Privacy Policy

This site is operated by Abdurrahman Kıraç, a sole proprietorship in Türkiye trading under the KRC LABS brand. For privacy questions, write to [email protected].

Contact: When you write to us, we process your name, email address, company and message to reply, prepare a proposal or carry out the work. The legal basis is steps before a contract and performing it, and our legitimate interest in answering general questions (GDPR Art. 6(1)(b) and (f)).

Server logs: IP address, browser type, requested page and time are logged to run the site and keep it secure. The legal basis is our legitimate interest in site security (GDPR Art. 6(1)(f)).

Analytics: Only if you allow it, Google Analytics runs to measure how the site is used. The legal basis is your consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time through the Cookie Settings link.

Legal obligations: Invoices and accounting records are processed as tax and commercial law require (GDPR Art. 6(1)(c)).

We do not sell personal data. The site is hosted on a server in Türkiye. Site traffic passes through Cloudflare for security and speed; during this, Cloudflare may process your IP address and request details in other countries, including the US. Our email is hosted on Google Workspace and may be processed in other countries, including the US. If you allow it, analytics data is also transferred to Google and may be processed in other countries, including the US. Data may be given to competent public authorities where the law requires it.

Our business is in Türkiye, so the data you send us is also processed in Türkiye.

We keep contact messages that do not lead to a contract for up to 2 years. Contract and accounting records are kept for the legal retention periods. Server logs are limited to the short period security requires. Analytics data is kept in Google Analytics for up to 2 months.

You may have the right to access your data, ask for it to be corrected or erased, restrict processing, port your data and object to processing based on legitimate interest. Send your request to [email protected]. You can complain to the Turkish Personal Data Protection Board or, if you are in the EU or EEA, to your local supervisory authority. Your rights under Turkish law are in the KVKK Privacy Notice.