KVKK disclosure notice
Website and Contact Form Privacy Notice
This notice explains how MUZDOLABI processes personal data when you visit muzdolabi.com, send an inquiry, or ask about event media. It is a disclosure notice, not a request for consent.
Last updated:
1. Scope
This notice applies only to the corporate portfolio, event pages, audience measurement, and contact channels on muzdolabi.com.
MUZDOLABI products, client websites, social platforms, portfolio destinations, and externally hosted registration forms—such as Google Forms—are separate services. Their operators and collection screens provide their own terms and privacy information. This notice does not replace those documents.
2. Data controller
For the processing described here, the data controller under Law No. 6698 on the Protection of Personal Data (KVKK) is:
- Data controller
- MUZDOLABI YAZILIM VE TEKNOLOJİ LİMİTED ŞİRKETİ
- Registered address
- Kozyatağı Mah. Kaya Sultan Sk.Hayriye İş Merkezi Kapı No:83 Daire No:334742 Kadıköy / İstanbul, Türkiye
- Tax registration
- Erenköy V.D. · 6260826671
- Trade registry
- İstanbul · 1120886
- Privacy contact
- hello@muzdolabi.com
3. Data received through contact channels
When you use the contact form or email us, we receive the information directly from you. Please do not include sensitive personal data or confidential third-party information unless it is necessary and you are authorized to share it.
Website contact form and direct email
- Data
- Name, email address, optional project type, message, IP address used for abuse prevention, and any other information you voluntarily include.
- Purpose
- To receive, route, assess, and answer the inquiry; discuss a possible project or event; protect the form from abuse; and maintain necessary business correspondence.
- KVKK legal basis
- KVKK Article 5/2-c for steps directly related to establishing or performing a contract, where applicable; Article 5/2-f for MUZDOLABI’s legitimate interest in handling inquiries and securing its channels, provided your fundamental rights are not harmed.
- Default retention
- Ordinary inquiries are deleted two years after the last interaction. If the inquiry becomes a client, contractual, accounting, or dispute record, only the necessary record is retained for the documented statutory or claims period.
4. Technical data, analytics, and device preferences
Some information is generated automatically when your browser requests the site.
Hosting and security logs
- Data
- Request date and time, requested path, IP address, user-agent and related diagnostic or security log data processed through Vercel.
- Purpose
- To deliver the site, diagnose faults, prevent abuse, preserve availability, and establish or protect legal rights.
- KVKK legal basis
- KVKK Article 5/2-f (legitimate interests), Article 5/2-ç where processing is necessary to meet a legal obligation, and Article 5/2-e where necessary to establish, exercise, or protect a right.
- Default retention
- The contact endpoint’s in-memory rate-limit record lasts approximately 60 seconds. Vercel logs and backups follow the service settings and contractual retention configured for the site.
Vercel Web Analytics
- Data
- Page or route, timestamp, referrer, approximate location, browser, device, and operating system. MUZDOLABI removes query strings and URL fragments before transmission. Vercel states that its request-derived visitor hash expires after 24 hours and that Web Analytics uses no analytics cookies.
- Purpose
- To understand aggregate site usage, improve content and usability, and identify operational trends. We do not send custom analytics events.
- KVKK legal basis
- KVKK Article 5/2-f: MUZDOLABI’s legitimate interest in measuring and improving its corporate site in a proportionate, privacy-preserving way.
- Default retention
- Analytics data follows the retention available under MUZDOLABI’s Vercel plan and service settings; the request-derived visitor hash expires after 24 hours according to Vercel.
Language and theme preferences
- Data
- NEXT_LOCALE is a session language cookie. mz-theme is a theme preference stored only in your browser’s local storage.
- Purpose
- To remember the language selected for the current browsing session and the visual theme selected on the device.
- KVKK legal basis
- KVKK Article 5/2-f: the legitimate interest in providing the language and display choices requested by the visitor.
- Default retention
- NEXT_LOCALE expires at the end of the browser session. mz-theme remains on the device until you change it, clear browser storage, or remove it.
The site does not use advertising cookies, behavioral advertising, cross-site tracking, or embedded social-media tracking pixels.
Vercel Web Analytics privacy documentation (opens in a new tab)
5. Purposes and legal bases
MUZDOLABI processes only the data reasonably needed for the following purposes and relies on a non-consent legal basis when the stated conditions are met:
- Responding to project, commercial, and event inquiries and taking requested pre-contract steps — KVKK Article 5/2-c.
- Operating, securing, troubleshooting, measuring, and improving the website and communication channels — KVKK Article 5/2-f, after balancing MUZDOLABI’s legitimate interests against your rights.
- Maintaining records, responding to competent authorities, and meeting applicable accounting, tax, company-law, or other legal duties — KVKK Article 5/2-ç.
- Preserving evidence and establishing, exercising, or protecting legal rights — KVKK Article 5/2-e.
MUZDOLABI does not use the website data covered by this notice for profiling or decisions based solely on automated processing that produce legal or similarly significant effects.
6. Recipients and disclosures
Access is limited according to role and need. Depending on the interaction, personal data may be disclosed to:
- authorized MUZDOLABI personnel who handle the site, inquiry, event, finance, or legal matter;
- Vercel, which hosts and delivers the website and provides Web Analytics;
- Resend, which transmits contact-form email, and Google Workspace, which hosts the company mailbox;
- accountants, lawyers, auditors, security specialists, and other professional advisers where reasonably necessary; and
- courts, enforcement offices, regulators, law-enforcement bodies, and other legally authorized public authorities where disclosure is required or legally permitted.
MUZDOLABI does not sell personal data and does not disclose it to advertising networks.
7. International processing
Vercel and Resend identify processing in the United States in their service documentation, and Google may process data through infrastructure in multiple countries. Using these providers can therefore involve transferring personal data outside Türkiye.
Where KVKK Article 9 requires a transfer safeguard, MUZDOLABI must select and document an applicable mechanism—such as an approved standard contract where appropriate—and complete any required notification to the Personal Data Protection Authority. The publication of this notice does not by itself create or prove that safeguard. You may ask us for the current mechanism applicable to your data.
Provider privacy and data-processing information:
8. Retention and security
MUZDOLABI applies purpose-based retention. Ordinary inquiries are deleted two years after the last interaction. Client, accounting, contractual, or legal records are retained only for the documented period required by applicable law or needed to establish, exercise, or defend a claim. The contact rate-limit record is held in server memory for approximately 60 seconds. Provider logs, backups, and deletion cycles follow the documented service settings and contracts.
We use proportionate administrative and technical measures, including role-based access, transport encryption, service-provider controls, input validation, and abuse rate limiting. No internet transmission or storage system can be guaranteed completely secure. If we identify a qualifying personal-data breach, we will take the steps required by applicable law.
9. Your rights under KVKK Article 11
By applying to MUZDOLABI as data controller, you may:
- learn whether your personal data is processed;
- request information if it has been processed;
- learn the purpose of processing and whether the data is used in accordance with that purpose;
- know the third parties in Türkiye or abroad to whom the data has been transferred;
- request correction if the data is incomplete or inaccurate;
- request deletion or destruction when the conditions in KVKK Article 7 are met;
- request that correction, deletion, or destruction be notified to recipients to whom the data was disclosed;
- object to a result against you arising from analysis exclusively by automated systems; and
- request compensation if you suffer damage because personal data was processed unlawfully.
How to apply
Send a clear request in Turkish by hand or signed post to the registered address below, by email from an address you previously provided and that is recorded in our systems, or by another method accepted under the applicable Data Controller Application Procedures Communiqué. Email requests may be sent to hello@muzdolabi.com.
Include your name and surname, signature for written applications, Turkish identity number for Turkish citizens or nationality and passport/identity number for non-citizens where applicable, notification address, contact details, and the subject of your request. We may ask for proportionate information to verify your identity; please do not send unnecessary identity documents.
We will respond as soon as possible and no later than 30 days. Applications are normally free; if the Personal Data Protection Board’s tariff permits a fee, only the permitted amount may be charged.
10. GDPR supplement where Article 3 applies
This supplement applies only if and to the extent the EU or UK GDPR is territorially applicable to the relevant processing under its Article 3. Merely visiting the English-language version of the site does not automatically make the GDPR applicable.
Where applicable, MUZDOLABI acts as controller and generally relies on steps requested before a contract (Article 6(1)(b)), legitimate interests in responding, securing, and measuring the site (Article 6(1)(f)), and legal obligations (Article 6(1)(c)). You may have rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to a competent supervisory authority. You may object at any time to processing based on legitimate interests; we will stop unless compelling legitimate grounds or legal claims justify continuation.
Providing contact details is not a statutory requirement, but we cannot answer an inquiry without enough information to contact you and understand it. We do not carry out solely automated decisions with legal or similarly significant effects. International transfers will be handled under a mechanism required by the applicable GDPR where it applies.
11. Event media and future registrations
If you appear in event photographs or video published on this site and want to raise a privacy concern or request removal, contact hello@muzdolabi.com with the event, page, and image details. We will assess the request against applicable privacy, freedom-of-expression, recordkeeping, and other legal grounds.
Future event registration, attendance management, photography, or filming may involve additional data and purposes. MUZDOLABI will provide a separate notice at the relevant collection or event stage where required. This website notice does not retroactively replace an event-time photography notice, permission, or release.
12. Updates and contact
We may revise this notice when the website, providers, processing activities, or law changes. The date at the top identifies the current version.
For privacy questions, rights requests, or event-media concerns, email hello@muzdolabi.com or write to the registered address in the data-controller section.