Data controller
Fotinos Yazılım ve Teknoloji Limited Şirketi is the data controller for personal data processed under this policy. Contact us at info@fotinos.io with questions or rights requests.
Information we collect
When you submit a contact or project form, we process the full name, phone number, email address and, where applicable, company information required by that form, together with the message or project description you enter. In the detailed estimate flow, this also includes a summary of the selected product and scope, design preference, estimated budget and timeline, form language, submission type, consent time and the policy version you accepted.
We do not request sensitive personal data. Please do not enter health data, special-category personal data or confidential information that does not need to be shared in the project description or note fields.
- Identity and contact information
- Optional company information
- Project description, scope summary and estimate information
- Consent and submission records
- Basic technical data such as IP address, request time and browser headers
Browser storage, analytics and language
Your privacy choices are stored on this device in a localStorage record named 'fotinos-consent:v2'. The record contains the consent schema and privacy-policy versions, separate true-or-false choices for analytics and estimate-draft storage, and the time the choice was updated; it contains no direct identifiers. A material change to the consent purposes or policy version causes the site to ask again.
Only when you enable estimate-draft storage are your detailed estimate selections saved in 'fotinos-estimate-draft:v1' for up to 30 days. The draft contains no personal form fields and is not sent to Fotinos or a form provider unless you submit the form.
The English version is served at the root URL, Spanish under '/es' and German under '/de'. No persistent cookie or localStorage record is used for language selection.
Google Analytics
We use Google Analytics 4 only after you enable analytics in the privacy settings. Google Analytics may then use first-party cookies such as '_ga' and related identifiers and process information about pages viewed, interactions, referral source, device and browser characteristics, and approximate location. We use this information to understand aggregated website usage and improve the site.
Until you enable analytics, the Google tag is not loaded and no data is sent to Google through Analytics.
Advertising storage, advertising user data, ad personalization and Google Signals remain disabled. We do not intentionally send names, email addresses, phone numbers, form contents or project descriptions to Google Analytics.
You can withdraw analytics consent at any time through the Privacy settings control in the footer. Withdrawing consent stops future analytics collection on this site and removes accessible Google Analytics cookies from this device. Google processes information under its own terms and privacy safeguards.
How do we use information?
We use information to respond to requests, provide services, manage proposals and projects, maintain security, meet legal obligations and improve service quality. Only when you give permission do we also use analytics data to understand website usage in aggregate and improve the digital experience.
Legal bases under GDPR and KVKK
Where the EU or UK GDPR applies, we rely on your consent for Google Analytics and optional estimate-draft storage; steps requested before entering into a contract or performance of a contract for project enquiries and services; compliance with legal obligations; and our legitimate interests in securing, operating and improving the website where those interests are not overridden by your rights. Under Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK), we process personal data on the corresponding legal grounds available under that law, including explicit consent where required, contract formation or performance, legal obligation, establishment or protection of a right, and legitimate interest.
Form delivery and service providers
When you submit the form, your information is sent from your browser to Web3Forms's form-delivery infrastructure over HTTPS. Web3Forms processes this information to deliver it to Fotinos, after which the email infrastructure of Fotinos and the relevant providers takes part in delivery. Web3Forms and our email, hosting and security providers may process data limited to what is necessary for their tasks and subject to appropriate security requirements. We do not sell personal data.
Google processes website usage data for measurement only when you enable analytics. We do not include form fields in analytics events.
Processing and transfers outside Türkiye
The infrastructure of Web3Forms, Google, or our email and hosting providers may be located outside Türkiye and your country of residence. Form information, basic technical data and analytics data you authorised may therefore be processed internationally. Our arrangements with providers and transfer mechanisms permitted by applicable law govern these transfers. You may contact us for information about safeguards relevant to your data.
Hosting and technical records
When the website is delivered through Cloudflare infrastructure, connection records such as IP address, request time, requested address and basic browser information may be technically processed to deliver pages, prevent abuse and maintain security. Cloudflare Web Analytics and RUM are disabled. Consent-based Google Analytics measurement is described separately above.
Retention period
The estimate draft is kept only on the device you authorised and for no more than 30 days. We retain submitted forms and correspondence for as long as necessary to respond to your request, manage a quotation or potential contract process and meet legal obligations. When Google Analytics is enabled, we configure user- and event-level data retention to 14 months; aggregated reports may remain available for longer. At the end of the applicable period, we delete, destroy or anonymise data and limit service-provider retention through contracts and account settings where reasonably possible.
Data security
We apply reasonable administrative and technical measures to protect personal information against unauthorized access, alteration, disclosure or loss. No internet transmission method can provide absolute security.
Children's privacy
We do not knowingly collect personal data from or market to people under 18. If we learn that such data has reached us, we take steps to delete it.
Your privacy rights
Depending on the law that applies to you, you may have the right to request access, correction, deletion, restriction or portability of your personal data, to object to certain processing, and to withdraw consent at any time without affecting processing carried out before withdrawal. You may also complain to the competent data-protection authority. Under Article 11 of the KVKK, you also have the rights to learn whether and why your data is processed, know recipients, request correction, deletion or destruction, and exercise the other rights provided by law.
Policy changes
We may update this policy in response to service or legal changes. The current version and revision date will be published on this page.
Contact
Send requests about this privacy policy, your data or your rights to info@fotinos.io or use our contact page.