello@gridcomet.com · +90 274 606 06 40

Data we process and how we collect it

Contact form: name, company, e-mail, phone (optional), a time that suits you, the services you are interested in and your message. The form is collected electronically, by automated means, and reaches us by e-mail. When you send the form, a short e-mail confirming that your request has arrived goes to the address you entered; it does not contain what you wrote.

E-mail, WhatsApp and phone: the contact details and message content you share when you write to or call us directly.

Brief assistant: what you type in the box is processed in your browser and not sent to us; once you move it into the form with "Move to the form" and send it, it becomes part of the contact form.

Site use: visit statistics are kept in aggregate with Umami, which uses no cookies. It records the page you visit, the link you came from, browser, operating system, device type, language, approximate location (country and city) and on-site events such as sending the form. Your IP address is not stored in the statistics; it is processed only for a moment to deliver the request, avoid counting a visitor twice and derive the approximate location. Nothing is written to your browser.

Server logs: IP address, date and time, the page requested and browser details, recorded automatically by the server when you visit.

Purposes and legal bases

To answer your request, stay in touch and prepare an offer: Art. 5(2)(c) KVKK (directly related to concluding or performing a contract); for visitors in the EU and UK, Art. 6(1)(b) GDPR.

To keep the site secure and prevent abuse (server logs, rate limits): Art. 5(2)(f) KVKK (legitimate interest); Art. 6(1)(f) GDPR.

To keep aggregate visit statistics that help us improve the site (Umami, cookieless): Art. 5(2)(f) KVKK (legitimate interest); Art. 6(1)(f) GDPR.

To meet legal obligations and protect rights in a dispute: Art. 5(2)(ç) and 5(2)(e) KVKK; Art. 6(1)(c) and 6(1)(f) GDPR.

No processing relies on consent; no marketing messages are sent.

Recipients and transfers abroad

Data is shared only with the providers we use, and only for their service: hosting and the hello@gridcomet.com mailbox by Hostinger International Ltd. (site servers in Germany, EU), e-mail delivery by Resend (Plus Five Five, Inc., USA; data stored in the USA), visit statistics by Umami Cloud (Umami Software, Inc.; statistics stored in the EU).

When you write to us on WhatsApp, your messages pass through WhatsApp's (Meta's) infrastructure and are processed under WhatsApp's own privacy terms.

These providers are outside Türkiye. For transfers abroad under Art. 9 KVKK, the standard contract published by the Turkish Personal Data Protection Board is being signed with these providers; each contract is notified to the Board within five business days of signature. Transfers from the EU and UK to the USA rely on the provider's standard contractual clauses.

Data is shared with competent public authorities only where the law requires it.

Retention

Contact requests: 2 years. Server logs: 30 days. Resend keeps the content and delivery logs of the e-mails it sends for 30 days. Umami keeps visit statistics for 6 months. After that the data is deleted or anonymised.

If a contract is concluded, contract and billing records are kept for the periods set by Turkish tax and commercial law.

Your rights and how to apply

Under Art. 11 KVKK you may learn whether your personal data is processed and request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to in Türkiye or abroad, ask for incomplete or wrong data to be corrected, ask for erasure or destruction under Art. 7 KVKK, ask for these steps to be notified to recipients, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing.

Send your application in writing to the address above, or by e-mail to hello@gridcomet.com from an e-mail address you gave us before and that is in our records. Include your name, surname, signature (for written applications), Turkish ID number (foreign nationals: nationality and passport or ID number), postal address, e-mail address if any, and your request (Communiqué on the Procedures and Principles of Application to the Data Controller).

Your application is answered free of charge within 30 days (Art. 13 KVKK); if it involves an additional cost, the fee in the Board's tariff may be charged. If you find the answer insufficient, you may complain to the Personal Data Protection Board (Art. 14 KVKK).

Visitors in the EU and UK have the rights of access, rectification, erasure, restriction, data portability and objection under the GDPR, and may complain to the supervisory authority in their country.

Cookies

This site uses no non-essential cookies. Your language is kept in a necessary session cookie named NEXT_LOCALE, set on your first visit and when you change the language and deleted when you close your browser; your browser stores only a non-personal flag (gc-seen) to shorten the intro animation.

Visit statistics come from Umami, which uses no cookies (see “Data we process and how we collect it” above); the site uses no booking calendar or advertising tool. If a new tool is added, this section is updated first.