1. Scope
This policy applies to the website under the vevona.com domain. Vevona products (Vonasoft, VonaPos, Vonarent, Vonaride, Vonaflow, VonaHub, Hekim Rehberi) have their own domains and their own privacy policies, which apply when you visit those sites.
Turkish Law No. 6698 (KVKK) applies to visitors located in Türkiye; the GDPR / UK GDPR applies to visitors in the European Union and the United Kingdom.
2. Data We Collect
When you share it
When you fill in the contact form we receive your name, email, phone number, company name, enquiry subject, budget range and message. A detailed breakdown and the legal basis for each is set out in the KVKK notice.
Automatically
When the form is submitted, your IP address, browser information (user agent) and the address of the page you submitted from are recorded. This data is kept solely for security and abuse detection.
Data we do not collect
No payments are taken on this site; we do not collect card, bank or identity details. No visitor accounts are created. We do not request special categories of personal data.
3. Cookies
The site currently uses only strictly necessary cookies:
- Session cookie — to keep your session consistent as you move between pages.
- CSRF security cookie — to prevent forgery attacks on form submissions.
- Language preference — to remember the language you chose (TR / EN / DE).
Because these cookies are strictly necessary they do not require consent, and they expire when you close your browser or shortly afterwards.
Analytics and advertising cookies (such as Google Analytics 4, Google Tag Manager or Meta Pixel) are not currently installed. When these tools are introduced: a cookie consent banner will be added, no cookies will run before you consent, this policy will be updated and the list of tools used will be published here.
You can delete or block cookies in your browser settings at any time; if you block strictly necessary cookies, form submission may stop working.
4. What We Use the Data For
- To reply to your enquiry and prepare a proposal.
- To deliver the project if a business relationship begins.
- To keep the site secure and block spam submissions.
- To meet our legal obligations.
We do not sell, rent or share your data with third parties for advertising purposes.
5. Sharing
Your form data is transferred to the CRM system on Vevona's own infrastructure so the enquiry can be tracked. Apart from that, only our hosting and email providers can access the data, and only to the extent needed to deliver the service. Disclosure to public authorities takes place only where required by law.
Current list of service providers used and the countries they operate in: [to be completed]
6. Data Security
- All site traffic is encrypted with HTTPS/TLS.
- Form submissions are protected by CSRF tokens, a honeypot trap and rate limiting.
- Access to records is limited to authorised staff and controlled by role.
- The server and application layers are updated and backed up regularly.
In the event of a data breach we notify the relevant authorities and the affected individuals within the periods required by the KVKK and the GDPR.
7. Retention Period
Form enquiries are kept for 3 years from the last contact if no business relationship is established, and security records for 1 year. Detailed periods are listed in the KVKK notice.
8. Your Rights
Depending on where you are located you have the following rights — under Article 11 of the KVKK in Türkiye and Articles 15-22 of the GDPR in the EU and the UK:
- Access — to request a copy of the data we hold about you.
- Rectification — to have incorrect or incomplete data corrected.
- Erasure — to request deletion of your data (right to be forgotten).
- Restriction of processing — to have processing stopped in certain circumstances.
- Data portability — to receive your data in a structured format.
- Objection — to object to processing based on legitimate interest.
- Withdrawal of consent — to withdraw the explicit consent you gave at any time.
For your requests, write to [email protected] — we reply within 30 days at the latest. If you are not satisfied with the outcome, you retain the right to lodge a complaint with the Turkish Personal Data Protection Authority or, in the EU or UK, with the competent supervisory authority.
9. Third-Party Links
The site links to our social media accounts, our product sites and WhatsApp. Once you follow such a link, that platform's own privacy policy applies; we are not responsible for their data practices.
10. Children's Data
The site is aimed at business customers and we do not knowingly collect data from anyone under 18. If such data is noticed, it is deleted without delay.
11. Changes
This policy may be updated; for significant changes the update date at the top of the page is revised.
This text is a draft based on the site's current technical setup. Before it goes live, the fields marked in square brackets must be completed and the whole text reviewed and approved by a legal adviser.