Personal Data Notice (KVKK)

This notice is given under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK). It explains how the personal data you share when using thepiron.com or writing to us is processed.

Data controller

Your personal data is processed by The Piron, which operates thepiron.com, as data controller. Contact: hello@thepiron.com · Antalya, Türkiye.

What we process

Contact form and email: your name, email address, the subject you pick and whatever you share in your message (for example your website address).
If you write through Instagram or another channel: the username that channel shows us and your message.
Technical records: the IP address, browser details, requested page and time your browser sends when connecting. These are kept briefly on the Cloudflare infrastructure the site runs on, for security and debugging.
Visit statistics (only if you accept cookies): pseudonymous identifiers assigned to your browser (the Analytics cookie ID), the pages you visit, device and browser details, and approximate location. These are collected with Google Analytics.

We do not ask for special categories of data (health, beliefs and so on). Please do not include them in your message.

Why, and on what legal basis

To reply to your request, prepare an offer and discuss a project. Legal basis: necessity for entering into a contract (KVKK Art. 5/2-c) and our legitimate interest in answering you (Art. 5/2-f).
To keep the site secure, stop abuse and spam, and fix errors. Legal basis: legitimate interest (Art. 5/2-f).
To inform competent authorities where the law requires it. Legal basis: provided for by law and legal obligation (Art. 5/2-a, 5/2-ç).
To measure which pages and social media posts bring visits, and how often the contact form is sent. Legal basis: the explicit consent you give in the cookie banner (Art. 5/1). Without your consent this measurement does not take place. You can withdraw consent at any time through the Cookie preferences link at the bottom of the page.

We do not use your data for advertising, profiling or marketing lists, and we do not sell it.

How we collect it

Electronically and partly by automated means: when you fill in the contact form, email or message us, and when you visit the site. Visit statistics are collected through cookies, and only if you have given consent.

Who receives it

Cloudflare, Inc. (USA): hosting, security and delivery of the contact form. Form data is not stored on the site or in a database; it reaches us directly as an email.
Natro / corporate email service (Türkiye): hosting of our mailbox. Messages from the form and by email are kept there.
Google LLC (USA) and Google Ireland Limited (Ireland): only if you accept cookies, to measure visit statistics with Google Analytics. Google processes this data on our behalf, as a data processor.
Competent public authorities: only where required by law, and only to the extent requested.

Because Cloudflare’s servers may be located abroad, your data may be transferred outside Türkiye as part of this service. Such transfers are made within the conditions set out in Article 9 of the KVKK.

Google Analytics data is transferred to Google’s servers outside Türkiye. This transfer is based on the explicit consent you give in the cookie banner (KVKK Art. 9). Without your consent, no data is transferred to Google.

How long we keep it

Correspondence: if no working relationship follows, at most 2 years from the last message. If one does, for as long as the applicable legislation requires.
Technical records: a few days on the Cloudflare infrastructure.
Visit statistics: Analytics cookies stay in your browser for at most 2 years and are deleted when you withdraw consent. Records in Google Analytics are deleted by Google when the retention period set in our account ends.

When the period ends, the data is deleted or anonymised.

Your rights

Under Article 11 of the KVKK you may ask us to:

tell you whether your personal data is processed and, if so, give you information about it,
tell you the purpose of processing and whether the data is used accordingly,
name the third parties in Türkiye or abroad to whom it is transferred,
correct it if it is incomplete or inaccurate,
delete or destroy it within the conditions of Article 7 of the KVKK,
notify the third parties it was transferred to of any correction or deletion,
object to a result against you arising solely from automated analysis,
compensate any damage caused by unlawful processing.

How to apply

Send your request to hello@thepiron.com with your name, contact details and what you are asking for. We will conclude it free of charge within 30 days at the latest. If you are not satisfied with our answer, you may complain to the Turkish Personal Data Protection Board.