KVKK Privacy Notice

1. Data controller

Under the KVKK, the data controller for your personal data is:

Data controller

Kodfixer

Address

Abidinpaşa, 06530 Çankaya/Ankara, Türkiye

E-mail

info@kodfixer.com

Phone

+90 850 840 73 45

Website

kodfixer.com

2. Categories of personal data processed

• Identity: name and surname.
• Contact: e-mail address, phone number.
• Customer transaction: project type; project description and message content; the subject in the contact form; budget range and preferred start time; call-back request and suitable call time; conversations with the AI assistant and the request summary extracted from them; the company name, subject and request type in the support form; the date, time and duration of phone calls.
• Transaction security: IP address, browser information (user agent), the time the form was displayed and submitted, the address of the page the submission was made from.
• Site usage information: pages viewed, the referring site’s domain, device type, time of visit, randomly generated visitor and session IDs, clicks on contact links, form steps.
• Marketing (advertising measurement): cookie identifiers, page view, interaction and conversion information collected through the Google tag, and hashed e-mail address, phone number and name.

3. Purposes of processing

• Receiving, assessing and concluding quote, information, support and call-back requests;
• Contacting you and conducting pre-project discussions and contract processes;
• Answering your questions through the AI assistant and passing your requests on to our team;
• Running information security processes, and detecting and blocking automated and abusive submissions;
• Measuring site usage statistically and improving the site;
• Measuring the results (conversions) of advertising activities and managing advertising processes;
• Complying with legal obligations, providing information to competent authorities and protecting rights in possible disputes.

4. Transfer of personal data

In Turkey: your personal data may be transferred to competent public authorities and courts when they request it under our legal obligations, limited to that request.

Abroad: your personal data is transferred to service providers located abroad for the following purposes:

• Google: measuring advertising conversions with Google Ads; generating the AI assistant’s replies with the Gemini API; e-mail service through Google Workspace (info@kodfixer.com); serving the home page video through YouTube.
• Netlify: hosting the site and storing site records (form, chat, visit and click records).
• Yandex: sending form and AI assistant notification e-mails.

If you contact us on WhatsApp, your messages are transmitted over the infrastructure of WhatsApp (Meta Platforms).

5. Method of collection and legal bases

Method of collection: your personal data is collected electronically: directly from you, through the Start a Project and Contact forms on kodfixer.com, the support form on the user guide page and the AI assistant; automatically, through the site’s server records, the Google tag, cookies and similar technologies; and through our phone, WhatsApp and e-mail channels when you contact us there.

Legal bases (KVKK Art. 5/2):

• (c) Directly related to the establishment or performance of a contract: identity, contact and customer transaction data relating to your quote and project requests.
• (f) Our legitimate interests, provided that your fundamental rights and freedoms are not harmed: answering general enquiries, transaction security data, site usage statistics and measuring advertising conversions.
• (ç) Compliance with our legal obligations and (e) the establishment, exercise or protection of a right: statutory obligations and possible disputes.

6. Your rights under Article 11 of the KVKK

By applying to the data controller, you can exercise the following rights:

• (a) to learn whether your personal data is processed;
• (b) to request information about the processing if your personal data has been processed;
• (c) to learn the purpose of the processing and whether your data is used in line with that purpose;
• (ç) to know the third parties in Turkey or abroad to whom your personal data is transferred;
• (d) to request the correction of your personal data if it is incomplete or inaccurate;
• (e) to request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK;
• (f) to request that the actions taken under (d) and (e) be notified to the third parties to whom your personal data has been transferred;
• (g) to object to a result to your detriment arising from the analysis of the processed data exclusively by automated systems;
• (ğ) to claim compensation for damage you suffer because your personal data has been processed unlawfully.

7. How to apply

You can submit requests concerning the rights above, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, in one of the following ways:

• In writing, with a wet-signed petition and documents proving your identity, delivered by hand or through a notary to Abidinpaşa, 06530 Çankaya/Ankara, Türkiye;
• By e-mail to info@kodfixer.com, signed with a secure electronic signature or a mobile signature;
• By e-mail to info@kodfixer.com from the e-mail address you have previously given us and that is registered in our system (for example, the address you used in a form or in your correspondence with us).

Your application must include your name and surname and, if it is in writing, your signature; for Turkish citizens, your Turkish ID number; for foreign nationals, your nationality and your passport number or ID number, if any; your residential or business address for notifications; your e-mail address and phone number for notifications, if any; and the subject of your request.

Your application will be concluded free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request; if the action requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, you find the response insufficient or no response is given in time, you can file a complaint with the Personal Data Protection Board within 30 days of learning of the response and in any case within 60 days of the date of your application (KVKK Art. 14).