1. Controller and scope
This Privacy Policy applies to the inoviqlab.com website operated by InoviqLab and the contact channels provided through the website. InoviqLab acts as the data controller for the processing activities described in this policy.
This policy does not cover third-party client projects, external products, or other websites linked from this website. Separate policies or agreements may apply to those services.
For data protection requests, contact us at projects@inoviqlab.com.
2. Personal data we process
- Identity and contact data: your name, email address, and contact details you choose to provide.
- Request and message content: project details, product interest, messages, and related information submitted through the contact form or email.
- Technical and security data: IP address, browser/device information, access time, error records, and security logs related to website use.
- Analytics data: pages visited, referring source, device type, approximate region, and aggregated or anonymized usage metrics.
- Preference data: settings such as language and theme preferences that may be stored locally in your browser.
3. Purposes and legal bases
- Receiving, reviewing, and responding to your contact requests: pre-contractual steps, performance of a contract, and legitimate interests.
- Handling proposals, discovery calls, project assessment, and client relationship processes: pre-contractual steps, contract performance, and legitimate interests.
- Maintaining website security, availability, and performance: legitimate interests and compliance with legal obligations.
- Measuring service quality, user experience, and content performance: legitimate interests; we do not use this for advertising tracking or remarketing.
- Complying with legal obligations, exercising rights, or defending against claims: legal obligation and establishment, exercise, or defense of legal claims.
4. How we collect data
We collect personal data through the contact form, direct email correspondence, web server and security logs, technical browser information, local browser preferences, and analytics tools such as Vercel Web Analytics, by automated and non-automated means.
5. Recipients
- Email, hosting, security, analytics, and infrastructure service providers.
- Legal, accounting, or technical advisors where necessary.
- Authorized public authorities, courts, and enforcement offices where required by law.
- Business partners involved in evaluating a project or service request, only to the extent required by your request.
6. International transfers
Because website hosting, email delivery, analytics, and infrastructure services may use servers outside Turkey or the European Economic Area, your personal data may be processed internationally. Where such transfer is required, we rely on applicable transfer mechanisms, safeguards, or derogations under KVKK Article 9, GDPR Articles 44 and following, and other applicable data protection rules.
7. Retention
- Contact requests and correspondence are generally retained for up to 3 years from the last communication, unless a legal obligation, dispute, or ongoing business relationship requires longer retention.
- Technical security logs are retained for a reasonable period needed for security and troubleshooting, generally between 30 and 90 days.
- Accounting, contract, and legal records are retained for the periods required by applicable law.
- Preference data stored locally in your browser may remain on your device until you clear it or change your browser settings.
8. Cookies, local storage, and analytics
We do not use advertising, remarketing, or cross-site tracking cookies on this website. Settings such as language and theme preferences may be stored in your browser's local storage.
We use Vercel Web Analytics to understand site performance and visit metrics. According to Vercel's documentation, this tool operates without cookies and produces anonymized, aggregated measurement data. You can clear local storage and cookies through your browser or device settings.
9. Your rights
Under KVKK Article 11, you may have the right to learn whether your personal data is processed, request information about processing, learn the purpose of processing and whether it is used accordingly, know third parties to whom data is transferred, request correction of incomplete or inaccurate data, request deletion or destruction where conditions are met, request notification of these actions to recipients, object to unfavorable results arising from automated systems, and claim compensation for damages.
Where the GDPR applies, you may also have rights of access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and complaint to a competent supervisory authority.
You can submit rights requests to projects@inoviqlab.com. We may ask for reasonable additional information to verify your identity and process your request. KVKK requests are generally answered within 30 days, and GDPR requests are generally answered within 1 month.
10. Security
We apply reasonable technical and organizational measures such as access limitation, secure communication, authorization, logging, and careful service provider selection to protect the confidentiality, integrity, and availability of personal data. No internet transmission is completely risk-free; please do not submit sensitive, special category, or unnecessary personal data through the contact form.
11. Automated decision-making and profiling
This website does not carry out solely automated decision-making or profiling that produces legal effects or similarly significant effects concerning you.
12. Changes
We may update this policy to reflect changes in services, data processing activities, or applicable law. The current version takes effect when published on this page.