Privacy Policy
Last updated: 2026-05-23
1. Introduction
At Babil Yazılım, we take the privacy and security of every visitor and customer seriously. This Privacy Policy explains what data we collect, how we process it, and your rights under Turkey's Personal Data Protection Law (KVKK, Law no. 6698) and the EU General Data Protection Regulation (GDPR).
2. Data Controller
Under the KVKK, the data controller is Babil Yazılım. Contact:
- Email: [email protected]
- Phone: +90 507 503 79 89
- Web: babilyazilim.com.tr
- Address: Mersin, Türkiye
3. Personal Data We Collect
We collect the data listed below based on your explicit consent and to provide the requested services:
- Contact form: name, email, phone (optional), message body.
- Newsletter sign-up: email address.
- Site usage: IP address, browser, pages viewed, visit duration, referrer.
- Cookies: session cookies (necessary), plus analytics / marketing cookies (only with explicit consent).
- Form context: the URL of the page from which a lead form was submitted.
4. Purposes of Processing
- Respond to your inquiries and manage proposal / sales conversations.
- Customer relationship management (CRM) and pipeline tracking.
- Measure and improve site performance (analytics).
- Deliver newsletters and industry content (only if you subscribed).
- Fulfill legal obligations (KVKK, tax law, etc.).
5. Data Sharing (Third Parties)
We rely on widely adopted cloud and SaaS providers to operate the site and deliver our services. Each provider processes your data only within its service scope and in line with this policy. The general categories of providers we work with are:
- Analytics and measurement platforms: usage statistics, heatmaps and anonymous session analysis.
- Tag and content management platforms: site infrastructure and publication workflow.
- Email delivery infrastructure: transactional email and newsletter distribution.
- Customer relationship management (CRM) platforms: lead and pipeline tracking.
- Scheduling / calendar service: meeting bookings.
- Cloud database and hosting infrastructure: application, content and form-data delivery.
We will share the current list of specific sub-processors on request; this list may change from time to time as our technical infrastructure evolves. All providers maintain security standards consistent with KVKK and GDPR.
6. Cross-Border Data Transfers
Some of the providers above operate servers outside Türkiye (notably the USA and EU). Under KVKK Article 9 these transfers rely on your explicit consent. All providers maintain security standards consistent with GDPR and KVKK.
7. Data Retention
- Contact form entries: up to 2 years.
- Newsletter subscriptions: while subscribed; deleted on unsubscribe.
- Analytics data: up to 14 months, per provider default.
- Session recordings and heatmaps: up to 1 year, per provider default.
- Server logs: 6 months (security analysis).
8. Your Rights (KVKK Article 11 / GDPR)
As a data subject, you have the right to:
- Ask whether your personal data is processed.
- Request information if it is processed.
- Learn the purpose of processing and whether it is used accordingly.
- Know the third parties to whom data is transferred (domestic or abroad).
- Request correction if data is incomplete or inaccurate.
- Request deletion under KVKK Article 7.
- Request that corrections, deletions, or destruction be communicated to third parties.
- Object to outcomes derived solely from automated processing.
- Claim compensation if you suffered damage due to unlawful processing.
To exercise these rights, write to [email protected]. We respond within the KVKK-mandated 30 days.
9. Cookies and Tracking
We use three cookie categories:
- Necessary: required for core site functionality; cannot be disabled.
- Analytics: usage statistics and session insights — opt-in only.
- Marketing: ad and content personalization — opt-in only.
Manage your preferences via the consent panel that appears on the site; you may change them any time.
10. Data Security
We apply industry-standard safeguards (HTTPS / TLS, encrypted database, access controls, firewall) to protect data against unauthorized access, alteration, disclosure, or destruction. Our providers operate at comparable standards.
11. Policy Updates
We may update this policy from time to time. The "Last updated" date at the top changes for any material revision; newsletter subscribers are notified by email for significant changes.
12. Contact
For any question, request, or complaint regarding this policy or your personal data: [email protected].
