Confidentiality Policy.

Introduction

At Forbayt Technology, we respect your privacy when you visit our website, use our services or contact us. This policy explains the types of personal data we collect, the purposes for which we use it, and your rights.

This policy is provided for information purposes. For processing based on explicit consent (e.g. marketing communications), your consent is obtained separately.

Data Controller

The data controller under Law No. 6698 on the Protection of Personal Data ("KVKK") is:

Data We Collect

We collect personal data in the following categories:

Provided directly by you

• Identity data: First name, last name, company name
• Contact data: Email, phone, address
• Project data: Brief, budget range, expected timeline, project type
• Request messages: Free text you submit via forms

Collected automatically

• Technical data: IP address, browser type, operating system, date of visit
• Usage data: Pages visited, clicks, session duration
• Cookie data: See Cookie Policy

Purposes of Processing

We process your data for the following purposes:

• To respond to your service requests and prepare quotes
• To communicate and report during the project
• To fulfil invoicing and legal obligations
• Marketing communications (only with explicit consent)
• To improve site performance and user experience
• To ensure security and prevent fraud and abuse

Legal Grounds

Your personal data is processed on the following legal grounds under Articles 5 and 6 of the KVKK:

• Necessity for the conclusion or performance of a contract (Art. 5/2-c)
• Fulfilment of a legal obligation (Art. 5/2-ç)
• Legitimate interests (Art. 5/2-f)
• Explicit consent — for marketing communications (Art. 5/1)

Data Transfers

Your personal data may be shared only in the following cases:

• Service providers: Suppliers of hosting, email and infrastructure services, under confidentiality obligations
• Legal requirement: Upon a court order or a request from a public authority
• Business transfer: In the event of a merger or transfer of the company, in line with applicable law

Where a transfer abroad is necessary, it is made only in line with the conditions set out in the applicable legislation.

Retention Periods

Your data is retained for as long as the purpose of processing requires and for the retention periods set out in the applicable legislation; afterwards it is deleted, destroyed or anonymised.

• Contact form data: For as long as needed to answer and follow up on your request
• Contract / project data: For the retention periods set out in the applicable legislation
• Marketing data: Until explicit consent is withdrawn

Security Measures

We take reasonable technical and organisational measures to protect your data:

• SSL/TLS encryption (HTTPS)
• Role-based access control
• Storing passwords in hashed form
• Notification in line with the periods and procedures set out in the legislation in case of a data breach

Your Rights (KVKK Art. 11)

You have the following rights regarding your personal data:

• To learn whether your personal data is processed
• To request information if it has been processed
• To learn the purpose of the processing and whether the data is used in line with that purpose
• To know the third parties in Türkiye or abroad to whom the data has been transferred
• To request rectification if the data has been processed incompletely or inaccurately
• To request erasure / destruction of the data under the KVKK
• To request that third parties to whom the data has been transferred be notified
• To object to analysis carried out by automated systems
• To claim compensation in the event of damage

Contact

To exercise your rights or for any questions:

You may also apply to the Personal Data Protection Authority (KVKK).