When you write to us, you deserve to know why we ask for each detail, who sees it and when it is deleted. Here it is, plainly.
Last updated10 November 2026Data controllerNanbis Software Teknoloji Seyahat ve Turizm Hizmetleri A.Ş.
This is a translation. If it differs from the Turkish text, the Turkish text prevails.
In short
01We process only what we need to reply to you, prepare a proposal and keep the site secure.
02We never sell your details, use them for advertising or send you newsletters without your permission.
03One email is enough to access, correct or delete your data.
01
Data controller
This notice is issued by Nanbis Software Teknoloji Seyahat ve Turizm Hizmetleri A.Ş. (“Nanbis”) as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK” or the “Law”) and the Communiqué on the Procedures and Principles for the Duty to Inform.
Detail
Value
Company
Nanbis Software Teknoloji Seyahat ve Turizm Hizmetleri A.Ş.
Address
JUSTWork, Meydan İstanbul AVM, Balkan Cd. No:62, 34770 Ümraniye/İstanbul
We collect personal data only through the channels you use to reach us and during your visit to the site, by automated or partly automated means.
Channel
Data processed
Contact form
Full name, email, phone and company (optional), the topic you choose, your message.
Start a project form
Full name, email, phone and company (optional); the services you need, project description, budget and target timeline, current website, domain, hosting and email status, required features, files you upload (brief, logo, etc.).
Phone, WhatsApp and email
Full name, phone number, email address, content of calls and correspondence.
Visiting the site
IP address, browser and device details, date and time of visit, page requested (server and security logs). See the Cookie Policy for details.
Contact form
Data processedFull name, email, phone and company (optional), the topic you choose, your message.
Start a project form
Data processedFull name, email, phone and company (optional); the services you need, project description, budget and target timeline, current website, domain, hosting and email status, required features, files you upload (brief, logo, etc.).
Phone, WhatsApp and email
Data processedFull name, phone number, email address, content of calls and correspondence.
Visiting the site
Data processedIP address, browser and device details, date and time of visit, page requested (server and security logs). See the Cookie Policy for details.
iWe do not need special categories of personal data such as health, religion, ethnicity or biometrics. Please leave such information out of the forms and your files. If your files contain other people's details, please let them know before sharing.
03
Purposes and legal grounds
We process your data for the purposes below, on the legal grounds listed in Article 5(2) of the Law:
Purpose
Legal ground
Assessing your project request, preparing a proposal, running pre-contract discussions
Necessary for entering into or performing a contract (Art. 5(2)(c))
Replying to your message, routing it to the right team, following up support and partnership requests
Our legitimate interest, provided it does not harm your fundamental rights (Art. 5(2)(f)); Art. 5(2)(c) where the request concerns a service
Reviewing messages about careers
Necessary for entering into a contract (Art. 5(2)(c))
Keeping the site secure and available, preventing abuse and attacks
Our legal duty to take data security measures (Art. 5(2)(ç)) and legitimate interest (Art. 5(2)(f))
Protecting our rights in a dispute, answering requests from competent authorities
Establishing, exercising or protecting a right (Art. 5(2)(e)) and being expressly provided for by law (Art. 5(2)(a), (ç))
Assessing your project request, preparing a proposal, running pre-contract discussions
Legal groundNecessary for entering into or performing a contract (Art. 5(2)(c))
Replying to your message, routing it to the right team, following up support and partnership requests
Legal groundOur legitimate interest, provided it does not harm your fundamental rights (Art. 5(2)(f)); Art. 5(2)(c) where the request concerns a service
Reviewing messages about careers
Legal groundNecessary for entering into a contract (Art. 5(2)(c))
Keeping the site secure and available, preventing abuse and attacks
Legal groundOur legal duty to take data security measures (Art. 5(2)(ç)) and legitimate interest (Art. 5(2)(f))
Protecting our rights in a dispute, answering requests from competent authorities
Legal groundEstablishing, exercising or protecting a right (Art. 5(2)(e)) and being expressly provided for by law (Art. 5(2)(a), (ç))
We do not add you to marketing lists, profile you or target you with ads. If we ever want to send you newsletters or campaigns, we will do so only with your separate, explicit consent.
04
Who we share your data with
We share your data only as far as the purposes above require, and only with:
Our hosting and email provider: the servers in Türkiye that run the site and our company email.
Our accountants and legal advisers: only if we enter into a contract with you, and only as needed.
Competent public authorities and courts: only when required by law.
Some of our service providers run servers outside Türkiye, so your data is transferred abroad in these cases:
Recipient
Purpose
Data
Jotform Inc. (USA)
Recording form submissions and passing them to our team
Everything you enter in the forms and the files you upload
Cloudflare, Inc. (USA, global network)
Delivering the site quickly and securely, blocking attacks
IP address, browser details, request logs
Google LLC (USA)
Showing our clients' typefaces on portfolio project pages (Google Fonts)
IP address, browser details
WhatsApp (Meta Platforms, Ireland/USA)
Only if you choose to message us on WhatsApp
Phone number, name, message content
Jotform Inc. (USA)
PurposeRecording form submissions and passing them to our team
DataEverything you enter in the forms and the files you upload
Cloudflare, Inc. (USA, global network)
PurposeDelivering the site quickly and securely, blocking attacks
DataIP address, browser details, request logs
Google LLC (USA)
PurposeShowing our clients' typefaces on portfolio project pages (Google Fonts)
DataIP address, browser details
WhatsApp (Meta Platforms, Ireland/USA)
PurposeOnly if you choose to message us on WhatsApp
DataPhone number, name, message content
Transfers abroad are made in line with Article 9 of the Law, under appropriate safeguards such as the standard contracts published by the Personal Data Protection Board, or occasionally where they are necessary to take pre-contract steps at your request.
05
How long we keep it
Record
Retention period
Contact messages and correspondence
[XX] years from the last message
Project requests that do not lead to a contract, and uploaded files
[XX] years from the request
Requests that lead to a contract
For the term of the contract, then for the period the law sets for commercial books and records (Turkish Commercial Code Art. 82: 10 years)
Server and security logs
[XX] days
Contact messages and correspondence
Retention period[XX] years from the last message
Project requests that do not lead to a contract, and uploaded files
Retention period[XX] years from the request
Requests that lead to a contract
Retention periodFor the term of the contract, then for the period the law sets for commercial books and records (Turkish Commercial Code Art. 82: 10 years)
Server and security logs
Retention period[XX] days
When the period ends or the reason for processing no longer exists, your data is deleted, destroyed or anonymised.
06
Your rights
Under Article 11 of the Law, you can ask us to:
Tell you whether we process your personal data and, if so, give you information about it,
Tell you the purpose of processing and whether the data is used for that purpose,
Tell you the third parties in Türkiye or abroad to whom your data is transferred,
Correct data that is incomplete or inaccurate,
Delete or destroy your data under the conditions in Article 7 of the Law,
Notify the third parties who received your data of any correction, deletion or destruction,
Hear your objection to any result against you that arises solely from automated analysis of your data,
Compensate you for any damage caused by unlawful processing of your data.
07
How to apply
Under the Communiqué on the Procedures and Principles for Applications to the Data Controller, you can send your request:
In writing with a wet signature, delivered by hand or through a notary to our address above,
To our registered e-mail (KEP) address,
With a secure electronic or mobile signature, or from an email address you have previously given us and that is registered in our records, to [email protected].
Please include your full name, Turkish ID number (or, if you are not a Turkish citizen, your nationality and passport or ID number), your address for notices, your email and phone number if any, and what you are asking for.
We will conclude your request free of charge within 30 days at the latest. If it involves an additional cost, a fee set by the Board's tariff may apply. If your request is refused, you find the answer insufficient or we do not reply in time, you can complain to the Personal Data Protection Board.
08
Changes
We may update this notice as our services or the law change. The current version is always on this page, with the date of the latest update at the top.
Any questions?
Write to us directly about anything concerning your personal data. We reply within 30 days, free of charge.