doktorweb.

Privacy notice · Updated 28 September 2026

Your information, handled with care.

This notice is for website visitors, people requesting proposals and customer portal users. It explains how information is processed and how to exercise your rights.

Let’s build your next chapter ↗

1. Data controller and contact

The data controller is Abdulkadir Bilici, the sole proprietor operating under the Doktorweb Creative Solutions brand. Address: Feritpaşa Mh., Ulaşbaba Cd. No:24 D:101, 42100 Selçuklu/Konya, Türkiye. Contact and applications: bilgi@doktorweb.com.tr. Reading this notice does not in itself constitute explicit consent.

2. Information, purposes and legal grounds

Quotes and enquiries: your name, email, optional phone number, company and city, project requirements and budget preferences are used to evaluate your request, contact you and prepare a proposal. Article 5(2)(c) of Turkish Law No. 6698 applies to contract preparation; Article 5(2)(f) applies to other enquiries where your fundamental rights are not adversely affected.

Customer portal and projects: account details, correspondence, project files, delivery and approval records are processed to provide the service and track the project under Article 5(2)(c). Records needed to establish or protect a right are processed under Article 5(2)(e).

Payments and contracts: proposal and contract details, payment amounts and uploaded receipt information are processed under Article 5(2)(c); applicable financial and legal obligations under Articles 5(2)(a) and 5(2)(ç); protection of rights in disputes under Article 5(2)(e). Please conceal information unrelated to the transaction when uploading receipts.

Security: IP address, request and session details, transaction time and security logs are used to prevent unauthorised access and misuse and investigate errors under Article 5(2)(f), or Article 5(2)(e) where needed to protect a right.

Assistant: messages are sent to our server to understand and answer your request. Contract preparation information is processed under Article 5(2)(c); technical records needed for safe operation under Article 5(2)(f). Do not send passwords, card details, health information or unrelated personal data in chat.

Any use requiring separate explicit consent must be explained and consent obtained separately. This notice is not general marketing permission.

3. How information is collected

Information is collected through planners and quote forms, the customer portal, file uploads, the assistant, email, phone and your chosen communication channels, automatically or through non-automated methods forming part of a filing system. Technical records may be generated when you access the site or sign in.

4. Recipients and transfers

Personal information is stored on the virtual server and storage infrastructure of our hosting providers. Email addresses and notification content are processed by our email provider to deliver sign-in links and project notifications. Sharing is limited to information necessary for the service. Information may be disclosed to authorised authorities following valid requests or legal obligations.

The Turkish contact page loads OpenStreetMap tiles, which sends IP addresses and browser technical information to that service. Opening WhatsApp or Google Maps links subjects you to their own processing terms.

At the date of this notice, an external AI provider is not enabled on the live site. Before enabling one, recipients, transfer scope and required legal conditions must be assessed and this notice updated.

Transfers to infrastructure outside Türkiye are subject to Article 9. This notice does not replace a required transfer mechanism or separate explicit consent.

5. Cookies and browser storage

A session cookie maintains customer portal sign-in. Light or dark appearance preferences may be kept in local storage; project summaries transferred from a calculator or assistant to the planner may be kept in session storage. You can clear these in browser settings. Removing the session cookie requires you to sign in again.

Optional visit measurement on the Turkish pages is enabled only with permission. It records daily totals of visits, page views, planner clicks and steps, submission attempts, errors and saved enquiries. Reports include the page path, not names, email addresses, form content, browser identifiers or IP addresses. The measurement preference and date used to avoid counting repeat visits on the same day are kept in local storage; planner step, source page and submission markers use session storage. Enquiry references are excluded from reports. You can change the preference through the measurement preferences button. Withdrawing permission stops future measurement; an individual visit cannot be separated from previous daily totals.

6. Retention and deletion

Retention depends on whether the enquiry or project is ongoing, the contract relationship, applicable legal retention duties and the need to protect rights. A single period does not apply to every data type. When processing conditions no longer apply, data must be deleted, destroyed or anonymised. You may ask about the reason for retention or request deletion using the application methods below.

7. Your rights

Under Article 11, you may learn whether your information is processed and request details; ask about the purpose and whether use is consistent with it; learn about domestic or overseas recipients; request correction of incomplete or incorrect information and deletion or destruction where legal conditions are met; request notification of corrections or deletions to recipients; object to an adverse result based solely on automated analysis; and seek compensation for damage caused by unlawful processing.

8. Applications

You may apply in writing to the address above, or email bilgi@doktorweb.com.tr from an address previously supplied to us and registered in our system. Other methods under the Communiqué on the Procedures and Principles for Applications to the Data Controller remain available.

Include your name, surname, signature for written applications, notification address, request and the identity information required by the Communiqué, with relevant supporting documents where available. Information necessary to verify your identity may be requested. Do not send sensitive documents unrelated to the request.

Applications must be answered as soon as possible and within 30 days. Where processing incurs an additional cost, the tariff set by the Board may apply. If you receive no response or find it inadequate, you may complain to the Personal Data Protection Board within the periods and conditions of Article 14.