PRIVACY POLICY AND DATA SUBJECT INFORMATION NOTICE
Last updated / effective date: 22 October 2026
1. Data Controller
Business: Archirenk (sole proprietorship)
Data controller: Yasin Kertiş (ARCHİRENK sole proprietorship)
Tax No: Maltepe Tax Office, tax no. 5450373261
Address: Emek Mah. Bişkek Cad. No:30 Interior Door No:11, Çankaya/Ankara 06490, Türkiye
Email: info@archirenk.com
Archirenk provides websites, mobile apps, site/app audits, fixes and maintenance, AI planning, AI agent setup and management, AI integration and graphic design, as well as free mini scan services within the scope of artificial intelligence and digital consultancy. This text is intended to provide information on the processing of personal data within the scope of KVKK Art. 10 and GDPR Art. 13.
2. Personal Data Processed, Purposes, Legal Grounds and Retention
The table below summarizes the data typically processed within the scope of the services. In a specific case, limited additional data may be processed depending on the nature of the service; in such case, the data subject is additionally informed.
| Data Group | Data Processed | Purpose | Legal Ground | Retention |
|---|---|---|---|---|
| Contact form | Name, email, website address, message | To respond to the request and communicate | Being directly related to the establishment/performance of the contract; legitimate interest; legal obligation where necessary | At most 6 months after the response |
| Free mini scan | Website address, email, declaration “I have authority over the website” | To prepare and send the preliminary report | Performance of the requested service/contract; legitimate interest | Website address and report for 30 days; deleted at the end of the period |
| Paid audit and consultancy services | Customer contact information, correspondence, website/application information within the scope of the service, publicly available content, information in areas to which read access is granted if the customer permits, transaction information related to invoicing/payment | Performance of the service, communication, accounting, fulfilment of legal obligations, dispute management | Establishment/performance of the contract; legal obligation; legitimate interest | The service relationship and periods prescribed by the relevant legislation |
| Payment transactions | Information relating to the payment transaction; card information is not stored by the business | Receipt and refund of payment and record-keeping obligations | Performance of the contract; legal obligation | Payment provider and periods prescribed by legislation |
| Technical cookie/storage | Technically mandatory information such as language preference and form security | Secure and proper operation of the website | Legitimate interest / technical necessity | For the session duration or until the user preference is deleted |
| Backups | Backups of data processed within the scope of the service | Data security and business continuity | Legitimate interest; legal obligation | At most 30 days in backups |
The website does not use analytics/advertising cookies; only technically mandatory cookies/storage may be used. If non-mandatory cookies begin to be used, a consent banner will be added and the Cookie Policy will be updated.
3. Explanation of Legal Grounds
Personal data is processed on the following legal grounds:
- being necessary for the establishment or performance of the service,
- fulfilment of legal obligations,
- being necessary for our legitimate interests,
- the existence of separate and explicit consent solely for optional commercial communication.
For sending commercial electronic messages, a separate, optional and unchecked consent box is used; unless such consent is given, the mini scan or contact form email is not used for commercial message purposes.
4. Recipients and Transfers
Personal data may be shared with the hosting provider Hetzner (Germany), email provider Google Workspace, payment provider the payment provider named in the order confirmation, authorized public institutions and courts within the scope of legal obligations, for the provision of the service. Card information is not stored by the business.
Hosting, email and payment providers may be located abroad. Transfers abroad are made within the framework of KVKK Art. 9 and GDPR Art. 44 et seq., under appropriate safeguards and/or relevant mechanisms. In cases where explicit consent is required, explicit consent is additionally obtained.
AI tools may be used for measurement and drafting purposes. Every deliverable undergoes human review. The customer’s personal data is not sent to AI providers without the customer’s knowledge and written permission.
5. Retention and Deletion
Data is retained for the period necessary for the processing purpose and for the periods prescribed by the relevant legislation. Contact form data is retained for at most 6 months after the response. Within the scope of the mini scan, the website address and report are retained for 30 days and are then deleted. Backups are retained for at most 30 days; deletion requests and end-of-period deletions are completed from the backups within no later than 30 days.
6. Rights of the Data Subject
Under KVKK Art. 11, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in accordance with that purpose, to know the third parties to whom it is transferred domestically/abroad, to request rectification if it is processed incompletely/incorrectly, to request deletion/destruction, to request that these operations be notified to third parties to whom it is transferred, to object to a result against you arising from analysis by automated systems, and to request compensation for damage.
Under GDPR Arts. 15-22, you may have the rights of access, rectification, erasure, restriction of processing, data portability, objection to processing, and objection to automated decision-making. You may apply to info@archirenk.com for these rights. Applications are responded to within no later than 30 days; reasonable additional information may be requested for identity verification.
Within the scope of the right to complain, you may apply to the Personal Data Protection Board (TR) and, under the GDPR, to the supervisory authority of the EU member state in which you are established.
7. Security
Reasonable and appropriate technical and administrative measures are implemented to protect personal data against unlawful access, loss, misuse and disclosure. In this context, access authorization, password and access controls, update and backup measures may be implemented. In the event of a data breach, notifications prescribed by the relevant legislation are made.
8. Children
The services are not intended for persons under the age of 18. If it is learned that personal data belonging to a person under the age of 18 is processed, the relevant data is deleted or anonymized. Parents/guardians may contact info@archirenk.com in this regard.
9. Changes
This text may be updated according to changes in legislation and the services. Material changes are published on the website. Effective date: 22 October 2026.