KVKK Privacy Notice
Last updated: 4 November 2026
Data controller
Under Türkiye's Personal Data Protection Law No. 6698 (KVKK), the data controller is Abdurrahman Kıraç, trading under the KRC LABS brand. Contact: [email protected].
Data, purposes and legal grounds
Contact requests: Your identity and contact details and message are processed to answer your request and prepare a proposal or contract. The legal grounds are that this directly relates to concluding or performing a contract (Art. 5(2)(c)) and our legitimate interest in answering requests (Art. 5(2)(f)).
Accounting and legal records: Invoices and similar records are processed to meet our legal obligations (Art. 5(2)(ç)).
Server logs: IP address, browser type, requested page and time are processed to run the site and keep it secure. The legal ground is our legitimate interest (Art. 5(2)(f)).
Analytics: A cookie identifier, visited pages, device details and approximate location are processed to improve the site, only with your explicit consent (Art. 5(1)).
Collection method
Data is collected electronically through the contact form, email, web server logs and, if you allow it, cookies.
Transfers
The site is hosted by our server hosting provider in Türkiye. Site traffic passes through Cloudflare for security and speed, so your IP address and request details are transferred to Cloudflare and may be processed in other countries, including the US. Our email is stored on Google Workspace, so data you send us by email is transferred to Google and may be processed in other countries, including the US.
If you allow it, analytics data is transferred to Google and may be processed in other countries, including the US. If you do not allow it, this transfer does not take place. Data may be shared with competent public authorities where the law requires it.
Retention
Data is kept as long as its purpose and legal retention periods require, then erased or anonymised. The periods are in the Privacy Policy.
Your rights under KVKK Art. 11
You have the right to learn whether your data is processed, request information about it, learn the purpose of processing and whether data is used accordingly, know the third parties it is transferred to, ask for incomplete or wrong data to be corrected, ask for erasure or destruction under the conditions in the KVKK, ask that these actions be notified to those third parties, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing.
How to apply
You can send your request with details that verify your identity, using the methods in the Communiqué on Applications to the Data Controller. Our email address is [email protected]. Your request is concluded free of charge within 30 days at the latest; if it involves a separate cost, the fee set by the Board may be charged. If you are not satisfied, you can complain to the Personal Data Protection Board under Article 14 of the KVKK.