Section
In short
This notice explains how we process your personal data when you visit negzel.net and when you write to us. We prepared it under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
- You do not need to give us any personal details to browse the site; there is no membership or newsletter sign-up.
- If you write to us through the contact form or by email, we use what you give us to answer your request.
- Permission for commercial messages is optional; we answer your request whether you give it or not.
- Analytics and marketing cookies run only with your consent.
- We deliver the site through Cloudflare and protect the contact form with Cloudflare Turnstile; our company email is with Google. Both providers process data abroad.
- To use your rights, write to info@negzel.net.
Section
Data controller
Under the KVKK, the data controller is Negzel Teknoloji Anonim Şirketi (Negzel Teknoloji A.Ş.).
Legal name: Negzel Teknoloji Anonim ŞirketiMERSİS (Central Registry) number: 0630109112600001Tax office and number: Erenköy, 6301091126Address: Yalıyolu Street İsmail Ergin Business Center No:52/A Block Floor:4 No:14 Bostancı / Kadıköy / ISTANBULEmail for data protection requests: info@negzel.netPhone: +90 850 304 80 20
Section
Contact form
- The form asks for your name and surname, email address, company name, phone number, the type of service you are interested in and your message.
- When you send the form, the record also stores your IP address, the identification your browser sends (user agent), the page language, the address of the page you sent it from, the boxes showing that you have read this notice and whether you allowed commercial messages, the version of the text you ticked and the time of sending.
- We use this to answer your request, to talk with you about the service you want, to prepare an offer and to keep the form from being filled by automated or malicious submissions.
- To stop automated programs from filling in the form, we use Cloudflare Turnstile verification. The verification box runs only on the Contact page, once the form comes into view. Your browser then connects to Cloudflare, and Cloudflare processes your IP address, the identification your browser sends, the technical fingerprint of the connection (TLS) and the site the box runs on. It does not see what you type in the form.
- When you send the form, our server asks Cloudflare for the result of the verification and passes on your IP address with that request.
- Our legal basis: the conversation you start is directly related to setting up a contract, Article 5(2)(c) of the KVKK. For the IP address, browser details, the submission record and the security verification, protecting the form from abuse is our legitimate interest, Article 5(2)(f); in a possible dispute this record lets us protect our rights, Article 5(2)(e).
- Records are kept in the database on our site's server and can be seen only through our admin panel, which only authorised staff can access.
Cloudflare processes the verification signals on our behalf. According to Cloudflare's own statement, it also uses the same signals under its own responsibility to improve its bot detection; the details are in Cloudflare's Turnstile Privacy Addendum.
Section
Email and phone
If you email or call us directly, we use your name, contact details and what you tell us only to answer your request and to carry on the business conversation that follows. The legal basis is the same as for the contact form, Article 5(2)(c) and Article 5(2)(f) of the KVKK.
Our company email runs on Google Workspace. This means the emails you send us and the replies we send to your request by email are processed on Google's servers abroad.
When a request comes in through the contact form, a notification email goes to our team through Google. This email does not contain your name, contact details or message; it contains the request number, the service you chose, the form language, the page you came from and the time of sending.
Section
When you browse the site
- Our site is delivered through Cloudflare's network for security and speed. With every page request, your IP address, browser details, the address requested and the time pass through Cloudflare and our server, and may end up in server logs used for security and troubleshooting.
- If you open an address that does not exist on the site, we record that address, the page you came from, your browser details and a short value derived from your IP address (not the address itself), so that we can fix broken links.
- Site search runs in your browser; what you type is not sent to our server.
- Legal basis: keeping the site secure and working is our legitimate interest, Article 5(2)(f) of the KVKK.
Section
Maps and videos
The maps on our contact page come from Google Maps and videos in some articles come from YouTube or Vimeo; they load only when you click them. When you do, your browser connects directly to these companies; your IP address and browser details are sent to them, and they process the data under their own privacy policies. You start that connection; the basis is your request and our legitimate interest, Article 5(2)(f) of the KVKK.
Section
Transfers abroad
Some of the services we use have servers outside Türkiye. These include:
- Cloudflare: because our site is delivered through Cloudflare's network, your IP address and the technical details of your request pass through Cloudflare's servers abroad on every visit. The security verification on the Contact page also runs on Cloudflare's servers.
- Google: because our company email is with Google, the emails you send us, our replies and the form notification emails are processed on Google's servers abroad.
- Analytics and marketing tools: only if you consent, measurement data is processed on the tool provider's servers abroad.
When we transfer personal data to a provider abroad, we follow Article 9 of the KVKK: we sign with the provider the standard contract announced by the Personal Data Protection Board and notify the Personal Data Protection Authority within five business days of signing.
When you open a map or a video, your browser itself connects to the servers of Google, YouTube or Vimeo abroad; you start that connection, and the company processes your data under its own policy.
Section
How long we keep your data
- Contact form records and email correspondence: as long as we need them to answer your request and, if there is one, to run the business relationship that follows. When there is no longer a reason to keep a record, or when you ask us to delete it, we delete it permanently.
- Permission for commercial messages: until you withdraw it. As the law requires, we keep the records of your permission and its withdrawal for three years after your permission ends.
- Security verification: we do not store the result of the verification. Cloudflare decides how long the signals it processes are kept.
- Records of addresses that do not exist: 400 days, then deleted automatically.
- Server and security logs: as long as needed for security and troubleshooting.
- Backups: the backup copy of a record we have deleted disappears as backups are renewed, within 30 days at the latest.
- Cookies: for the periods given in the Cookie Policy.
Section
Your rights
Under Article 11 of the KVKK you can apply to us to:
- learn whether your personal data is processed and, if so, request information about it,
- learn the purpose of the processing and whether it is used in line with that purpose,
- learn who it is transferred to in Türkiye or abroad,
- have it corrected if it is incomplete or wrong,
- have it deleted or destroyed under the conditions of Article 7 of the KVKK,
- have corrections and deletions notified to those it was transferred to,
- object to a result against you that comes solely from automated analysis,
- claim compensation if you suffer damage because your data was processed unlawfully.
Section
How to apply
You can send your application, as set out in the Communiqué on the Procedures and Principles of Applications to the Data Controller, in one of these ways:
- as a signed letter, delivered by hand or by post to our address above,
- by sending an application signed with a secure electronic or mobile signature to info@negzel.net,
- by writing to info@negzel.net from an email address you have given us before and that is in our records.
Your application should include your name and surname, your signature for written applications, your Turkish ID number (or, if you are not a Turkish citizen, your nationality and passport or ID number), your address for notifications, your email address and phone number if you have them, and your request.
We answer free of charge within 30 days at the latest. If the answer runs over 10 pages, a fee of 1 TL per extra page may apply; if it is given on a storage medium such as a CD or USB drive, the cost of the medium may be charged.
If your application is rejected, if you find our answer insufficient or if you receive no answer in time, you can complain to the Personal Data Protection Board within 30 days of learning our answer, and in any case within 60 days of your application.
Section
Consent to commercial electronic messages
The commercial messages box on the contact form is optional and is not ticked in advance. If you leave it empty we still answer your request; our answers to your request do not need separate permission.
If you tick it, you allow Negzel Teknoloji A.Ş. to send promotional and informational messages about our services, events and announcements to the email address and phone number you gave in the form, by email, text message or phone call. This permission falls under Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages.
We process your contact details for these messages on the basis of the explicit consent you give by ticking the box (Article 5(1) of the KVKK).
Before sending any message, we register your permission in the Message Management System (İYS) as the law requires. You can withdraw your permission at any time without giving a reason: through the opt-out option in every message we send, by writing to info@negzel.net, or through İYS (iys.org.tr).
Section
Effective date and updates
Last updated: 7 October 2026. When the data we process or our purposes change, we update this notice and its date. We keep the version of the text you ticked on the contact form together with your record.