This policy explains how Otukan processes personal data when you visit this website, send an enquiry or request an App Exposure Check. We collect what we need to answer you: your name, work email, company and role, and the context you give about your enquiry. We use it to reply, not for marketing. We do not use advertising cookies, and Google Analytics runs only if you accept it. The policy covers this website only. Personal data processed under any future customer contract would be governed by that contract.
Who is responsible
In this policy, “Otukan”, “we” and “us” mean the company that operates this website and decides how the personal data described here is used. For the purposes of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR), Otukan is the data controller.
You can reach us about anything in this policy at info@otukan.co.
What we collect and why
| Source | Personal data | Purpose | Legal basis |
|---|---|---|---|
| Contact forms | Name, work email, company, role (optional), anything you write in your message, and the enquiry context you choose to send, such as the page you came from and your platforms | To reply to your enquiry and continue the conversation you started | Steps taken at your request before a possible contract; our legitimate interest in answering business enquiries |
| App Exposure Check, step 4 | Name, work email, company, role, and your confirmation that you are authorised to act for the app’s publisher | To verify that you represent the publisher and to send the findings to you | Steps taken at your request before a possible contract; our legitimate interest in sending findings only to the right person |
| App Exposure Check, steps 1 to 3 | None. These steps hold store links and context about the app, not personal data | To prepare the review | Not applicable |
| Email you send us | Your email address and what you choose to include | To reply to you | Our legitimate interest in answering correspondence |
| Visiting the site | Technical data your browser sends to any website, such as IP address, browser type and the page requested | To deliver the site and keep it secure | Our legitimate interest in operating a secure website |
Contact forms include a confirmation box in which you agree that we use your details only to reply to your enquiry. Whatever legal basis applies, we use those details only for that purpose.
Analytics and tracking
With your consent, we use Google Analytics, loaded through Google Tag Manager, to count page views and see which pages are useful. It runs only after you accept it in the cookie banner, and you can withdraw that choice at any time on cookie preferences. Google Analytics receives a random identifier, the pages you view, your browser and device type and an approximate location derived from your IP address. Google LLC provides the service as our processor. We use no advertising or social media tracking tools, we do not build visitor profiles and we do not follow you across other websites.
Browser storage for the App Exposure Check
The App Exposure Check form keeps your answers to steps 1 to 3 in your own browser’s local storage, so that you do not lose them if you leave the page. These steps hold store links and context about the app, such as its industry, how it is built and your main concerns. They contain no personal data. The stored answers are removed when you send the request or clear the form. Contact details from step 4 are never kept in browser storage. How to view or remove it yourself is covered on cookie preferences.
What we do not collect
We do not ask for binaries, source code, signing keys, credentials or production data, and we do not want them sent to us. We do not use your data for advertising, we do not sell it, and we do not make decisions about you by automated means alone. We do not put email addresses or other personal data into page addresses.
Who receives your data
Your enquiry is read by the people at Otukan who handle it. Form submissions are stored in HubSpot, our customer relationship management service, in its European Union data centre; HubSpot, Inc. acts as our processor. Sending a form does not set a HubSpot cookie, and we do not load HubSpot’s tracking script on this site. We also use service providers to host this website and to send and receive email. They process personal data on our behalf and only on our instructions. We do not share your enquiry with third parties for their own purposes. We may disclose data where the law requires it.
If a provider stores personal data outside Türkiye, or outside the European Economic Area for data covered by the GDPR, this policy will name the destination and the safeguard used for the transfer.
How long we keep it
We keep enquiry data for as long as we need it to answer you and to continue the conversation that follows, and then delete or anonymise it, unless a legal obligation requires us to keep it longer. The same principle applies to App Exposure Check requests and to technical logs.
Your rights
Under KVKK, including Article 11, you may ask us:
- whether we process personal data about you, and for information about that processing;
- for the purpose of the processing and whether the data is used for that purpose;
- which third parties, in Türkiye or abroad, the data has been transferred to;
- to correct incomplete or inaccurate data, and to delete or destroy data under the conditions set by law, and to notify those corrections or deletions to third parties who received the data;
- to object to a result against you that arises only from automated analysis;
- for compensation if you suffer damage from unlawful processing.
Where the GDPR applies, you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time where processing is based on consent.
To make a request, email info@otukan.co and say which right you are exercising. We may ask for information to confirm your identity before acting. We answer requests within the period set by the applicable law.
Under KVKK, if your request is refused, the answer is inadequate or it is not answered in time, you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). Where the GDPR applies, you may complain to the data protection authority in the EU or EEA country where you live, work or where the issue arose.
Keeping this policy accurate
This policy describes the forms and tools that are deployed on this site. When a form, provider or tool changes, we update this policy before the change goes live. That includes naming each service provider and its location. Optional cookies, such as those of Google Analytics, are set only with your consent, and any new one is described here and on cookie preferences before it is used.