Your information, handled with care.

1. Data controller and contact

The data controller is Abdulkadir Bilici, the sole proprietor operating under the Doktorweb Creative Solutions brand. Address: Feritpaşa Mh., Ulaşbaba Cd. No:24 D:101, 42100 Selçuklu/Konya, Türkiye. Contact and applications: bilgi@doktorweb.com.tr. Reading this notice does not in itself constitute explicit consent.

2. Information, purposes and legal grounds

Quotes and enquiries: your name, email, optional phone number, company and city, project requirements and budget preferences are used to evaluate your request, contact you and prepare a proposal. Article 5(2)(c) of Turkish Law No. 6698 applies to contract preparation; Article 5(2)(f) applies to other enquiries where your fundamental rights are not adversely affected.

Customer portal and projects: account details, correspondence, project files, delivery and approval records are processed to provide the service and track the project under Article 5(2)(c). Records needed to establish or protect a right are processed under Article 5(2)(e).

Payments and contracts: proposal and contract details, payment amounts and uploaded receipt information are processed under Article 5(2)(c); applicable financial and legal obligations under Articles 5(2)(a) and 5(2)(ç); protection of rights in disputes under Article 5(2)(e). Please conceal information unrelated to the transaction when uploading receipts.

Security: IP address, request and session details, transaction time and security logs are used to prevent unauthorised access and misuse and investigate errors under Article 5(2)(f), or Article 5(2)(e) where needed to protect a right.

Assistant: messages are sent to our server to understand and answer your request. Contract preparation information is processed under Article 5(2)(c); technical records needed for safe operation under Article 5(2)(f). Do not send passwords, card details, health information or unrelated personal data in chat.

Any use requiring separate explicit consent must be explained and consent obtained separately. This notice is not general marketing permission.

Discovery meetings: your name, email, selected date and time, time zone, language and optional project note are processed to arrange your requested meeting, send notifications and assess your project under Article 5(2)(c). Do not include unrelated or sensitive personal data in the note.

3. How information is collected

Information is collected through planners and quote forms, the customer portal, file uploads, the assistant, email, phone and your chosen communication channels, automatically or through non-automated methods forming part of a filing system. Technical records may be generated when you access the site or sign in.

The site's voice introductions, guidance and sample conversations play prepared recordings. These features do not activate your microphone or record your voice.

4. Recipients and transfers

Personal information is stored on the virtual server and storage infrastructure of our hosting providers. Email addresses and notification content are processed by our email provider to deliver sign-in links and project notifications. Sharing is limited to information necessary for the service. Information may be disclosed to authorised authorities following valid requests or legal obligations.

The contact location illustration is served by our own server without loading third-party map tiles. If you open a WhatsApp or Google Maps link, that service’s own processing terms apply.

The written assistant runs on our own server. Your messages and the conversation context needed for the reply are processed there and are not sent to an external AI API. Do not share identity documents, health, payment or confidential information. The meeting calendar stores your name, email, date and time, time zone, language, optional note and request reference in our own database. It does not send bookings to an external calendar service or record meeting audio or video. Our team reviews the request and contacts you with meeting details.

Any transfer of personal data outside Türkiye remains subject to Article 9 and the applicable transfer conditions. Reading this notice or ticking the acknowledgement box does not replace a legally required transfer mechanism.

5. Cookies and browser storage

A session cookie maintains customer portal sign-in. Light or dark appearance preferences may be kept in local storage; project summaries transferred from a calculator or assistant to the planner may be kept in session storage. You can clear these in browser settings. Removing the session cookie requires you to sign in again. Your selected language is stored in a preference cookie for one year.

Optional visit measurement is enabled only with your permission. It records daily totals of visits, page views, planner clicks and steps, phone, WhatsApp and email link clicks, submission attempts, errors and saved enquiries. Reports contain page paths, not names, email addresses, form content, contact link targets, browser identifiers or IP addresses. Access and security logs remain separate. Your preference and the date used to prevent duplicate daily visit counts are stored locally; planner steps, source pages and submission markers use session storage. Enquiry references are excluded from reports. You can change your choice using the measurement preferences button. Withdrawing permission stops future measurement; an individual visit cannot be separated from previous daily totals.

6. Retention and deletion

Retention depends on whether the enquiry or project is ongoing, the contract relationship, applicable legal retention duties and the need to protect rights. A single period does not apply to every data type. When processing conditions no longer apply, data must be deleted, destroyed or anonymised. You may ask about the reason for retention or request deletion using the application methods below.

7. Your rights

Under Article 11, you may learn whether your information is processed and request details; ask about the purpose and whether use is consistent with it; learn about domestic or overseas recipients; request correction of incomplete or incorrect information and deletion or destruction where legal conditions are met; request notification of corrections or deletions to recipients; object to an adverse result based solely on automated analysis; and seek compensation for damage caused by unlawful processing.

8. Applications

You may apply in writing to the address above, or email bilgi@doktorweb.com.tr from an address previously supplied to us and registered in our system. Other methods under the Communiqué on the Procedures and Principles for Applications to the Data Controller remain available.

Include your name, surname, signature for written applications, notification address, request and the identity information required by the Communiqué, with relevant supporting documents where available. Information necessary to verify your identity may be requested. Do not send sensitive documents unrelated to the request.

Applications must be answered as soon as possible and within 30 days. Where processing incurs an additional cost, the tariff set by the Board may apply. If you receive no response or find it inadequate, you may complain to the Personal Data Protection Board within the periods and conditions of Article 14.

Responses to your application are provided in writing or electronically.