KVKK Policy

Last Updated: December 15, 2024

1. General Information

This KVKK (Personal Data Protection Law) Policy explains how Rosiva Digital Agency ("we", "our", "us") collects, processes, stores, and protects your personal data in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK).

By using our website and services, you consent to the collection and use of your personal data as described in this policy.

2. Personal Data We Collect

2.1 Directly Collected Data

When you contact us or use our services, we may collect:

  • Identity Information: Name, surname, title
  • Contact Information: Email address, phone number, address
  • Professional Information: Company name, position, industry
  • Service Information: Project details, requirements, preferences

2.2 Automatically Collected Data

When you visit our website, we automatically collect:

  • Technical Data: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent, click patterns
  • Device Data: Device type, screen resolution, language settings

2.3 Third-Party Data

We may receive data from:

  • Business partners and service providers
  • Social media platforms
  • Public databases and directories

3. How We Collect Your Data

We collect your personal data through various methods:

  • Direct Contact: Contact forms, email communications, phone calls
  • Website Usage: Cookies, analytics tools, user interactions
  • Service Delivery: Project management, client communications
  • Marketing Activities: Newsletter subscriptions, event registrations

4. Purposes of Data Processing

We process your personal data for the following purposes:

4.1 Service Provision

  • Providing digital marketing and web development services
  • Managing client relationships and communications
  • Delivering project deliverables and support
  • Processing payments and invoicing

4.2 Communication and Marketing

  • Sending service updates and announcements
  • Providing customer support and assistance
  • Sending newsletters and marketing materials (with consent)
  • Inviting to events and webinars

4.3 Legal and Regulatory Compliance

  • Fulfilling legal obligations and requirements
  • Responding to legal requests and investigations
  • Maintaining business records and documentation
  • Protecting our rights and interests

5. Data Transfer and Sharing

Your personal data may be shared with:

5.1 Internal Sharing

  • Our employees and team members who need access to provide services
  • Our subsidiaries and affiliated companies

5.2 External Sharing

  • Service Providers: Hosting companies, analytics tools, email services
  • Business Partners: Technology partners, marketing agencies
  • Legal Authorities: When required by law or regulation

5.3 International Transfers

Your data may be transferred to countries outside Turkey. In such cases, we ensure adequate protection measures are in place.

6. Data Retention Periods

We retain your personal data for the following periods:

  • Client Data: Duration of service + 10 years for legal compliance
  • Prospect Data: 2 years from last contact
  • Website Analytics: 2 years from collection
  • Marketing Data: Until consent withdrawal or 3 years

After these periods, data is securely deleted or anonymized.

7. Data Security Measures

We implement comprehensive security measures to protect your personal data:

7.1 Technical Measures

  • Encryption of data in transit and at rest
  • Secure access controls and authentication
  • Regular security updates and patches
  • Firewall and intrusion detection systems

7.2 Administrative Measures

  • Employee training on data protection
  • Access control policies and procedures
  • Regular security audits and assessments
  • Incident response and breach notification procedures

7.3 Physical Measures

  • Secure data centers
  • Access control systems
  • 24/7 security monitoring

8. Your Rights Under KVKK

Under Article 11 of KVKK, you have the following rights:

  • Right to Information: Learn whether your data is being processed
  • Right of Access: Request access to your data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Limit data processing
  • Right to Data Portability: Transfer your data to another system
  • Right to Object: Object to automated processing
  • Right to Compensation: Claim compensation for damages

9. How to Exercise Your Rights

To exercise your KVKK rights:

9.1 Application Methods

  • Email: kvkk@rosivadijital.com
  • Mail: Written application
  • In Person: Visit our office

9.2 Application Requirements

  • Identity verification documents
  • Description of requested action
  • Contact information

9.3 Response Time

Your application will be responded to within 30 days at the latest. This period may be extended to 60 days in necessary cases.

10. Cookie Usage

Our website uses cookies. For detailed information, please review our Cookie Policy page.

11. Contact Information

For all matters related to KVKK, you can contact us:

  • KVKK Email: kvkk@rosivadijital.com
  • General Contact: info@rosivadijital.com
  • Phone: +90-530-176-48-35
  • Address: Istanbul, Turkey

12. Policy Updates

This KVKK policy may be updated due to legal requirements or changes in business processes. Important changes will be announced on our website and, where necessary, communicated via email.