logo

Privacy Policy

How we process your personal data, who we share it with, and the rights you have.

This Privacy Policy explains how your personal data is processed when you use the vireo.com.tr website, the contact form or the newsletter subscription. We process your data under the EU General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Who we are

For the website and our services, the data controller is Vireo Teknoloji A.Ş. (Neocasa Plaza, Cumhuriyet, Süleyman Demirel Blv. 6/B Kat:2 No:5, 09400 Kuşadası/Aydın, Türkiye). For any privacy request you can reach us at [email protected].

As explained in the newsletter section (§5), the newsletter infrastructure is operated by Fusapp OÜ, registered in Estonia; your newsletter consent is processed together with Fusapp OÜ.

2. Data we collect

  • Contact form: name, e-mail, phone, subject and whatever you share in your message.
  • Newsletter subscription: your e-mail address, language preference and consent evidence (consent timestamp, IP address, the exact text you agreed to, and browser information).
  • Usage, device and log data: IP address, browser/device type, pages viewed and security logs.
  • Cookies: strictly necessary cookies that run the site, and analytics cookies subject to your consent (§7).

3. Why we process it and on what legal basis

We process your data to answer your request, run quote and demo processes, send the newsletter, keep the site and our infrastructure secure, comply with legal and tax obligations, and improve our service. Our legal bases are entering into or performing a contract, our legitimate interest in operating the site securely, compliance with legal obligations, and — for the newsletter and non-essential cookies — your explicit consent.

4. Who we share it with

We never sell your personal data. We share it only with:

  • Service providers (processors) acting on our instructions: e-mail marketing infrastructure (Brevo), cloud hosting, network and security (Cloudflare) and database hosting.
  • Fusapp OÜ — the company operating the newsletter infrastructure (§5).
  • Competent authorities — only where required by law.

5. Newsletter subscription and Brevo

When you enter your e-mail address in the newsletter form and tick the consent box, your subscription is first stored in our own system together with its consent evidence (consent timestamp, IP address, the exact text you agreed to and browser information); it is then passed to our e-mail marketing provider for double opt-in confirmation.

The newsletter infrastructure is operated by Fusapp OÜ, registered in Estonia. Brevo (Sendinblue SAS, France), used to deliver the e-mails, acts as a processor in this context and processes your data only on our instructions, for the purpose of sending the newsletter.

Your subscription only starts once you click the link in the confirmation e-mail sent to you. You can unsubscribe at any time using the link at the bottom of every newsletter, or ask us to delete your record by writing to [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

6. International transfers and retention

Your data is primarily hosted in Türkiye and the EU. Where a processor is outside Türkiye or the EU/EEA, appropriate safeguards such as the European Commission Standard Contractual Clauses apply. We keep your data for as long as the purpose lasts: contact-form records for a reasonable period after your request is closed, and your newsletter record until you unsubscribe. Statutory retention periods are reserved.

7. Cookies

We use strictly necessary cookies to run the site, and — with your consent — analytics cookies to improve it. Non-essential cookies are not set without your consent; you can delete or block cookies from your browser settings at any time.

8. How we protect it

Data is encrypted in transit, access is limited on a need-to-know basis, and form submissions are protected by bot protection (Cloudflare Turnstile).

9. Your rights

Under GDPR and KVKK you have the right to access, rectify, erase, restrict and port your data, to object to processing and to withdraw your consent. You may also lodge a complaint with the relevant data protection authority. To exercise any right, contact [email protected]; we respond within the statutory time limits.

10. Children

Vireo Teknoloji provides business-to-business (B2B) services. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. Material changes are announced on this page and the "last updated" date below changes.

Last updated: 23 July 2026 · Vireo Teknoloji A.Ş. · [email protected]