Privacy Policy

1. Data controller

Summit Code Solutions (SummitCode) is the data controller for personal data processed through this website.

Address: Barbaros, Lale Sok. No:1, 34752 Ataşehir/İstanbul, Türkiye

Email: umut@summitcode.net

Phone: +90 (533) 510 43 51

2. Personal data we process

• Contact form data: your name, email address and the message you write to us.
• Communication data: the content of emails, calls or meeting bookings you initiate with us (for example via Cal.com).
• Usage data: anonymous, aggregated website statistics (pages viewed, referrer, device and browser type, approximate country) collected by our self-hosted analytics tool.
• Technical data: IP address and request logs processed by our hosting infrastructure for security and reliability.

3. Purposes and legal bases

We process personal data for the purposes below, relying on the legal grounds in Article 5 of KVKK (and Article 6 of the GDPR):

• Responding to your enquiries and preparing proposals or contracts: taking steps at your request before entering into a contract, and our legitimate interests.
• Providing and improving our website and services: our legitimate interests, provided they do not harm your fundamental rights and freedoms.
• Website security and prevention of abuse: our legitimate interests and compliance with legal obligations.
• Complying with legal obligations and responding to lawful requests by authorities: legal obligation.
• Any processing that is not covered above is carried out only with your explicit consent, which you may withdraw at any time.

4. Cookies and analytics

We use a self-hosted analytics service (analytics.summitcode.net) to understand how the site is used. It produces aggregated statistics and is not used to build individual advertising profiles. We do not use advertising or cross-site tracking cookies.

5. Who we share data with

We do not sell personal data. We share it only with the following categories of recipients, to the extent necessary:

• Infrastructure providers (hosting, database, email and scheduling services) that process data on our behalf under appropriate agreements.
• Professional advisers such as lawyers and accountants, where required.
• Public authorities and courts, where we are legally obliged to do so.

6. International transfers

Some of our service providers may store or process data outside Türkiye. Such transfers are made in line with Article 9 of KVKK (and Chapter V of the GDPR), including the safeguards and, where required, the explicit consent or adequacy mechanisms it provides for.

7. Retention

We keep personal data only as long as needed for the purposes above or as required by law. Contact enquiries are retained while we handle your request and for a reasonable period afterwards to follow up and to defend against potential claims; they are then deleted, destroyed or anonymised.

8. Your rights

Under Article 11 of KVKK (and the GDPR, where applicable) you may:

• learn whether your personal data is processed and request information about it;
• learn the purpose of processing and whether it is used accordingly;
• know the third parties to whom your data is transferred, in Türkiye or abroad;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of your data under the conditions set out in the law;
• request notification of these actions to third parties to whom data was transferred;
• object to a result against you arising from exclusively automated analysis;
• claim compensation for damage arising from unlawful processing.

9. How to exercise your rights

Send your request in writing to Barbaros, Lale Sok. No:1, 34752 Ataşehir/İstanbul, Türkiye, or by email to umut@summitcode.net, including your name, contact details and the right you wish to exercise. We will respond free of charge within 30 days at the latest, in line with the Communiqué on Procedures and Principles of Application to the Data Controller. If your request is rejected, you may file a complaint with the Personal Data Protection Authority (KVKK).

10. Security

We apply appropriate technical and organisational measures, such as encrypted connections (HTTPS), access controls and least-privilege access, to protect personal data against unauthorised access, loss or disclosure.

11. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with the date of the last update shown above.