Skip to content

Privacy Notice

Data controller

Rapitek Bilişim Teknolojileri Anonim Şirketi
Maslak Mah. Büyükdere Cad. Nurol Plaza Sit. No: 255/B02, Sarıyer, İstanbul, TR
MERSIS: 0734159061600001
Trade registry no: 157552-5
Tax: Maslak / 7341590616
Email: kvkk@rapitekgo.com
Phone: +90 212 963 22 84

What personal data we process

When you submit the contact form on this site, we record:

  • What you enter: your name, e-mail address, phone number and the content of your message (whichever fields the form contains).
  • Security records: the date and time of submission, the address of the page you submitted from, where you came from (the previous page or search channel), browser information, and an keyed hash of your connection source (your raw IP address is not stored).
  • Consent record: whether you gave consent, the exact wording shown to you at that moment, and the time of consent. This is kept as proof of consent.
  • Your eligibility test answers and its result: if you completed an eligibility test on the site and then chose to submit the form, the result of the test (the suggested option and the fit score) is recorded with your submission together with the answers you gave. We use these to assess your request and prepare a suitable offer. If you take the test but do not submit the form, none of it reaches us; before you submit, exactly what will be shared is listed for you.

Cookies: only strictly necessary first-party cookies are used — cross-site request forgery protection on form submissions (csrftoken), your session if you are signed in or have opened a password reset link (sessionid), your language choice if you changed it (django_language), and a preview session if you opened a signed preview link (rgo_onizleme). These do not build an identity profile and are not used for advertising. There are no third-party advertising or analytics trackers or cookies; visit statistics are kept server-side, without cookies and without storing personal data.

Server access logs

When you visit the site, our servers keep technical access logs even if you never submit a form. These logs exist for security and fault diagnosis and are written regardless of consent; declining consent does not stop them.

For ordinary requests only part of your IP address is recorded (the last octet of an IPv4 address, and everything beyond the first three groups of an IPv6 address, is dropped); alongside it we keep the time of the request, the address you requested, the referring site, your browser information, the response code and the response time. These records are deleted within 15 days at the latest. If an error occurs, the record for that request may contain your full, untruncated IP address; that record is also deleted within 15 days at the latest. Application and security logs, which may contain IP addresses, are kept for at most 90 days.

If a security incident occurs (for example an attack or an abuse investigation), a copy of the records relating to that incident is set aside as evidence. That copy is not subject to the automatic periods above; it is kept for as long as the incident and any legal process require, and is deleted when it is no longer needed.

Purposes and legal grounds

  • Responding to your request, preparing a quote and conducting pre-contractual discussions — Legal ground: necessary for the conclusion or performance of a contract (KVKK Article 5(2)).
  • Preventing form abuse (bots/spam), keeping server access and security logs and keeping the service secure — Legal ground: necessary for our legitimate interests, provided that your fundamental rights and freedoms are not harmed (KVKK Article 5(2)). Automated submission signals are recorded for this purpose.
  • Keeping the consent record and, in a security incident, the evidence copy as proof in a dispute — Legal ground: necessary for the establishment, exercise or protection of a right (KVKK Article 5(2)).
  • Meeting our legal obligations — Legal ground: necessary for compliance with a legal obligation to which we are subject (KVKK Article 5(2)).
  • Sending commercial electronic messages — Legal ground: only your separate explicit consent (KVKK Article 5(1)), which you may withdraw at any time.

Who we share it with

Your data is kept in our own database. Providers of technical services such as hosting and e-mail delivery may access it as processors. Each of these providers offers its own standard data processing agreement providing for processing only on instructions and for confidentiality and security obligations; it has not yet been confirmed that this agreement is in force for every provider. We do not sell or transfer your data to third parties for marketing purposes.

Where your data is stored (transfer abroad)

Your data is stored and processed on servers located in Germany: our hosting infrastructure is in Germany, and notification e-mails are delivered through an e-mail service in the Germany (Frankfurt) region. The site also runs behind an edge layer providing domain management, TLS termination and traffic routing. The provider of that layer is based in the United States and uses a global network; because the encrypted connection is decrypted at that layer, what you type into the form passes through it together with your IP address and connection data, and your connection traffic passes outside Türkiye.

Our processing therefore results in a transfer of personal data abroad within the meaning of Article 9 of the Turkish Data Protection Law (KVKK). The transfer is necessary in order to provide the service, is limited to the purposes listed above, and the providers act as processors. You may write to us at the address below to learn which providers your data is transferred to.

Because the Turkish Personal Data Protection Board has not issued an adequacy decision for any country, this transfer must rest on one of the appropriate safeguards provided by the law — in practice, the standard contract published by the Board. This safeguard has not been completed for any provider. This notice will be updated as the status changes for each provider.

How long we keep it

Form records are kept for 24 months from the date the form was submitted and are deleted regularly thereafter. Where a longer statutory retention obligation applies, only the data required by that obligation is kept, for as long as required.

Your rights

You may ask us to confirm whether we process your data and to provide information about it; to learn the purpose of processing and whether it is used accordingly; to learn the third parties to whom it has been transferred at home or abroad; to correct it if incomplete or inaccurate; to erase or destroy it where the conditions are met; to notify those corrections or erasures to third parties; to object to a result produced solely by automated analysis that adversely affects you; and to claim compensation for damage arising from unlawful processing.

You can reach us using the contact details above. We respond within 30 days at the latest.

Updates

This notice may be updated. The exact wording in force at the moment you submitted the form is stored alongside your consent; later changes do not affect consent already given.