Certoly is established in Türkiye and the processing described here is governed by the Turkish Personal Data Protection Law No. 6698 (“the Law”). The authoritative version of this notice is the Turkish one, available at certoly.com.tr/kvkk.html.
1. Who we are
Under the Law, your personal data is processed by Gökşen Dündar (“Certoly”) as data controller, in the manner described below.
| Data controller | Gökşen Dündar |
| Trading as | Certoly |
| info@certoly.com.tr | |
| Website | certoly.com.tr |
2. What we collect
When you submit the enquiry form on our website
- Identity data: first and last name
- Contact data: email address
- Business record: company or brand name and the free-text description of your enquiry (neither field is mandatory)
- Transaction security data: date and time of submission
When you use our client portal
Your access credentials and session records. Passwords are stored in irreversibly hashed form.
When you visit the site
Your IP address is processed solely to prevent abuse. It is irreversibly hashed and retained only briefly; it is never stored in readable form.
Please do not enter information in the free-text field beyond what is needed to describe your enquiry — in particular no special categories of personal data such as health, religious or political information.
3. Why we process your data
- To schedule the call you requested and to respond to you
- To determine the scope of service and prepare a proposal
- To conduct pre-contractual discussions and establish a business relationship
- To operate the client portal and prevent unauthorised access
- To maintain information security
- To comply with legal obligations and to protect legal rights
Your data is not used for automated marketing, advertising profiling, or sale to third parties.
4. Legal grounds
Your personal data is processed on the grounds set out in Article 5 of the Law: that processing is directly related to the conclusion or performance of a contract, and that processing is necessary for the legitimate interests of the data controller. Where we fulfil legal obligations, the relevant legislation applies.
5. Who we share it with
Your personal data may be transferred;
- Within Türkiye, to our hosting provider, and to competent public authorities where legally required,
- Outside Türkiye, to our cloud service provider established abroad, where our client relationship records are kept
Any transfer is limited to the purposes set out above and to the data necessary for them. We do not share your personal data with any other third party.
6. How we collect it
We collect your personal data when you voluntarily complete the form on our website, by electronic and automated means.
7. How long we keep it
| Data | Retention |
|---|---|
| Form submissions that do not lead to a call | 2 years |
| Records that become a client relationship | 10 years from the end of the relationship |
| Session cookie | Deleted when you close your browser |
| Hashed IP record (security) | 15 minutes maximum |
At the end of the retention period your personal data is deleted, destroyed or anonymised.
8. Cookies
This site uses only the strictly necessary cookie required to maintain your session and prevent abuse. No advertising, marketing or analytics cookies, tracking pixels or monitoring software are used.
9. Your rights under Article 11
By applying to the data controller you may;
- Learn whether your personal data is being processed and, if so, request information about it,
- Learn the purpose of processing and whether the data is used in accordance with that purpose,
- Know the third parties, in Türkiye or abroad, to whom your data has been transferred,
- Request correction of incomplete or inaccurate data,
- Request erasure or destruction of your data,
- Request that correction, erasure or destruction be notified to third parties to whom the data was transferred,
- Object to a result adverse to you arising from analysis carried out solely by automated means,
- Claim compensation for damage suffered as a result of unlawful processing.
10. How to reach us
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests to info@certoly.com.tr, from the email address registered in our records.
Please include your name, contact details and the subject of your request. We will respond within 30 days at the latest, free of charge; where the request requires additional cost, a fee set by the Personal Data Protection Board may apply.
If your request is refused or left unanswered, you have the right to lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).