Privacy Policy

This English text is an informational translation. The legally binding version is the Turkish original published at /tr/gizlilik-politikasi. References are to Turkish legislation and have not been replaced with EU/GDPR provisions.

Last updated: [Effective date: to be completed by client]

At CN Denetim ve SMMM A.Ş. we value the privacy of everyone who visits our website. This Privacy Policy explains what information we collect through our site, why and how we use it, with whom we share it and what your rights are.

The principles governing the processing of your personal data under Turkish Personal Data Protection Law No. 6698 ("KVKK") are set out in our Disclosure Notice and our KVKK Policy; the use of cookies is governed by our Cookie Policy.

1. Site Owner and Contact

Company name	CN Denetim ve SMMM A.Ş.
Address	Şenlikköy Mh. Harman Sk. No:42/A D:5, Florya / Küçükçekmece / İstanbul
E-mail	info@cndenetim.com.tr
Telephone	[Telephone: to be completed by client]

2. Information We Collect on Our Site

2.1. Information you give us

• Contact form: Full name, e-mail address, telephone number, company name, the service you are interested in and your message. To submit the form you must tick the box confirming that you have read the KVKK disclosure; this confirmation is recorded.
• Newsletter subscription: Your e-mail address and language preference.
• Direct correspondence: The information you send us by e-mail or telephone.

2.2. Information collected automatically

• Server log records: IP address, date and time, requested page, HTTP status code, browser and operating system information. These records are kept for site security, error detection and prevention of misuse.
• Abuse prevention: IP-based rate limiting is applied to form submissions and an invisible field (honeypot) is used to filter out automated bot submissions. Your IP address is processed temporarily for this purpose.
• Cookies: Only strictly necessary cookies are used on our site. See our Cookie Policy for details.

No payments are taken through our site; no credit card or similar payment instrument data is collected. Our site is not directed at persons under the age of 18 and does not knowingly collect personal data belonging to children.

3. How We Use the Information

• To respond to your requests, questions and quotation enquiries,
• To provide information about our services and conduct pre-contractual discussions,
• To send newsletters where you have given explicit consent,
• To keep the site secure, fix errors and prevent misuse,
• To fulfil our legal obligations.

The information you submit through the form is not used for any purpose other than responding to your request, and is not added to marketing lists without your consent.

4. Sharing of Information

Your information is not sold, rented or transferred to third parties for marketing purposes. Sharing takes place only in the following cases and only to the extent necessary:

• With the suppliers that provide hosting, e-mail delivery and technical maintenance services for the site (acting as data processors, under a confidentiality agreement): [Hosting and e-mail service providers: to be completed by client],
• With competent public authorities and judicial or administrative bodies upon request under legislation,
• With our legal advisers where necessary for the establishment, exercise or protection of a right.

5. Retention Periods

• Contact form records: 2 years from the closure of the request,
• Newsletter subscription records: until the subscription is cancelled,
• Server log records: 2 years,
• Records of discussions that result in a contract: for the retention periods set out in the relevant legislation.

At the end of these periods the data is erased, destroyed or anonymised.

6. Security

• Access to the site and the administration panel is encrypted with HTTPS/TLS,
• The administration panel session is protected by a secure session cookie readable only by the server (HttpOnly),
• Form input is validated on the server side and filtered against malicious content,
• Access to the administration panel is limited by role-based authorisation,
• The database is backed up regularly and backups are stored in an access-controlled environment.

We remind you that no transmission over the internet or electronic storage is 100% secure; nevertheless, we apply reasonable and up-to-date technical and administrative measures to protect your data.

7. Third-Party Links

An embedded frame (iframe) served by Google Maps may be used on our site to display our location. When that content loads, the provider concerned may access information such as your IP address through your browser; the provider is responsible for its own privacy practices. When you click other external links on our site, the privacy policy of the relevant site applies.

8. Your Rights

To exercise your rights under Article 11 of the KVKK you may follow the application methods described in our KVKK Policy or write to info@cndenetim.com.tr. You may cancel your newsletter subscription at any time using the link at the bottom of each e-mail or by writing to us.

9. Changes

This policy may be updated in line with changes in legislation or in our services. The current text is always published on this page; for significant changes the date at the top of the page is updated.