Privacy Notice
(Personal Data Protection)
This notice explains which of your details are processed when you use the contact form on intak.tr, why, and for how long. It is prepared under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”). In short: we ask you for one contact detail, only so that we can get back to you, and we use it for nothing else.
This English text is a translation. The binding version is the Turkish one at intak.tr/kvkk. The notice is based on Turkish legislation; in case of any difference between the two versions, the Turkish text prevails.
01 Identity of the data controller
Your personal data is processed by the following party in the capacity of data controller within the meaning of KVKK art. 3/1-(ı):
- Data controller
- INTAK (intak.tr)
- info@intak.tr
- Website
- intak.tr
intak.tr is run by an individual; no legal entity (company) has been formed yet. In this situation the data controller is the individual operating the site, who can be reached at the e-mail address above. When a legal entity is formed this notice will be updated and the registered name and address published here.
02 Personal data processed
There is no membership, account or payment system on the site. The only data processed is what you enter when you fill in the form of your own accord, and it consists solely of:
- Contact detail — only one of them, depending on the channel you choose: your mobile number (if you chose WhatsApp or phone) or your e-mail address. We do not ask for both.
- Your preferred channel — WhatsApp, phone or e-mail.
- Time of submission — the date and time the request reached us.
- Transaction security data — your connection IP address, used to prevent abuse (many messages sent from the same address within a minute). The IP address is not stored in plain text; it is turned into a salted one-way digest (SHA-256) and used only for comparing a counter.
We do not collect name, surname, national identity number, address, location, cookie-based advertising identifiers or special categories of personal data (health, belief, membership and so on). The site uses no advertising or analytics cookies; there is no visitor tracking (Google Analytics or similar).
03 Purposes of processing
- To receive and assess your request and get back to you.
- To conduct pre-contractual discussions if a working relationship arises from that conversation.
- To prevent automated or malicious use of the form and keep the service running (transaction security data only).
Your data is not used for marketing, profiling, advertising or automated decision-making; it is not sold or rented to third parties.
04 Method of collection and legal basis
The data is collected electronically, by non-fully-automated means, directly from you, when you visit the site and fill in the contact form.
- Contact detail and channel preference: KVKK art. 5/2-(c) — “directly related to the conclusion or performance of a contract” (your request for a pre-contractual conversation) and art. 5/2-(f) — “legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed”.
- Transaction security data (IP digest): KVKK art. 5/2-(f), legitimate interest — prevention of abuse of the system.
05 Transfers, including transfers abroad
When you submit the form, your message is delivered to us over Telegram Messenger. Telegram’s servers are located abroad; the contact detail and channel preference you entered in the form are therefore transferred abroad in this respect. The transfer is made within the framework of KVKK art. 9, solely to bring your request to us, and with the minimum data required.
In addition, while the site is technically operating — even if you never fill in the form — your connection details (IP address, browser information) pass through the servers of the following infrastructure providers:
- Cloudflare, Inc. — content delivery, security and attack protection (outside Türkiye).
Typefaces and three-dimensional scene libraries are served from the site’s own server; no requests are sent to external sources such as Google Fonts or jsDelivr, so no data is transferred abroad by that route either.
These providers process the data to deliver content on our behalf; they do not return identity information to us. Apart from this, your personal data is not shared with any third party; it may only be shared with public authorities legally empowered to request it, upon a duly made request and to the extent required by the relevant legislation.
06 Retention period
- Contact detail and content of the request: at most 2 years from the conclusion of the request; if a working relationship is established, for the limitation and retention periods set out in the relevant legislation. At the end of the period it is deleted or anonymised.
- Transaction security data (IP digest): 60 seconds. When the rate-limit window expires the record is deleted automatically by the system; it is not archived anywhere else.
07 Data security
The connection is encrypted end to end with HTTPS. Access tokens and counter files are kept outside the web root, in a directory that cannot be reached from outside. Form input is validated against a whitelist on the server, checked for format, and under no circumstances reflected back into the page. The IP address is never written to disk in raw form. These are our administrative and technical measures under KVKK art. 12.
08 Your rights under KVKK art. 11
By applying to the data controller you may exercise the following rights:
- To learn whether your personal data is being processed,
- If it has been processed, to request information about it,
- To learn the purpose of processing and whether it is used in accordance with that purpose,
- To know the third parties to whom it has been transferred, in Türkiye or abroad,
- To request correction if it has been processed incompletely or incorrectly,
- To request erasure or destruction within the conditions of KVKK art. 7,
- To request that correction, erasure and destruction be notified to the third parties to whom the data was transferred,
- To object to an adverse outcome arising from analysis carried out solely by automated systems,
- To claim compensation for the damage if you suffer loss because of unlawful processing.
09 How to apply
You may send your requests, together with information establishing your identity, to info@intak.tr. This address is the electronic mail address notified by us within the meaning of art. 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller. Under the same Communiqué your application is concluded free of charge within 30 days at the latest; if the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
If your application is rejected or you find the response insufficient, you retain the right to lodge a complaint with the Personal Data Protection Board.
10 Changes
This notice may be updated in line with changes in legislation or in the processing activities on the site. The current version is always published on this page; the “Last updated” date above shows which version you are reading.