This policy explains, in plain terms, what personal data Diyaval ("Diyaval") collects through diyaval.com, why, how long it is kept and who it is shared with. The formal notice required by Turkish Personal Data Protection Law No. 6698 (KVKK) is the KVKK Disclosure Notice; this page summarises it.
When you only browse the site
We do not use analytics, advertising or social-media tracking tools. Our servers record the technical data needed to deliver and protect pages (IP address, date and time, requested address, browser information) in security logs, kept for 1 year. Your language is part of the web address and is not stored in a cookie.
When you send the contact form
We receive your name, email address, and, if you provide them, company, telephone number and message. They are stored in our database and forwarded by email to our support team. To block automated abuse, the form uses Cloudflare Turnstile, which processes your IP address and browser signals on Cloudflare's servers. Contact records are kept for 2 years after the request is closed, or for the duration of any resulting contract.
When you order modules
We receive billing details (name or company name, tax office, tax or identity number, address, telephone, email), the items ordered and the approvals you give. Your card details are entered on the payment institution's secure page and never reach Diyaval; we only receive the result of the payment. Orders, agreements and invoices are kept for 10 years under the Turkish Commercial Code and Tax Procedure Law.
When you use the Diyaval platform or mobile app
Business data entered into the platform belongs to the customer organisation, which is the data controller; Diyaval processes it as data processor under the Data Processing Agreement. Mobile application practices are described in the Mobile Application Privacy Policy.
Who receives data
- Our hosting infrastructure (—).
- Our email provider, Yandex 360 (Yandex LLC), located outside Türkiye.
- Cloudflare, Inc. (USA), for contact-form verification only.
- The licensed payment institution and banks, for payments and refunds.
- The Revenue Administration (GİB), for e-invoices; our accountant, auditors and lawyers when needed; courts and authorities when legally required.
Transfers abroad are made under Article 9 of KVKK using standard contractual clauses notified to the Personal Data Protection Authority. We do not sell personal data.
Your rights
You can ask whether we process your data, obtain a copy, have it corrected or deleted, object to automated results and claim compensation, as set out in Article 11 of KVKK. Use the Data Subject Application page. We reply free of charge within 30 days.
Contact
Diyaval, Selçuk University Technology Development Zone No: 67, Selçuklu, Konya, Türkiye · [email protected] · KEP: — · +90 332 606 29 94