01Data controller
Your personal data is processed by Vatesco LLC (Delaware, United States), which operates under the Okyanus Dijital brand, as the data controller. You can reach us at the form on our contact page.
02The data we process
- Identity: first and last name.
- Contact: email address, phone number, company name.
- Customer transactions: project briefs, quotes, project records, messages, support requests and the files you upload.
- Finance: payment requests and status, invoice details. Card details are entered on the payment provider’s page and are not stored by us.
- Transaction security: IP address, session and sign-in records, device and browser information, security and audit logs.
- Marketing: your newsletter preference, only if you opted in.
03Why we process it
- To answer contact, project and call requests.
- To prepare quotes and to conclude and perform the contract.
- To run the project and provide stages, files, messages and support in the customer dashboard.
- To track payments and invoicing.
- To keep your account and our systems secure and prevent misuse.
- To meet legal obligations and requests from competent authorities.
- To send you news and promotional emails, if you agreed to it.
04Legal grounds
We rely on the grounds in Article 5(2) KVKK: processing directly related to concluding or performing a contract (c), compliance with our legal obligations (ç), establishing, exercising or defending a right (e) and our legitimate interest provided it does not harm your fundamental rights (f). Commercial electronic messages and optional measurement rely only on your consent, which you can withdraw at any time.
05How we collect it
Through the forms on our website, the project builder, the project start dialog, the customer dashboard and the emails you send us — electronically, by fully or partly automated means.
06Transfers
Only as far as needed to provide the service and under confidentiality obligations, data is shared with our hosting, file storage, transactional email and payment providers, and with competent public authorities when they request it.
Because the data controller and some providers are located abroad, data may be transferred outside Turkey. Such transfers are made with the safeguards of Article 9 KVKK, including standard contractual clauses.
07Retention
We keep data for as long as the purpose requires and for the periods set by law. Contract, invoice and payment records are kept for the periods required by commercial and tax law. Afterwards data is deleted, destroyed or anonymised.
08Your rights
Under Article 11 KVKK you may learn whether your data is processed and request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to, ask for incomplete or incorrect data to be corrected and, where the conditions are met, deleted or destroyed, ask for these actions to be notified to recipients, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing.
09How to apply
Send your request to the form on our contact page with enough information for us to verify your identity. We answer free of charge within 30 days at the latest. If you are not satisfied with our answer you may complain to the Personal Data Protection Board (KVKK Kurulu).