Privacy Policy

At Tech Fabrika we take the privacy and security of your personal data seriously.

This Privacy Policy explains how your personal data is collected, used and protected, and when it may be shared with third parties, when you visit the Tech Fabrika website, contact us, request a demo or presentation, apply for a role, or ask for information about our products and services.

We aim to process personal data in line with Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), with the European Union General Data Protection Regulation (“GDPR”) to the extent it applies, and with other relevant data protection legislation.

1. Data Controller

The controller for the personal data processing carried out through this website is Tech Fabrika.

Tech Fabrika

Locations: Istanbul · Rotterdam · Düsseldorf Email: tech@techfabrika.co WhatsApp / Phone: +90 533 547 19 92

You can reach us through the channels above with any question about your personal data or about this Privacy Policy.

2. What Data We May Collect

Depending on how you interact with Tech Fabrika, the following personal data may be processed.

Identity Data

First name, surname and similar identity details you share with us.

Contact Data

Email address, telephone number, WhatsApp contact details and other contact channels.

Company and Professional Data

Company name, role, position, sector, corporate contact details and other professional information you share with us.

Enquiry and Project Data

What you share with us through the contact form, a demo request, a presentation request or a project conversation:

• project descriptions,
• business needs,
• technical requirements,
• the products or services you are interested in,
• your messages and requests.

Job Application Data

If you apply through our careers page, the following may be processed:

• CV,
• education and experience details,
• LinkedIn profile,
• GitHub or portfolio links,
• contact details,
• the position applied for,
• other information you send as part of the application.

Please do not share special-category or otherwise sensitive personal data that is not needed for your application.

Technical and Usage Data

When you use our website, technical information may be generated automatically by our infrastructure, such as:

• IP address,
• device and browser information,
• operating system,
• time of visit,
• pages viewed,
• referring page or source,
• error and security logs.

Cookie and Analytics Data

Depending on the cookies used on the website and on your preferences, statistical or analytical information about site usage may be collected.

Our separately published Cookie Policy has the detail.

3. Why We Process Personal Data

We may use the personal data we collect in order to:

• respond to your enquiries,
• assess demo and presentation requests,
• discuss potential projects and collaborations,
• provide information about products and services suited to you,
• run proposal and project processes,
• manage customer and prospective-customer relationships,
• handle requests about our SaaS products and technology services,
• assess job applications and manage recruitment,
• keep the website secure,
• detect and fix technical problems,
• improve website performance and user experience,
• prevent fraud, misuse and unauthorised access,
• meet our legal obligations,
• establish, exercise or defend legal claims.

We aim to process personal data for specified, explicit and legitimate purposes, and only to the extent necessary.

4. Legal Bases for Processing

Depending on the applicable legislation, your personal data may be processed on one or more of the following legal bases:

• your explicit consent,
• processing being necessary for entering into or performing a contract,
• compliance with a legal obligation,
• the establishment, exercise or defence of a legal claim,
• the legitimate interests of Tech Fabrika, provided your fundamental rights and freedoms are not harmed,
• other legal grounds expressly set out in the applicable legislation.

Where explicit consent is required for marketing or analytics purposes, the relevant processing will only take place once that consent has been given.

5. How Personal Data Is Collected

Your personal data may be collected by electronic means — or, where necessary, physical means — through:

• website contact forms,
• demo and presentation request forms,
• job application forms,
• email,
• telephone,
• WhatsApp,
• professional communication channels,
• meetings and conversations,
• cookies and similar technologies,
• web server and security logs.

6. Sharing of Personal Data

Tech Fabrika does not sell your personal data to third parties for commercial purposes.

Where it is necessary in order to run our operations, personal data may be shared on a limited basis with:

• hosting and cloud service providers,
• email and communication infrastructure providers,
• CRM and business management systems,
• analytics and website performance services,
• cyber security and technical infrastructure providers,
• software and SaaS service providers,
• professional advisers,
• legal, accounting and audit service providers,
• competent public authorities and official bodies.

Such sharing only takes place to the extent necessary to deliver the relevant service or to meet a legal obligation.

7. International Data Transfers

Because Tech Fabrika operates across Istanbul, Rotterdam and Düsseldorf, and because some of the technology services we use run infrastructure in other countries, your personal data may where necessary be processed or stored on systems outside Türkiye.

Where an international transfer is required, we aim to apply the legal and technical mechanisms required by the applicable provisions of the KVKK and the GDPR.

Data security and data protection standards are taken into account when we choose service providers.

8. Retention Period

We keep your personal data only for as long as is necessary for the purpose it was processed for, or for the periods required by applicable legislation.

In setting a retention period we may take into account:

• the purpose of processing,
• legal obligations,
• contractual relationships,
• possible disputes and limitation periods,
• security requirements.

When the legal or operational reason for keeping the data no longer applies, the data is deleted, destroyed or anonymised in line with the relevant legislation.

9. Data Security

We aim to apply appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, misuse, alteration and unlawful disclosure.

Depending on the nature of the system, those measures may include:

• access control and authorisation,
• secure authentication methods,
• encrypted data transmission,
• system and security logs,
• backup mechanisms,
• security updates,
• restriction of privileges,
• security monitoring and incident management,
• data minimisation.

It should be remembered, however, that no system for transmitting or storing data over the internet is entirely free of risk.

10. Cookies

Our website may use cookies or similar technologies in order to make core functions work, keep the site secure, remember preferences and — where permitted — analyse usage statistics.

You can change your cookie preferences through the cookie management panel on the website.

The use of non-essential cookies depends on your consent wherever the applicable legislation requires it.

See our Cookie Policy for the detail.

11. Third-Party Links

Our website may contain links to LinkedIn and to other third-party websites and services.

Those platforms have their own privacy policies and data processing practices.

Tech Fabrika is not responsible for the independent data processing of third-party platforms. We recommend reading the relevant provider’s privacy policy before using its services.

12. Bot Protection (Cloudflare Turnstile)

To protect our forms and the site assistant from automated abuse we use **Turnstile**, a service provided by Cloudflare, Inc.

Turnstile runs in **invisible** mode: you will not see a box or a checkbox to tick. Verification happens in the background, and while it does, technical signals sent by your browser and your IP address are transmitted to Cloudflare, which processes them to assess whether the visit comes from a person or an automated client.

The result of the check is not stored by us; it is used at that moment only, to decide whether your submission is accepted.

Cloudflare's data protection commitments specific to this service are set out in the **Turnstile Privacy Addendum**: https://www.cloudflare.com/application-services/terms/turnstile-privacy-addendum/

13. Your Rights Depending on the applicable legislation, you may have a number of rights in relation to your personal data.

Those rights may include:

• learning whether your personal data is being processed,
• requesting information about the data processed,
• learning the purposes of the processing,
• learning the third parties the data has been transferred to,
• asking for incomplete or incorrect data to be corrected,
• asking for the data to be deleted or destroyed where the conditions are met,
• objecting to processing in certain circumstances,
• asking for processing to be restricted where applicable,
• requesting data portability where applicable,
• withdrawing consent where processing is based on it,
• claiming compensation under the relevant legislation for damage caused by unlawful processing.

The scope of your rights may vary according to the country you are in and the legislation that applies.

14. How to Exercise Your Rights

To make a request about your personal data, contact us at:

tech@techfabrika.co

We may ask for reasonable additional information to verify your identity so that your request can be handled safely.

Requests are assessed within the periods set out in the applicable legislation.

15. Children’s Privacy

Tech Fabrika’s website and services are aimed primarily at businesses and professional users.

We do not knowingly set out to collect personal data from children. If you believe such data has reached us by mistake, please contact us at tech@techfabrika.co.

16. Automated Decision-Making and Artificial Intelligence

Although Tech Fabrika is a company that builds artificial intelligence technology, visiting our website or filling in our standard contact forms is not intended to trigger a fully automated decision-making process that produces legal or similarly significant effects concerning you.

Should such a mechanism be used in future, the additional information and rights required by the applicable data protection legislation will be provided.

17. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time for reasons such as:

• changes in legislation,
• changes in the technologies we use,
• the launch of new products or services,
• changes in our personal data processing activities.

The current version is published on this page and the “Last updated” date is changed.

Where changes are significant, further notice may be given as needed.

18. Website Assistant (Artificial Intelligence)

Our website provides an AI assistant that answers questions about our services and products.

Before a conversation begins, we ask for your name and a way to reach you (email or telephone). This data is processed only with your explicit consent, and the consent is recorded together with a verbatim copy of the text shown to you.

In this context:

• Your name and contact details are stored and used to assess your enquiry and to get back to you.
• The messages you write during the conversation and the assistant’s replies are stored so that your enquiry is understood correctly and passed to our representative in full. The record is held in our admin panel, accessible only to authorised staff.
• Your questions are sent to a language model so that an answer can be produced. The model provider must hold an approved record in our processor inventory; no data is sent to a provider without one.
• Assistant answers can be wrong or incomplete. They are not a binding offer, commitment or professional advice.
• The assistant does not produce an automated decision about you that has legal or similarly significant effects.

Records are kept only as long as necessary for the purpose, and for no longer than twelve months.

19. Contact

You can contact us about privacy, your personal data or this policy.

Tech Fabrika

Istanbul · Rotterdam · Düsseldorf

Email: tech@techfabrika.co WhatsApp / Phone: +90 533 547 19 92

We design trust while we build technology.