Personal Data Notice

For the purposes of Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is: [DATA CONTROLLER / LEGAL ENTITY INFORMATION REQUIRED].

“Ivmentum” is the brand name used on this website. The verified legal name, MERSIS/tax information and registered address were not found in the project files, so no statement about them has been invented. Where legally permitted, the Turkish notice prevails over this convenience translation.

This notice covers the main contact form, the 14-day performance pilot application, messages sent to [email protected] and technical request records that may arise while the site is delivered.

The contact and pilot forms currently do not submit data automatically to a backend or CRM. They create an email draft in your browser. If you send the draft from your email application, the details reach us through the relevant email services. The newsletter field currently performs no subscription or storage.

• Identity and contact details: full name and email address.
• Professional details: company or brand name.
• Enquiry details: your message, stated needs and correspondence.
• Pilot application details: website URL, advertising channels, selected spend range and your description of the challenge.
• Technical details: IP address, browser/device, time and request data that may be processed in delivery or security logs. The exact scope must be verified against provider settings.

Our forms do not request special-category personal data. Please do not enter health, biometric, criminal-conviction or similarly sensitive information in free-text fields.

• Assess and respond to your enquiry or pilot application.
• Arrange discussions, proposals and communication about a potential service relationship.
• Keep the website available and secure and prevent misuse.
• Establish, exercise or defend legal claims and comply with applicable legal duties.

Data may be collected electronically when you send the email draft created from a form, contact us directly by email or phone, or make technical requests to the website.

Depending on the specific context, processing may rely on the KVKK Article 5(2) grounds for establishing or performing a contract, complying with a legal duty, establishing/exercising/protecting a right, or legitimate interests that do not harm your fundamental rights. This notice is not a request for explicit consent. If a future marketing or tracking activity requires consent, it must use a separate choice mechanism.

Data may be disclosed, strictly as necessary, to authorised team members, email and website-delivery providers, and legally authorised public bodies or authorities.

The current code and deployment show delivery through Cloudflare Pages and font loading from Google Fonts. Contracting entities, roles, logging settings, data locations and subprocessors could not be verified from the project files. Recipient lists and data-processing contracts must therefore be checked before final publication.

Connections to global technical services such as Cloudflare and Google Fonts may involve transfers outside Türkiye. The actual flow, recipient countries and KVKK Article 9 transfer mechanism cannot be established from source code alone.

[INTERNATIONAL TRANSFER RECIPIENTS AND LEGAL MECHANISM MUST BE VERIFIED]. Any adequacy decision, appropriate safeguard or statutory occasional-transfer ground must be determined from the actual contracts and infrastructure settings.

Personal data should be kept only as long as necessary for the relevant communication and applicable legal requirements, then deleted, destroyed or anonymised in accordance with the law. No unverified fixed retention period is stated because the project contains no approved retention schedule.

The public site uses HTTPS and basic browser security headers. Organisational controls for email accounts, access, backups, deletion and incident response still require verification. No internet transmission can be guaranteed absolutely secure.

• Learn whether your personal data is processed and request information if it is.
• Learn the purpose of processing and whether data is used consistently with that purpose.
• Know the third parties to whom data is transferred in Türkiye or abroad.
• Request correction of incomplete or inaccurate data and notification of that correction to recipients.
• Request deletion or destruction where the statutory conditions apply and notification to recipients.
• Object to a result against you produced solely by automated analysis.
• Claim compensation if you suffer damage due to unlawful processing.

For an initial privacy question, email [email protected] or call +90 532 552 12 30 / +90 533 408 62 66. Website contact location: ODTÜ TEKNOKENT Information Technologies Innovation Center, Mustafa Kemal District, Dumlupınar Boulevard 280/G, Ground Floor, Çankaya / Ankara, Türkiye. This is not presented as a verified registered office or service address.

A formal KVKK application must be addressed to the data controller. [VERIFIED DATA CONTROLLER NAME, REGISTERED ADDRESS AND KEP/FORMAL APPLICATION CHANNEL REQUIRED]. A valid application is handled within the statutory period and generally no later than thirty days.

This notice must be updated to reflect the real data flow before any new form backend, CRM, analytics tool, advertising tag or cookie is introduced.

It was prepared with reference to official Turkish Personal Data Protection Authority materials on transparency, processing grounds, data-subject applications, international transfers, cookies and deletion/destruction. The Turkish notice governs where legally permitted.