Privacy Policy
Personal data protection disclosure under the Turkish Personal Data Protection Law (KVKK) No. 6698 and the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller within the meaning of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR") is:
- Company: Fiboo Yazılım A.Ş. (Fiboo Software Inc.)
- Address: Ayazaga Mah. Kemerburgaz Cad. Vadi Istanbul Park Sitesi 7A Block No:7B Floor:2 Inner Door No:4 Sariyer / Istanbul, Turkey
- Email: info@fibootech.com
- Web: fiboo.com.tr
2. Personal Data We Collect
We collect the following categories of personal data through our website:
- Identity & Contact Data: Name, email address, phone number (via the contact form)
- Technical Data: IP address, browser type and version, operating system, device information (automatically via server logs)
- Usage Data: Pages visited, clicks, on-site interactions (via Google Analytics, only with your consent)
- Cookie Data: Language preference, cookie consent status (via cookies)
3. Purposes and Legal Bases for Processing
Your personal data is processed based on the following purposes and legal grounds under KVKK Article 5 and GDPR Article 6:
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries and delivering services | Performance of a contract (KVKK Art.5/2-c, GDPR Art.6/1-b) |
| Ensuring the technical operation of the website | Legitimate interest (KVKK Art.5/2-f, GDPR Art.6/1-f) |
| Analyzing site traffic and improving service quality | Explicit consent (KVKK Art.5/1, GDPR Art.6/1-a) |
| Fulfilling legal obligations | Legal obligation (KVKK Art.5/2-ç, GDPR Art.6/1-c) |
4. Cookie Policy
The following cookies are used on our website:
| Cookie Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| NEXT_LOCALE | Fiboo | Remembering your language preference | 1 year | Strictly necessary |
| fiboo-cookie-consent | Fiboo | Storing your cookie consent preference | 1 year | Strictly necessary |
| _ga, _ga_* | Google LLC | Site traffic analysis and performance measurement | 14 months | Analytics (consent-based) |
Strictly necessary cookies are required for the basic functionality of the website and do not require consent. Analytics cookies are only activated with your explicit consent. You can change your cookie preferences at any time via the "Cookie Preferences" link in the page footer.
5. Sharing of Personal Data
Your personal data may be shared with the following third parties for the stated purposes:
- Google LLC (USA): Site traffic analysis via Google Analytics and Google Tag Manager (only with your consent)
- Cloudflare Inc. (USA): Website hosting, CDN, and image storage services
Beyond the above, your personal data is not shared with third parties except where required by law, and is never sold for commercial purposes.
6. International Data Transfers
The third-party service providers mentioned above are headquartered in the USA. Your personal data may be transferred abroad in accordance with KVKK Article 9 and GDPR Chapter V. These transfers are safeguarded as follows:
- Google Analytics: Based on your explicit consent (cookie consent)
- Cloudflare: Under legitimate interest, secured by Cloudflare's Data Processing Addendum (DPA) and EU Standard Contractual Clauses (SCCs)
7. Data Retention Periods
- Contact form data: 2 years
- Server logs: 1 year
- Analytics data: 14 months (Google Analytics default)
- Cookie consent preference: 1 year
Data whose retention period has expired is deleted, destroyed, or anonymized in accordance with applicable legislation.
8. Data Security
The following technical and administrative measures are implemented to ensure the security of your personal data:
- SSL/TLS encryption for secure data transmission
- Cloudflare CDN and DDoS protection
- Access control and authorization mechanisms
- Regular security assessments
- Employee awareness training
9. Automated Decision-Making and Profiling
We do not carry out any automated decision-making or profiling based on your personal data on our website.
10. Your Rights
Under KVKK Article 11 and GDPR Articles 15–22, you have the following rights:
- Learn whether your personal data is being processed
- Request information about the processing if it has been processed
- Learn the purpose of processing and whether data is used in accordance with that purpose
- Know the third parties to whom your personal data has been transferred domestically or abroad
- Request correction of your personal data if it is incomplete or inaccurate
- Request deletion or destruction of your personal data under KVKK Article 7
- Request that correction or deletion actions be notified to third parties to whom your data has been transferred
- Object to any outcome that arises against you through analysis of your data exclusively via automated systems
- Claim compensation for damages arising from unlawful processing of your personal data
Additionally, you have the right to withdraw your consent for analytics cookies at any time. You can do so via the "Cookie Preferences" link in the page footer.
11. How to Exercise Your Rights
To exercise any of the rights listed above, you may contact us via:
- Email: Send an email to info@fibootech.com with the subject "Personal Data Request"
- Written application: Submit a signed petition to our company address
Your requests will be responded to free of charge within 30 (thirty) days at the latest. If the process requires an additional cost, the tariff determined by the Personal Data Protection Board may apply.
If your application is rejected, you find the response insufficient, or no response is received within the deadline, you may file a complaint with the Turkish Personal Data Protection Authority (KVKK) within 30 days of learning of the response and in any case within 60 days of your application.
12. Policy Updates
This privacy policy was last updated on March 9, 2026. Significant changes to this policy will be announced on our website. We recommend that you review the current text regularly.
13. Contact
For questions about our privacy policy or the protection of your personal data:
- Email: info@fibootech.com
- Address: Ayazaga Mah. Kemerburgaz Cad. Vadi Istanbul Park Sitesi 7A Block No:7B Floor:2 Inner Door No:4 Sariyer / Istanbul, Turkey