Privacy Notice (KVKK)
Protecting your personal data
Last updated:
Data controller
This notice is provided under the duty to inform in Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). It explains how we process your personal data through the mobylabs.net website and its contact form.
Data controller: MOBY LABS E-TİCARET DANIŞMANLIK BİLİŞİM TEKNOLOJİLERİ SANAYİ TİCARET LİMİTED ŞİRKETİ (“Mobylabs”). Address: Suadiye Mah. Bağdat Cad. Ark 399 No: 399/1, Kadıköy / İstanbul. Email: [email protected].
What personal data we process
When you send the contact form: your full name, company name (optional), phone number, email address, type of need, your message, the language of the form and the time it was sent.
To keep the form secure: your IP address and the browser and device signals processed by the Cloudflare Turnstile security check. The IP address is also used for a rate limit that stops many submissions from the same address in a short time; for IPv6 addresses only the network part (the /64 prefix) is kept for this.
When you visit the site: because the site is served through the Cloudflare network, Cloudflare processes your connection data (such as your IP address); page view statistics are collected with Cloudflare Web Analytics without cookies.
Why we process your data
To review your request and get back to you, to prepare a proposal for the service you ask about, and to send an automatic email confirming that your request has reached us.
To protect the form against abuse and automated (bot) submissions, to keep the site running securely and to track visit numbers in aggregate.
We do not use your data for marketing and we do not sell it. Apart from the service providers named in this notice, we share it only with competent public authorities when the law requires us to.
How we collect data and on what legal basis
Your personal data is collected electronically and by automated means, through the website and its contact form.
We process the data you enter in the form, and transfer it to Zoho (European Union) where it is stored, on the basis of the explicit consent you give by ticking the consent box when you send the form (KVKK Article 5(1) and Article 9).
The connection data processed while the site is served through the Cloudflare network, the IP address and browser signals processed to secure the form (Cloudflare Turnstile and the rate limit) and the visit statistics (Cloudflare Web Analytics) are based on Mobylabs’ legitimate interest, provided that it does not harm your fundamental rights and freedoms (KVKK Article 5(2)(f)). This processing does not depend on the consent box.
You can withdraw your explicit consent at any time; we will then delete the data relating to your request.
How long we keep your data
Form data is not written to a database. It is delivered as an email to the [email protected] mailbox, kept there for at most 2 years and deleted at the end of that period.
The IP address used for the rate limit (the /64 prefix for IPv6) and the email address used to limit automatic confirmation emails are held only in the server’s memory and are never written to disk. The IP address is deleted from memory within 20 minutes of its last use at the latest, and the email address within 48 hours at the latest; all entries in memory are deleted when the application restarts.
Server logs do not contain the content of the form. Only when an email cannot be sent, or when an automatic confirmation email is skipped because of its limit, is a masked email address logged (everything before the @ except the first letter is hidden and the domain stays visible; for example a***@example.com). Server logs are size-limited and older entries are deleted automatically.
Data that Cloudflare and Zoho process in their own systems is subject to those providers’ retention periods.
Who receives your data and in which countries
We process your data through two service providers whose servers are outside Turkey.
Zoho (Zoho Mail): the form content and the automatic confirmation email are sent and stored through our email service, hosted in Zoho Mail’s data centre in the European Union (smtp.zoho.eu). The transfer of form data to Zoho is based on the explicit consent you give with the consent box on the form.
Cloudflare: the site is served through the Cloudflare network on every visit, so Cloudflare processes your connection data (such as your IP address). Cloudflare Turnstile processes your IP address and browser signals to check that a person is sending the form, and Cloudflare Web Analytics collects visit statistics without cookies. This processing does not depend on the consent box and is based on Mobylabs’ legitimate interest (KVKK Article 5(2)(f)). Cloudflare has servers in many countries, including the United States.
Your rights (KVKK Article 11)
Under Article 11 of the KVKK, you can apply to the data controller to:
a) find out whether your personal data is processed,
b) request information about it if it has been processed,
c) find out the purpose of the processing and whether the data is used for that purpose,
ç) know the third parties in Turkey or abroad to whom the data has been transferred,
d) ask for the data to be corrected if it is incomplete or inaccurate,
e) ask for the data to be erased or destroyed under the conditions in Article 7 of the KVKK,
f) ask for the actions under (d) and (e) to be notified to the third parties to whom the data has been transferred,
g) object to a result against you that arises from analysis of the data exclusively by automated systems,
ğ) claim compensation if you suffer damage because the data was processed unlawfully.
How to apply
To use your rights, send your application by email to [email protected] or in writing to Suadiye Mah. Bağdat Cad. Ark 399 No: 399/1, Kadıköy / İstanbul. Please state your full name, a way for us to reach you and your request clearly.
We will conclude your application within 30 days at the latest (KVKK Article 13). If your application is rejected, if you find the answer insufficient or if no answer is given in time, you can file a complaint with the Turkish Personal Data Protection Board (KVKK Article 14).