Skip to content
Legal

KVKK Privacy Notice

How we process your personal data and what your rights are under Turkish Personal Data Protection Law No. 6698 (KVKK).

Data controller

Rapitek Bilişim Teknolojileri Anonim Şirketi
Maslak Mah. Büyükdere Cad. Nurol Plaza Sit. No: 255/B02, Sarıyer, İstanbul, Türkiye
MERSIS: 0734159061600001
Trade registry no: 157552-5
Tax no: 7341590616
WhatsApp: +90 212 963 22 84
E-mail: info@rapitek.com

What personal data do we process?

When you submit the contact or demo form on our site, we record the fields we ask for (e.g. name, e-mail, phone, company, team size, your message) together with the submission time, the page address you came from, browser information and a digest of your IP address generated with a secret key; your raw IP address is not stored. If you consented on the cookie banner, the sequence of pages you visited in the same session is also recorded; without that consent no such record is created at all. If you gave consent, the full text shown to you at that moment and the time of consent are also stored as proof of consent.

When you submit the form on the fit-check page, in addition to the fields above we also record the answers you gave in the check (team size, monthly budget per user, your region of operation, the features you treat as non-negotiable, and your go-live speed) together with the fit score calculated from them. Taking the check on its own sends nothing — your answers do not leave your browser; this record is created only if you choose to submit the form, and what will be sent is shown to you before you send it.

Why do we process it?

To respond to your enquiry and carry out pre-contractual discussions; to keep the service secure by preventing form abuse (bots/spam); and to meet our legal obligations.

Measurement in our e-mails

If we e-mail you in response to your enquiry, we measure whether those messages are opened and whether the links inside them are clicked. To do this, a small invisible image is placed in the message and links are routed through our measurement address. In the process we record the time of opening, your IP address and information about the e-mail program you use.

The purpose is to see whether the message reached you and to avoid sending you unnecessary follow-ups. This processing rests on our legitimate interest under article 5(2)(f) of Law No. 6698.

For any request about this measurement you can write to us using the contact details above; if you prefer, we will stop sending you e-mail altogether.

How long do we keep it?

Form records are kept for 24 months from the date of last activity and are deleted automatically at the end of that period.

Where is your data stored? (transfer abroad)

Your form records and CRM data are hosted within the European Union: the database is in Finland (Helsinki), uploaded files and images are in Germany (Frankfurt), and database backups are in Germany (Falkenstein). Each customer's data sits in a separate database, and data in transit is encrypted with TLS 1.3.

There is one exception to this separation and we state it plainly: the application's technical error logs are kept in a table shared by all customers. These records may contain personal data relating to the request at the moment the error occurred. They are kept solely for troubleshooting purposes and are not the content of your CRM itself.

This hosting constitutes a transfer abroad within the meaning of article 9 of Law No. 6698. The Board has issued no adequacy decision for the countries involved; below we name every component, the country it sits in and the provider that holds it. You may ask us to delete your data at any time — follow the steps on the Data Deletion Instructions page or write to us using the contact details above.

Who is your data transferred to? (our service providers)

To provide the service we use the following providers. Each of them processes data only for the task written next to it, and only to the extent that task requires:

  • Hetzner Online GmbH — application server and database · Helsinki, Finland
  • Hetzner Online GmbH — database backups · Falkenstein, Germany
  • DigitalOcean — storage of uploaded files, images and voice recordings · Frankfurt, Germany
  • Amazon Web Services (AWS SES) — outgoing e-mail delivery · Frankfurt, Germany
  • Functional Software, Inc. (Sentry) — application error monitoring · Germany
  • Anthropic PBC — AI assistant (Rapi) · United States
  • Meta Platforms Ireland Ltd. — WhatsApp Business and Instagram messaging · Ireland / United States

The AI assistant is off by default. Unless you turn it on, your CRM data is not sent to any AI provider. Messaging on the Meta side only comes into play when you connect your own WhatsApp Business account to the CRM.

When something on this list changes, we update this page.

Your rights (KVKK art. 11)

You have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing, to know the third parties it is transferred to, to request correction if it is incomplete or inaccurate, to request erasure where the conditions are met, to object to a result reached against you solely through automated analysis, and to claim compensation for damage. You can send your requests using the contact details above; we respond within 30 days at the latest.

Made with RapitekGO

We would like to use optional cookies to measure your visit. The site works exactly the same if you decline. Cookie policy