Every piece of data you leave on the site has a purpose and a time limit

Data is collected through the site in only three ways:

• When you give it: the name, surname, email, phone, company name, position and message content you enter in the contact, demo and careers forms. The CV you upload in application forms.
• Automatically: IP address, browser and device information, where you came from, the pages you visit and interactions on the site. These are collected with cookies and similar technologies.
• During correspondence: information you send us by phone, email or in-panel chat, and notes from calls.

Special categories of personal data (health, religion, union membership and so on) are not requested through the site. We would advise you not to enter such information into the forms of your own accord.

Every processing purpose has a legal basis; we do not process data for a purpose without one.

Where the basis is explicit consent, you can withdraw it at any time; withdrawal does not invalidate processing carried out up to that point.

Alongside essential cookies, measurement and marketing tags run on the site. Which tag does what, how long it is stored and how to switch it off in the browser is written out item by item on a separate page.

We do not sell or rent personal data, and we do not open it to third parties for advertising. Sharing happens in three cases only:

• Service providers: cloud infrastructure, email and SMS delivery, site measurement and advertising platforms. A data processing agreement is signed with each of them, and only the data the service requires is transferred.
• Competent authorities: where the law requires it, and after the legal basis of the request has been verified.
• Within the group: the team members who will handle your request. Access is role-based and activity is logged.

Some of the cloud, email and measurement services we use run on servers located abroad. In those cases the transfer is made under the conditions in Article 9 of Law No. 6698 — an adequacy decision, standard contractual clauses or explicit consent — and the relevant agreements are signed.

For which region platform data is held in and how backups are set up, see the our technology page.

Data is not kept indefinitely. When the period expires the record is deleted, destroyed or irreversibly anonymised, and the action is logged.

Under Article 11 of Law No. 6698 you have the right to learn whether your data is being processed, to access it and request a copy, to have it corrected, to request its deletion, to object to the result of an automated analysis, and to claim compensation for loss. What each of these rights means is explained one by one on the data protection page.

You can send your request to kvkk@hrandtomorrow.com with “KVKK Request” as the subject, or by signed written petition to the address below. Requests are answered free of charge within 30 days at the latest.

This policy is updated as legislation or our services change. The current version takes effect the moment it is published on this page; for material changes we also notify customers by email. The date of the version in force is written at the top of the page.