KVKK Privacy Notice and Privacy Policy

Data controller

The data controller is Tarık Çelik, who runs this website under the Synorq name as an individual.

Contact: contact@synorq.com

Personal data processed

The contact form collects the following:

• Full name
• Email address
• Phone number (optional)
• Business name (optional)
• Area of interest
• Estimated budget range
• Preferred start time (optional)
• Message
• The page of this website you were on before opening the contact form (the page address only)
• IP address: used only to limit repeated submissions and measurement requests. It is hashed, kept in server memory for up to 15 minutes, and not written to a database.

How data is collected

Data is collected electronically through the contact form on this website. If you write by WhatsApp or email, or book a call through the calendar link, the information you share reaches us through those channels.

Requests that arrive by WhatsApp, Instagram, phone or similar channels may be entered by hand into the same record system as the form submissions.

When you book a call through the calendar link, the booking system (Cal.com) passes on your name, your email address, your phone number if you gave one, and your booking note. This information is stored in the same database.

Where data is stored and who can access it

In addition to being delivered by email, form submissions are stored in a database. The database provider is Supabase and the servers are in Frankfurt (European Union).

Only the data controller accesses the records, through an administration panel. The panel has no password: sign-in uses a one-time link sent by email together with two-step verification.

Purposes and legal bases

Replying to your request, preparing a quote, and scheduling a call: processing is directly related to the establishment of a contract (KVKK Article 5/2-c).

Protecting the website from misuse and measuring site usage in aggregate: legitimate interest of the data controller (KVKK Article 5/2-f).

Recipients

Data is shared only with the service providers that run this website:

• Vercel (USA): hosts the website and processes technical connection data, including the IP address, to serve requests.
• Resend (USA): delivers the form submission to us by email; it processes the form content.
• Supabase (server region: Frankfurt, EU): provides the database where form submissions and conversation records are stored.
• Cal.com: provides the booking system; it processes the information you enter when you book a call.
• An external service that receives form submissions so requests can be recorded.
• Vercel Web Analytics and Speed Insights (USA): measure page views and loading speed without placing cookies in your browser.

Retention

Requests that did not lead to an agreement are kept for 1 year after the last contact. After that, the information that identifies you (name, email, phone, messages and notes) is deleted and the record is anonymised. Requests with an ongoing conversation, and work that led to an agreement, are not subject to this period.

Security and operation logs are kept for 30 days. They contain no name, email address, phone number, message or IP address. The record of actions taken in the administration panel contains no personal data and is kept without a time limit.

You can ask for your data to be deleted at any time.

Your rights

Under Article 11 of KVKK you have the right to:

• Learn whether your personal data is processed
• Request information about the processing
• Learn the purpose of the processing and whether the data is used accordingly
• Know the third parties in Türkiye or abroad to whom the data is transferred
• Ask for incomplete or incorrect data to be corrected
• Ask for the data to be deleted or destroyed
• Ask for corrections and deletions to be notified to third parties who received the data
• Object to a result against you that arises solely from automated analysis
• Claim compensation if you suffer damage from unlawful processing

How to apply

Send your request to contact@synorq.com. It is answered within 30 days at the latest.

Changes

This notice may be updated. The current version is always on this page.