STRINGS
Privacy Policy
Last updated: October 25, 2026At Strings, we consider protecting the personal data of everyone who visits our website, writes to us or works with us an integral part of our business. This Privacy Policy explains what data we collect via stringsco.com , why and on what legal basis we process it, with whom we share it, how long we keep it, and your rights in this regard.
1. Data Controller
Your personal data is processed by the following company as data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"):
For users visiting the site from the European Union or Switzerland, in addition to KVKK we also apply the principles and rights under the General Data Protection Regulation (GDPR).
2. What Personal Data Do We Collect?
| Data category | Content | How do we collect it? |
|---|---|---|
| Contact form data | Full name, email address, company name (optional), subject, message content | When you fill in and submit the form on our contact page |
| Email correspondence | Your email address, the content of the correspondence and any attachments | When you email us directly |
| Job applications | Identity, contact, education and work experience details you share in your CV | When you apply via the careers page or by email |
| Technical records (server logs) | IP address, browser and operating system information, request date and time, address viewed | Automatically by the hosting server when you visit the site |
| Cookie data | Language preference, session and security information, the source from which you reached the site | Through cookies placed in your browser |
3. For What Purposes and on What Legal Basis Do We Process Your Data?
| Purpose | Legal basis (KVKK Art. 5) | GDPR equivalent (Art. 6) |
|---|---|---|
| Responding to your requests, questions and quote requests; communicating with you | Directly related to the conclusion or performance of a contract (Art. 5/2-c); legitimate interest (Art. 5/2-f) | 6(1)(b) and 6(1)(f) |
| Concluding contracts, managing projects and providing services | Performance of a contract (Art. 5/2-c) | 6(1)(b) |
| Ensuring the operation and security of the site and protecting it against misuse | Legitimate interest (Art. 5/2-f) | 6(1)(f) |
| Fulfilling obligations under tax, commercial and other legislation; responding to requests from competent authorities | Legal obligation (Art. 5/2-ç) | 6(1)(c) |
| Evaluating applications for open positions | Related to concluding a contract (Art. 5/2-c) or explicit consent (Art. 5/1) | 6(1)(b) or 6(1)(a) |
| Use of non-essential (functional/analytics) cookies | Explicit consent (Art. 5/1) | 6(1)(a) |
We do not process your personal data for profiling, automated decision-making or ad targeting.
4. Who Do We Share Your Data With?
We do not sell or rent your personal data or transfer it to third parties for marketing purposes. Data is shared only in the following cases, limited to the purpose and to the extent necessary:
- Our hosting and email service providers — as data processors, for the technical storage and transmission of data.
- Our professional advisors — accountants, legal counsel and auditors; only to the extent required by legal and contractual obligations.
- Our project partners — where we carry out work together, only if necessary for the performance of the contract with you and with your knowledge.
- Competent public authorities — where there is a request or obligation arising from legislation.
5. International Transfers
The servers of some technical service providers we use may be located abroad. In addition, due to our European operations in Zurich and our products for the DACH market, data may be shared with partners based in Switzerland and the European Union in certain projects.
For such transfers, we comply with the conditions of KVKK Art. 9 (country with adequate protection, written undertaking, standard contractual clauses or explicit consent). For transfers from the European Union, we apply the safeguards of GDPR Art. 44 et seq.
6. Retention Periods
| Data type | Retention period |
|---|---|
| Contact form messages and email correspondence | 2 years from the conclusion of the correspondence |
| Contracts, invoices and commercial ledger records | 10 years under Turkish Commercial Code No. 6102 and Tax Procedure Law No. 213 |
| Job applications and CVs | 1 year from the application date (deleted immediately upon your request) |
| Server access records (logs) | Up to 12 months |
| Cookies | Cookie Policy— periods as specified therein |
At the end of the period, your personal data is deleted, destroyed or irreversibly anonymized.
7. Data Security
The main technical and administrative measures we take to protect your data are: encryption of site and admin panel traffic with HTTPS/SSL, strong passwords and limits on failed login attempts for admin panel access, role-based access rights that are reviewed regularly, keeping software and plugins up to date, and regular backups. Nevertheless, please note that no transmission over the internet or electronic storage provides absolute security.
8. Your Rights
Under KVKK Art. 11, you have the following rights by applying to the data controller:
- To learn whether your personal data is being processed,
- To request information if it has been processed,
- To learn the purpose of processing and whether it is used in line with that purpose,
- To know the third parties in Türkiye or abroad to whom the data is transferred,
- To request correction of incomplete or incorrectly processed data,
- To request deletion or destruction within the framework of the conditions in KVKK Art. 7,
- To request that correction, deletion and destruction be notified to third parties to whom the data was transferred,
- To object to a result against you arising from the analysis of data exclusively through automated systems,
- To request compensation if you suffer damage due to unlawful processing of data.
Users covered by the GDPR also have the rights to data portability, restriction of processing, object to processing and withdraw their consent at any time ; withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
9. Applications and Complaints
You can submit requests regarding your rights to info@stringsco.com with the subject line "KVKK Başvurusu" (KVKK Application) . Your application must include information that allows us to verify your identity. Requests are finalized free of charge within 30 days (within 1 month for applications under the GDPR); if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
If your application is rejected, you find the response insufficient, or no response is given in time, you have the right to lodge a complaint with the Personal Data Protection Authority (kvkk.gov.tr). For more details, please see our KVKK Privacy Notice.
10. Children's Data
This website is not directed at persons under 18, and we do not knowingly collect personal data from children. In products such as Minimini School and Kitasoft, children's data is processed under the contracts and privacy notices of the organization using these products (school, daycare, etc.), which acts as data controller; this is outside the scope of this policy.
11. Links to Other Websites
Our site may contain external links to our partners and products. We are not responsible for the content or privacy practices of these sites; we recommend reading each site's own privacy notice before visiting.
12. Changes to This Policy
We may update this policy in line with changes in legislation or our services. The current version is always published on this page, and the "last updated" date at the top of the page is refreshed. For significant changes, we will also notify you separately where possible.
13. Contact
For any questions, requests or suggestions about our privacy practices, you can reach us at info@stringsco.com .
STRINGS
Your end-to-end solution partner in software and mobile technologies. Mobile, enterprise, AI-powered automation and consulting.