This policy explains how personal data is processed when you visit the pvage.com website and use its forms. It is our information notice under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the European Union, the European Economic Area and the United Kingdom, under Article 13 of the General Data Protection Regulation (GDPR) and the UK GDPR.
Data processed while using the PVAGE software (app.pvage.com) is governed by the agreement and notices provided when you subscribe.
1. Data controller
- Data controller: PVAGE
- Email: info@pvage.com
- Phone: +90 507 663 65 54
PVAGE is established in Türkiye. For any question about this policy or your data, please contact us at the email address above.
2. What data we process
Meeting request form
Company name, first name, last name, phone number, email address, and your preferred meeting date and time.
Demo request form
Company name, first name, last name, phone number, email address, address, tax office, tax number, city and company type. This information is requested so that a demo account can be set up in your company's name.
Direct contact
Your contact details and the content of your message when you reach us by email or phone.
Technical data
When you visit the website, our server records your IP address, browser and device information, the page you visited and the date and time. Only your country is derived from your IP address, using a local database on our own server, in order to show the website in the right language; no data is sent to a third party for this.
Cookies and browser storage
See our Cookie Policy.
Fields marked as required in our forms are needed to handle your request; without them we cannot respond. You are under no statutory or contractual obligation to provide your data.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Responding to demo and meeting requests, setting up a demo account, preparing proposals you ask for | Form and contact data | Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Keeping the website secure and preventing spam and automated form submissions | Technical data | Our legitimate interest in operating a secure website (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Showing the website in the right language | Country derived from IP address, browser language, language preference cookie | Our legitimate interest in serving visitors in their language (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Complying with legal obligations and requests from competent authorities | As required in each case | Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
| Sending newsletters or promotional messages | Email address, phone number | Only with your prior consent, which you may withdraw at any time (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects for you.
4. Recipients and international transfers
We do not sell your personal data or share it for advertising. It is shared only as follows:
- Form notifications: Information you submit through our forms is forwarded to our team via the Telegram messaging service, whose servers are located outside Türkiye.
- Font and library providers: When pages load, fonts are delivered by Google Fonts (Google) and some software libraries by cdnjs (Cloudflare). Your IP address and browser information are transmitted to these providers in the process; their servers may be located in other countries, including the United States.
- Competent public authorities: Where required by law.
The website is hosted on a server in Türkiye. If you are located in the EU, EEA or UK, your data is therefore processed in Türkiye, a country for which there is no adequacy decision under the GDPR. Transfers are carried out on a basis permitted by applicable law, such as safeguards offered by the provider or, for form submissions, the transfer being necessary to take the steps you requested before entering into a contract (GDPR Art. 49(1)(b)).
The LinkedIn, Instagram and YouTube links on the website are plain links; no data is sent to these platforms unless you click them.
5. How long we keep data
- Form and contact data: For as long as needed to handle your request and any resulting business relationship, and for the periods required by law
- Server access logs: About 14 days, after which they are deleted automatically
- Cookies and browser storage: The periods set out in our Cookie Policy
When the period ends or the reason for processing no longer applies, data is deleted, destroyed or anonymised.
6. Security
All traffic between your browser and the website is encrypted (HTTPS). Forms are protected against automated submissions, and only authorised team members can access the data.
7. Your rights
Depending on the law that applies to you, you have the right to:
- find out whether we process your data and obtain a copy of it (access)
- have inaccurate or incomplete data corrected (rectification)
- have your data erased
- have processing restricted
- receive data you provided to us in a structured, machine-readable format (portability)
- object to processing based on our legitimate interests
- withdraw your consent at any time, without affecting processing carried out before withdrawal
- learn the third parties, in Türkiye or abroad, to whom your data has been transferred, and have corrections or erasure notified to them (KVKK Art. 11)
- object to a result against you arising exclusively from automated analysis, and claim compensation for damage caused by unlawful processing (KVKK Art. 11)
8. How to exercise your rights
Send your request to info@pvage.com with enough information for us to verify your identity. We respond free of charge within one month (GDPR) and in any case within 30 days (KVKK). Where a request is complex, the GDPR period may be extended as permitted by law, and we will tell you why.
You also have the right to lodge a complaint with a supervisory authority: in the EU or EEA, the data protection authority of the country where you live, work or where the alleged infringement took place; in the UK, the Information Commissioner's Office (ICO); in Türkiye, the Personal Data Protection Board (KVKK Art. 14).
9. Children
The website is intended for businesses and is not directed at children under 16. We do not knowingly collect data from children.
10. Changes
We update this policy when necessary. The current version is always on this page, and the date of the last update is shown at the top.