This is an English translation of the Turkish
Gizlilik Politikası, provided for convenience.
In the event of any discrepancy, the Turkish text prevails.
1. Overview
values your privacy. This Privacy Policy explains how we collect, use, share and protect your personal data when you visit our website, use our services or contact us.
This policy has been prepared in line with the KVKK (Law No. 6698) in Türkiye and the GDPR (Regulation (EU) 2016/679) in the EU and EEA. For detailed and sector-specific matters, please also see:
2. Information We Collect
2.1 Information You Provide Directly
- When you complete a contact form: name, e-mail, company, message content
- When you request a demo: the above plus telephone and intended use case
- When you apply for a job: CV and contact details
- When you attend our events: attendance details
2.2 Information Collected Automatically
- IP address, browser type, operating system
- Time of visit, pages visited, time spent
- Referring site (referrer)
- Data collected through cookies (see the Cookie Policy)
2.3 Information Received from Third Parties
- Information shared by our business partners in the context of joint customer relationships
- Publicly available profile information from professional networks (LinkedIn and similar)
3. How We Use Your Information
- To provide and improve our services and products
- To respond to your requests
- To perform contractual obligations
- To comply with our legal obligations
- To develop and secure the website
- Marketing and event communication (only with your explicit consent)
- To prevent fraud and unauthorised access
4. Who We Share Your Information With
We do not sell your personal data. We share it only in the following limited circumstances:
- Service providers: Cloud infrastructure (KVKK/GDPR compliant), e-mail, CRM and analytics tools — only to the extent necessary to deliver the service
- Legal authorities: Where required by law
- Corporate transactions: In a merger or acquisition, transfer to the new entity (with prior notice)
- With your explicit consent, in any other case you determine
We sign Data Processing Agreements (DPAs) with all of our service providers.
5. International Data Transfers
Our head office is in Türkiye. Where data is transferred from the EU/EEA, Standard Contractual Clauses (SCCs) and supplementary technical and organisational measures are applied within the framework of Chapter V of the GDPR. Details are available on our GDPR Compliance page.
6. Data Security
We take comprehensive measures to protect your information:
- Information security controls aligned with ISO 27001 principles
- End-to-end encryption (TLS 1.3 in transit, AES-256 at rest)
- Role-based access control and multi-factor authentication
- Regular security testing and patch management
- Employee training and confidentiality agreements
- Incident response plan and data breach notification procedure
Even so, no transmission of data over the internet can be guaranteed to be 100% secure. If you have any concerns regarding information security, please contact us.
7. Retention Periods
We retain your data only for as long as necessary for the purpose for which it was collected:
- Customer relationship data: contract term + 10 years (financial/legal)
- Marketing data: until explicit consent is withdrawn
- Web analytics data: maximum 14 months (anonymised)
- Job applications (unsuccessful): 1 year
8. Your Rights
Depending on your jurisdiction, you have the following rights:
- The right to access your data
- The right to request rectification
- The right to erasure (“right to be forgotten”)
- The right to request restriction of processing
- The right to data portability
- The right to object
- The right to withdraw explicit consent
- The right to lodge a complaint with a supervisory authority
To exercise these rights:
9. Children's Privacy
Our services are designed for corporate users and are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16.
10. Third-Party Links
Our site may contain links to third-party sites. We are not responsible for the content or privacy practices of those sites. We recommend reading their own privacy policies before visiting them.
11. Changes to This Policy
This Privacy Policy may be updated as needed. Material changes will be communicated to you by e-mail or by notice on the site. You can follow the “Last updated” date at the top of this page.
12. Contact
For questions and requests:
- E-mail:
- KVKK Unit: kvkk@cpiteknoloji.com.tr
- Data Protection Officer (DPO): dpo@cpiteknoloji.com.tr
- Post: CPI Teknoloji Yazılım Arge ve Danışmanlık Tic. Ltd Şti., Maslak, İstanbul, Türkiye