Privacy and Data Protection Policy

Our approach

WOLFR processes personal data for specified and legitimate purposes, to the minimum extent necessary and subject to appropriate security measures. This policy explains the general approach. Where data is collected in a specific context, the applicable notice provided under the Turkish Personal Data Protection Law No. 6698 (KVKK) takes precedence.

Current website

The public website does not provide membership, a contact form, newsletter registration, online payment or file upload. “Contact Us” links open the visitor’s own email application. Representative demo selections operate in page memory and do not create a persistent user profile. The website code does not contain advertising, behavioural tracking or visitor analytics tools.

The hosting and security layer may technically process an IP address, request time, browser or device information, the requested page, security events and identifiers used by necessary cookies. Details are set out in the Website Visitor Privacy Notice and Cookie Policy.

Contact and corporate services

If you write to info@wolfr.com.tr, your name, surname, business contact details, organisation or role information and message content are processed through the email service. Please do not send unnecessary third-party data, special categories of personal data, passwords or confidential access information.

When a corporate pilot or paid service begins, WOLFR may act as data controller for its own account, billing, security and customer relationship activities, and as a data processor to the extent contractually defined for customer data whose purposes are determined by the customer organisation. At that stage, data categories, roles, subprocessors, retention and disposal, breach notification, data return and deletion rules will be set out in a separately executed data processing addendum.

Limits on use

Corporate data is not sold and is not used to create advertising profiles unrelated to the service or to train general-purpose models for other customers. Public webpages do not send visitor messages to an artificial intelligence model. If an AI service is used in the corporate product, the data to be transferred and the relevant provider will be identified in the contractual and notice framework before the service is activated.

Security, retention and disposal

Access is restricted by authorisation. Transfer security, logging, backup, incident management and disposal controls are applied according to the risk presented by the data processed. No absolute security promise is made; this statement does not reduce applicable data security obligations.

Contact requests are retained for two years after the last contact. KVKK request records are retained for three years after the final response. Where a contract, invoice or dispute arises, relevant records may be retained longer only for the applicable statutory period and to the extent required to protect legal rights. When the purpose and legal ground cease to exist, data is deleted, destroyed or anonymised.

Services outside Türkiye

The website is delivered through ChatGPT Sites hosting and Cloudflare security and distribution infrastructure. Visitor and security data may therefore be processed outside Türkiye within global infrastructure. Regular international transfers will not be expanded to new forms, user accounts, file uploads or the processing of actual company data unless an appropriate safeguard or other applicable transfer condition under Article 9 of Law No. 6698 has been established.

This page is not, by itself, permission for an international transfer or a request for explicit consent. For the live corporate product, the provider, data categories, purposes, country or processing region and transfer mechanism will be specified in the data inventory and contractual addendum.

Rights

Your rights under the KVKK and the available application methods are explained in the KVKK Data Subject Request Guide. Contact: info@wolfr.com.tr.