1. Scope
This policy applies to the website under the vevona.com domain. Vevona products (Vonasoft, VonaPos, Vonarent, Vonaride, Vonaflow, VonaHub, Hekim Rehberi) have their own domains and their own privacy policies, which apply when you visit those sites.
Turkish Law No. 6698 (KVKK) applies to visitors located in Türkiye; the GDPR / UK GDPR applies to visitors in the European Union and the United Kingdom.
2. Data We Collect
When you share it
When you fill in the contact form we receive your name, email, phone number, company name, enquiry subject, budget range and message. A detailed breakdown and the legal basis for each is set out in the KVKK notice.
Automatically
When the form is submitted, your IP address, browser information (user agent) and the address of the page you submitted from are recorded. This data is kept solely for security and abuse detection.
Data we do not collect
No payments are taken on this site; we do not collect card, bank or identity details. No visitor accounts are created. We do not request special categories of personal data.
3. Cookies
The site uses two kinds of cookies: those strictly necessary for it to work, and those used for visit statistics.
Strictly necessary cookies
- Session cookie — to keep your session consistent as you move between pages.
- CSRF security cookie — to prevent forgery attacks on form submissions.
- Language preference — to remember the language you chose (TR / EN / DE).
Because these cookies are strictly necessary they do not require consent, and they expire when you close your browser or shortly afterwards.
Analytics cookies
This site uses Google Analytics 4. It measures which pages are viewed, how long a visit lasts, which source you arrived from, your device and browser type, and an approximate location derived from your IP address. This data is not used to identify you, but to understand which parts of the site are working.
The measurement is processed by Google, and Google's servers may be located outside Türkiye; the data is therefore transferred abroad. You can review how Google processes this data in its own privacy policy.
If you do not want analytics measurement, you can block third-party cookies in your browser settings or install Google's official Analytics opt-out browser add-on.
Analytics cookies run only if you give your approval. If you choose “Reject all” in the cookie banner shown on your first visit, no analytics cookie is written; because we use Google Consent Mode, measurement also stays cookieless and anonymous. If you later want to change your decision, use the “Cookie Settings” link at the bottom of the page.
You can delete or block cookies in your browser settings at any time; if you block strictly necessary cookies, form submission may stop working.
4. What We Use the Data For
- To reply to your enquiry and prepare a proposal.
- To deliver the project if a business relationship begins.
- To keep the site secure and block spam submissions.
- To meet our legal obligations.
We do not sell, rent or share your data with third parties for advertising purposes.
5. Sharing
Your form data is transferred to the CRM system on Vevona's own infrastructure so the enquiry can be tracked. Apart from that, only our hosting and email providers can access the data, and only to the extent needed to deliver the service. Disclosure to public authorities takes place only where required by law.
In addition, because of the analytics measurement described above, visit data is processed by Google. Information you submit through the form, such as your name, e-mail address and phone number, is not shared with Google.
Current list of service providers used and the countries they operate in: [to be completed]
6. Data Security
- All site traffic is encrypted with HTTPS/TLS.
- Form submissions are protected by CSRF tokens, a honeypot trap and rate limiting.
- Access to records is limited to authorised staff and controlled by role.
- The server and application layers are updated and backed up regularly.
In the event of a data breach we notify the relevant authorities and the affected individuals within the periods required by the KVKK and the GDPR.
7. Retention Period
Form enquiries are kept for 3 years from the last contact if no business relationship is established, and security records for 1 year. Detailed periods are listed in the KVKK notice.
8. Your Rights
Depending on where you are located you have the following rights — under Article 11 of the KVKK in Türkiye and Articles 15-22 of the GDPR in the EU and the UK:
- Access — to request a copy of the data we hold about you.
- Rectification — to have incorrect or incomplete data corrected.
- Erasure — to request deletion of your data (right to be forgotten).
- Restriction of processing — to have processing stopped in certain circumstances.
- Data portability — to receive your data in a structured format.
- Objection — to object to processing based on legitimate interest.
- Withdrawal of consent — to withdraw the explicit consent you gave at any time.
For your requests, write to kvkk@vevona.com — we reply within 30 days at the latest. If you are not satisfied with the outcome, you retain the right to lodge a complaint with the Turkish Personal Data Protection Authority or, in the EU or UK, with the competent supervisory authority.
9. Third-Party Links
The site links to our social media accounts, our product sites and WhatsApp. Once you follow such a link, that platform's own privacy policy applies; we are not responsible for their data practices.
10. Children's Data
The site is aimed at business customers and we do not knowingly collect data from anyone under 18. If such data is noticed, it is deleted without delay.
11. Changes
This policy may be updated; for significant changes the update date at the top of the page is revised.
This text is a draft based on the site's current technical setup. Before it goes live, the fields marked in square brackets must be completed and the whole text reviewed and approved by a legal adviser.