This notice explains how your personal data is processed when you visit the website at kodyva.com and when you contact us. It is provided to meet the information obligation under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).
Data controller
Your personal data is processed by Kodyva as the data controller.
- Name
- Kodyva
- Address
- Oran, Kudüs Cd. No:6 D:A, 06550 Çankaya/Ankara
- Phone
- 05459340647
- info@kodyva.com
- Website
- kodyva.com
What data we collect
We only collect what we genuinely need to provide our service:
- Contact and quote form: full name, email address, phone number, company name, the service or project you are interested in, budget range and your message. Phone, company and budget are optional.
- Request tracking code: when you submit the form you receive a tracking code starting with "KDV-". It is stored with your request in our records and in your browser's local storage (localStorage), so you can check its status via "My Requests". Your email and phone are never shown on the tracking page.
- Visit statistics: the path of the page you visit, the referring address, browser and device information (user-agent), your IP address, the time of the visit and whether the browser is controlled by an automation tool. The country is derived from the IP address using an offline database on our own server (DB-IP.com "IP to Country Lite", licensed CC BY 4.0 — IP Geolocation by DB-IP, https://db-ip.com); to separate bot and automation traffic, whether the network (ASN) the IP belongs to is a data centre is also checked with an offline database on our server (RouteViews, NRO and DB-IP data, CC BY 4.0). Your IP address is not sent to any third party for these purposes.
- Preferences: language, light/dark theme and your cookie choice. These live in your browser and are not stored on our server linked to a person.
- Server logs: our web server technically records the IP address, requested URL and time of each request for security and troubleshooting.
- Google Analytics / Google Tag Manager: only if you consent in the cookie notice. See the Cookie Policy for details.
Please do not share special categories of personal data (such as health, religion or ethnic origin) in the form; we do not need them.
Why we process your data
- To answer quote and information requests, contact you, prepare proposals and run the project.
- To show you the status of your request through the tracking code.
- To measure which pages are visited, understand where visitors come from and improve the website.
- To tell bots and automated traffic apart, prevent abuse (e.g. form spam) and keep the site secure.
- To meet our legal obligations and protect our rights in possible disputes.
Legal bases and method of collection
Your data is collected partly by automated means through the website form and your browser, and processed on the following legal bases under Article 5 of the KVKK:
- Quote form and tracking code: processing is directly related to establishing or performing a contract (Art. 5/2-c) and our legitimate interest, provided it does not harm your fundamental rights (Art. 5/2-f).
- First-party visit statistics and server logs: our legitimate interest in securing and improving the site (Art. 5/2-f).
- Retention of records: where required by law and to comply with our legal obligations (Art. 5/2-a and 5/2-ç), and to establish, exercise or defend a right (Art. 5/2-e).
- Google Analytics / Google Tag Manager: your explicit consent (Art. 5/1). You can withdraw it at any time via the "Cookie preferences" link at the bottom of the page.
Who we share your data with
We do not sell your data or share it for advertising. Transfers only happen in these cases:
- Our hosting (server) provider: the site and its data are stored on this provider's servers.
- Google (transfer abroad): only if you consent, visit data is transferred to Google LLC and its affiliates through Google Analytics / Google Tag Manager.
- Competent public authorities: where legally required and to the extent requested.
Transfers abroad are carried out in line with the conditions set out in Article 9 of the KVKK.
The site's fonts are served from our own server, and the country in our visit statistics is determined with an offline database on our server; your IP address is not transferred to third parties or abroad for these purposes.
How long we keep it
- Quote and contact requests (form details, tracking code, our replies): kept for 24 months from the date the request was created, then deleted automatically from our system. If a request leads to a contract, contract and invoice records are kept separately for the period required by the applicable legislation (e.g. the Turkish Commercial Code and Tax Procedure Law).
- Visit statistics: records containing an IP address (individual visits, first-visit and last-seen dates, visit counts per IP) are kept for at most 12 months. An individual visit record is deleted automatically 12 months after the visit; all records tied to an IP address are deleted 12 months after the last visit from that address. The recent-visits list is also capped, so its oldest entries are deleted earlier as new ones arrive. Aggregated counts without IP addresses (total visits per page, day, country and source) are kept for statistical purposes.
- Preferences and tracking codes in your browser: until you clear your browser data.
When the period ends, the data is deleted, destroyed or anonymised.
Your rights under the KVKK
Under Article 11 of the KVKK you may apply to the data controller to:
- learn whether your personal data is processed and, if so, request information about it,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties in Türkiye or abroad to whom it is transferred,
- request correction of incomplete or inaccurate data,
- request erasure or destruction under the conditions of Article 7 of the KVKK,
- request that corrections, erasures or destructions be notified to third parties the data was transferred to,
- object to an outcome against you arising solely from automated analysis,
- claim compensation for damage caused by unlawful processing.
How to apply
You can send requests regarding your rights by emailing info@kodyva.com or in writing to Oran, Kudüs Cd. No:6 D:A, 06550 Çankaya/Ankara. Please state your identity and your request clearly. Requests are concluded free of charge within 30 days at the latest, depending on their nature; if the action incurs an additional cost, the fee set by the Personal Data Protection Board may be charged.
If your request is rejected, you find the answer insufficient or it is not answered in time, you may lodge a complaint with the Personal Data Protection Board (KVKK Board).
Security
The site is served over an encrypted HTTPS connection. Only an authorised administrator can access request records; the admin panel is protected by a password and a session cookie, and login attempts are rate-limited.
Changes to this notice
We may update this notice as our processing activities or the law change. The current version is always published on this page with its "last updated" date at the top.