Der folgende Rechtstext ist derzeit auf Englisch verfügbar. Eine geprüfte Übersetzung wird ergänzt.
1. Introduction
At Rovax Software Yazılım Çözümleri, we value your privacy. This policy explains the data collected, its purposes and retention.
2. Form Information
The quote form collects name, email, optional phone, selected services, project size and message; the contact form collects name, email, subject and message. A pseudonymous technical value may be associated with a request to limit abuse. Form content is not included in visit analytics. If email notifications are enabled, relevant form content is also sent to the configured email-notification provider and mailbox.
3. Local Preferences
Your theme and currency preferences are stored in your browser. Your analytics choice is remembered for 180 days using a first-party preference cookie that is not used for cross-site tracking. An essential session cookie is used only for administration for up to 8 hours. These cookies are not used for advertising; no third-party advertising or analytics cookies are used. The map on the contact page loads from Google Maps only after you choose to show it; Google may then process data such as your IP address under its own policy.
4. Optional Visit Analytics
If you opt in, we record the page path without query parameters, the referring site's domain only, general device/browser categories and time. Raw IP addresses, detailed browser information, form content and query parameters are not included in analytics records. If you decline, no page-view record is created. You may change or withdraw your choice through the privacy-preferences control at the bottom of the page.
5. Security Logs and Pseudonymous Key
Successful/failed administrator logins and rate-limit events may be recorded for security independently of analytics consent. Raw IP addresses and detailed browser information are not stored; a monthly rotating pseudonymous source value is derived from the IP. A pseudonymous technical value may also be associated with form submissions to limit abuse. These values do not directly contain a name or email and should not be treated as anonymous data. Security events are automatically deleted after 30 days.
6. Retention and Deletion
Visit analytics and administrator-login security events are automatically deleted after 30 days; deletion may be delayed briefly for technical reasons. Quote and contact records do not currently expire automatically; they remain in the database until deleted by an authorized administrator and may also remain in configured notification mailboxes. They should be deleted after the request is resolved and any legal retention need ends. Request deletion via the contact page of our website.
7. Security and Providers
Appropriate technical and organizational safeguards are used, but no internet transmission or storage method can be guaranteed absolutely secure. Hosting (Vercel), database (MongoDB Atlas), email-notification (Resend) and image-storage (Cloudflare R2) providers may process data needed to deliver the service. Current exchange rates are fetched from a keyless rate service without sending personal data. These providers may operate servers outside Türkiye; international transfers are made only under applicable legal requirements and safeguards. Current provider information is available upon request. Ad impression/click counters are aggregate numbers without identifiers or IP addresses.
8. Data protection rights
In addition to KVKK rights, if the GDPR or another country's data-protection law applies to you, you may have rights to access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a competent supervisory authority. Requests are assessed under the applicable law and its exceptions.
9. Contact
For privacy questions, contact us via the contact page of our website.

