1. Data controller
The data controller for your personal data is Grapyweb, Liman Mah. 18. Sokak, 07130 Konyaaltı, Antalya, Türkiye. For any question about this notice, email info@grapyweb.com.
2. What we collect
When you use the contact form on this website, or reach us by email, phone or WhatsApp, we process:
- Identity and contact data: full name, email address, phone number (optional).
- Request data: your website address (optional), the service you are interested in and the content of your message.
- Security data: IP address, browser information and the date and time the form was submitted.
3. Why we process it
- To respond to your request, answer your questions and prepare a quote.
- To take steps at your request before entering into a contract.
- To prevent abuse of the form (spam, automated submissions) and keep our systems secure.
- To meet our legal obligations and respond to requests from competent authorities.
4. Legal bases and how we collect data
Data is collected electronically, partly by automated means, through the website form or the channels you use to contact us. We rely on the following legal bases: steps taken prior to entering into a contract (KVKK Art. 5/2(c); GDPR Art. 6(1)(b)), compliance with legal obligations (KVKK Art. 5/2(ç); GDPR Art. 6(1)(c)) and our legitimate interests in running a secure website and answering enquiries (KVKK Art. 5/2(f); GDPR Art. 6(1)(f)).
5. Who we share it with
We never sell your personal data or share it for marketing. Data is stored only with suppliers essential to providing the service, such as our hosting provider and email infrastructure, under appropriate security measures. We may disclose data to public authorities where required by law.
6. How long we keep it
- Contact form messages: up to 2 years after your request is closed; if a contract follows, for the period required by law.
- IP records kept for form security: 24 hours.
- Once the retention period ends, data is deleted, destroyed or anonymised.
7. Your rights
You have the right to:
- Find out whether we process your personal data and request information about it,
- Learn the purpose of processing and whether data is used accordingly,
- Know the third parties to whom your data is disclosed,
- Request correction of incomplete or inaccurate data, and erasure or destruction where the legal conditions are met,
- Object to processing, including decisions based solely on automated processing that affect you adversely,
- Request data portability and restriction of processing where applicable, and claim compensation for damage caused by unlawful processing.
8. How to exercise your rights
Send your request, with information that allows us to verify your identity, to info@grapyweb.com or in writing to the address above. We respond free of charge within 30 days at the latest. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority or, if you are in the EU, with your local data protection authority.
9. Cookie policy
This website uses a single cookie that is strictly necessary for the site to work. We do not use analytics, advertising or marketing cookies, which is why no cookie consent banner is shown. Strictly necessary cookies do not require consent.
| Name | Type | Purpose | Duration |
|---|---|---|---|
gw_sess | Strictly necessary cookie | Session and form security (CSRF protection) | Deleted when the browser closes |
gw-theme | Browser storage (localStorage) | Remembers your light/dark theme choice; never sent to the server | Until you clear it |
You can delete cookies and local storage from your browser settings at any time. If you block the session cookie, the contact form may not be submitted.
10. Changes
We may update this notice to reflect changes in the law or on our website. The current version is always published on this page.