Albatros Bilişim Kooperatifi
TR EN
Let's talk
KVKK

Privacy & KVKK Notice

The Turkish version of this notice is the authoritative text. This English translation is provided for convenience.

1. Data Controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Sınırlı Sorumlu Albatros Hizmet Kooperatifi ("Albatros", the "Cooperative" or "we") as the data controller, within the scope described below. The "Albatros Bilişim Kooperatifi" brand used on our site belongs to the data controller whose legal name is Sınırlı Sorumlu Albatros Hizmet Kooperatifi.

  • Legal name: Sınırlı Sorumlu Albatros Hizmet Kooperatifi
  • Address: Merdivenköy Mah. Hamle Sok. No: 8/15, Kadıköy/İstanbul, 34732
  • E-mail: [email protected]
  • Website: https://albatros.coop

2. Personal Data We Process and How We Collect It

When you visit our website (https://albatros.coop) and get in touch with us, we process a limited amount of personal data. Your personal data is collected through the contact form on our website by wholly or partly automated means; and, where such data is stored in our e-mail system and records, by non-automated means forming part of a data filing system.

a) Data you provide directly through the contact form. When you fill in our contact form:

  • Identity: first name, last name
  • Contact: e-mail address, (optional) phone number
  • Request details: field/area of interest, subject and any information you include in your message

This data is collected at your own initiative and delivered to us by e-mail. When you submit the form, your IP address (via Cloudflare's CF-Connecting-IP header) is also processed to prevent spam and abuse (rate-limiting).

b) Data generated automatically while you use the site. To ensure the security of the site and prevent abuse, our technical infrastructure processes transaction-security data (access/log records such as IP address, browser and device information, the page requested and the time of access). These records are kept for a limited period to prevent spam, brute-force attacks and similar abuse.

c) Cookies. Our website always uses strictly necessary (technical) cookies, and uses analytics cookies only with your explicit consent: (i) a session cookie used for administrator login to the management panel (only under /yonetim/), (ii) strictly necessary security cookies that our Cloudflare infrastructure may set in every visitor's browser for site security and bot/abuse prevention, and (iii) Google Analytics 4 analytics cookies to measure site usage statistically, set only if you give explicit consent through the cookie-preference (consent) tool. If you do not consent, no analytics cookies are used. No advertising, profiling or tracking cookies are used for ordinary visitors. See the "Cookie Policy" section below.

d) Data processed through third-party services. While serving the site we use the infrastructure of the following providers established abroad; connection data such as your IP address and browser/device information (user-agent) may therefore also be processed by them:

  • Content delivery network & security (CDN): Cloudflare (caching, security and attack protection)
  • Analytics (only with your explicit consent): Google Analytics 4 — Google Ireland Limited / Google LLC (site-usage statistics; online identifiers and usage data). It is activated only when you consent to cookies; if you do not consent, no data is collected.

3. Purposes of Processing

Your personal data is processed for the following purposes:

  • Responding to the requests, questions and enquiries you send through the contact form, and communicating with you,
  • Evaluating and carrying out a possible collaboration, proposal and contract process,
  • Ensuring the security, integrity and continuity of the website and preventing abuse,
  • Following up requests addressed to us and fulfilling our legal obligations.

4. Legal Grounds for Processing

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

  • Contact-form data: the primary legal ground is our legitimate interest (Art. 5/2-f) in responding to requests and conducting communication, provided this does not harm your fundamental rights and freedoms. Where your request concerns a concrete collaboration or contractual process, Art. 5/2-c (directly related to the conclusion or performance of a contract) may additionally apply, limited to that process. Providing optional fields (e.g. phone) is entirely up to you.
  • Security and access logs: our legitimate interest (Art. 5/2-f) in ensuring system and data security and preventing abuse and attacks.
  • Strictly necessary cookies: processed under our legitimate interest (Art. 5/2-f), as they are essential to provide the requested service (administrator login and secure delivery of the site); these cookies require no explicit consent.
  • Analytics cookies (Google Analytics 4): processed solely on the basis of the explicit consent (Art. 5/1) you give through the cookie-preference tool; you may withdraw your consent at any time. No marketing/advertising cookies or tools are used.

International transfers are additionally subject to the conditions in Article 9 of the KVKK (see section 5, Transfers).

5. Transfer of Personal Data

Your personal data may be transferred only as needed to achieve the purposes above.

Domestic transfers: to the suppliers from whom we obtain website hosting and e-mail services; and, where there is a legal obligation or request, to authorised public authorities and judicial bodies (KVKK Art. 8).

International transfers: so that our CDN/security infrastructure provider (Cloudflare), which is established abroad, can deliver its service, connection data such as your IP address and browser/device information (user-agent) may be processed abroad (e.g. in the USA). There is currently no adequacy decision by the Personal Data Protection Board for the relevant countries (e.g. the USA). This transfer is carried out on the basis of the exceptional (incidental) cases under Article 9 of the KVKK, as it is necessary, upon your request, for the technical delivery and security of the website.

In addition, if you give explicit consent, in the context of Google Analytics 4 your online identifiers (cookie IDs) and site-usage data may be processed abroad (e.g. in the USA) by Google (Google Ireland Limited / Google LLC). As there is no adequacy decision by the Board for the relevant countries, this transfer is carried out on the basis of your explicit consent under Article 9/1 of the KVKK; you may withdraw your consent at any time from the cookie settings.

6. Retention Periods

Your personal data is retained for as long as the purpose of processing requires and for the statutory limitation/retention periods provided in the relevant legislation; at the end of these periods it is deleted, destroyed or anonymised. Contact-form records are kept for a reasonable period to resolve your request and to address possible legal disputes; security and access logs are kept for a limited period.

7. Your Rights as a Data Subject

Under Article 11 of the KVKK, by applying to us you have the right to:

  • Learn whether your personal data is processed,
  • Request information if it has been processed,
  • Learn the purpose of processing and whether it is used in line with that purpose,
  • Know the third parties to whom it is transferred at home or abroad,
  • Request correction if it is processed incompletely or inaccurately,
  • Request its deletion or destruction within the conditions set out in the KVKK,
  • Request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
  • Object to a result against you arising from analysis solely by automated systems,
  • Claim compensation if you suffer damage due to unlawful processing.

8. How to Exercise Your Rights

You may submit requests regarding the above rights, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller", by:

  • A signed written petition (wet-ink signature) to our address above (in person, via notary, or by registered return-receipt post),
  • A request signed with secure electronic signature or mobile signature, sent to [email protected],
  • The e-mail address you have previously notified to us and that is registered in our system, sent to [email protected].

(As the Cooperative does not have a registered e-mail (KEP) address, applications via KEP cannot be received.) Your application must include your name and surname (and signature if written), your Turkish ID number (passport/nationality number for foreigners), your address for notification and the subject of your request. Your request will be concluded free of charge as soon as possible and within thirty (30) days at the latest; if the process entails additional cost, the fee in the tariff set by the Board may apply. If your application is rejected or left unanswered, you retain the right to lodge a complaint with the Personal Data Protection Board.

9. Cookie Policy

Cookies are small text files stored in your browser by the websites you visit. Under the KVKK and the Authority's "Guidelines on Cookie Practices", cookies are generally classified as strictly necessary, functional, analytics/performance and marketing/advertising cookies.

Our website always uses strictly necessary (technical) cookies, and uses analytics cookies only with your explicit consent. The cookies used are:

  • PHPSESSID — Purpose: maintaining the management-panel session · Type: strictly necessary, first-party · Duration: session (ends when the browser is closed or on logout) · Party: Albatros (only under /yonetim/)
  • __cf_bm — Purpose: bot management and security · Type: strictly necessary, third-party · Duration: approx. 30 minutes · Party: Cloudflare
  • cf_clearance — Purpose: security verification (challenge) · Type: strictly necessary, third-party · Duration: varies per Cloudflare configuration · Party: Cloudflare
  • _ga — Purpose: distinguishing visitors (Google Analytics) · Type: analytics, third-party · Duration: approx. 2 years · Party: Google · only with your explicit consent
  • _ga_VH7J74J40Z — Purpose: maintaining session state (Google Analytics 4) · Type: analytics, third-party · Duration: approx. 2 years · Party: Google · only with your explicit consent

The first three are strictly necessary (technical) cookies: the first is a first-party (Albatros) cookie and the other two are third-party cookies set by Cloudflare for security; they are not used for profiling or advertising. The Google Analytics cookies (_ga and _ga_*) are for analytics and are set only if you give explicit consent; if you do not consent, they are not used. We do not use advertising, profiling or tracking cookies. Strictly necessary cookies do not require explicit consent because they are essential for providing the requested service; analytics cookies are subject to your explicit consent, which you may withdraw at any time through the cookie-preference tool. You can manage or delete cookies at any time from your browser settings; however, blocking strictly necessary cookies may affect some functions of the site.

10. Effective Date and Updates

This Notice entered into force on 24 June 2026 and was updated on 10 July 2026 to add Google Analytics. We may update it in line with legislative changes and developments in our data-processing practices; the current version is always published on this page.