Devfabrika

Privacy Policy

Effective date: October 22, 2026

1. Who we are and what this notice covers

This notice explains how Devfabrika, established in Türkiye, handles personal data when you visit devfabrika.com or email us. We act as data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where they apply to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR. It does not cover our products or client work, which have their own privacy terms.

2. What we collect

We collect only what the website needs to work and what you send us:

  • When you email us: your name, email address and whatever you include in your message.
  • Server logs: IP address, browser and device type, and the pages you request, kept by our hosting provider.
  • Usage statistics: cookie-free statistics such as pages visited, referring site, country and device type. Your IP address is used only to count unique visits within a day and is never stored.

3. Why we use it and on what legal basis

  • Replying to your email: answering your question and, if you ask, preparing a proposal. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to inquiries.
  • Site analytics: understanding how the site is used so we can improve it. No cookies are set and no profile of you is built. Legal basis: our legitimate interest in measuring how the site is used.
  • Security and operation: keeping the site available and protecting it from abuse. Legal basis: our legitimate interest in running a secure website.

4. Who processes your data for us

We do not sell personal data. We share it only with service providers that process it on our behalf and on our instructions:

  • Email provider: stores the emails you send us. United States and other countries.
  • Website hosting provider: hosts this website and keeps short-lived server logs. United States.
  • Server hosting provider: runs the server for our cookie-free site statistics. Germany.
  • Network and security provider: requests to our statistics server pass through it. United States.

5. Transfers abroad

The providers above process data outside Türkiye. Under Article 9 of the KVKK this is a transfer abroad, which we base on the standard contract published by the Personal Data Protection Board, and where the GDPR or UK GDPR applies, on the European Commission's Standard Contractual Clauses and the UK addendum to them. We may also disclose data where the law requires it or to protect our rights.

6. How long we keep it

  • Emails: for as long as we are in contact and up to 24 months after our last contact. If you become a client, our contract with you governs from that point.
  • Server logs: up to 30 days.
  • Analytics data: kept only as aggregated statistics that do not identify you.

7. Cookies

This website does not set cookies, and our site analytics do not use cookies or store anything on your device.

8. Your rights

Under Article 11 of the KVKK and, where applicable, the GDPR or UK GDPR, you can:

  • Learn whether we process your data and request a copy of it.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data where its purpose no longer applies.
  • Object to processing based on our legitimate interests.
  • Lodge a complaint with the Personal Data Protection Authority (kvkk.gov.tr), your local supervisory authority in the EU, or the Information Commissioner's Office (ico.org.uk) in the UK.

9. Changes to this notice

We may update this notice from time to time. We will post the new version on this page and update the effective date.

10. Contact

To exercise your rights or ask anything about this notice, contact us as data controller at info@devfabrika.com.