Last Updated: 16.11.2025
We would like to inform you, our valued visitors, about the processing of your personal data in accordance with Law No. 6698 on Protection of Personal Data ('KVKK').
1. Data Controller
Your personal data may be processed by WaveArc as the data controller within the scope described below:
- Company: WaveArc
- Email: mete@wavearc.co
- Website: https://www.wavearc.co
2. Personal Data Collected
The following personal data is collected through our website:
Through Contact Form
- Name and Surname
- Email address
- Phone number (optional)
- Subject (optional)
- Message content
Automatically Collected Technical Data
- IP address
- Browser type and version
- Device information
- Pages visited
- Page duration
- Referrer information
3. Purposes of Processing Personal Data
Your collected personal data is processed for the following purposes:
- Respond to your contact requests and communicate with you
- Provide and improve our services
- Analyze website usage and improve user experience
- Security and fraud prevention
- Fulfill legal obligations
4. Legal Basis for Processing Personal Data
Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of KVKK:
- Explicit Consent: Your explicit consent provided through the contact form
- Performance of Contract: Necessary processing to provide services
- Legitimate Interest: Our legitimate interest for website security and analytics
- Legal Obligation: Our obligations arising from legislation
5. Transfer of Personal Data
Your personal data is shared with the following third-party service providers:
- Resend (ABD): Used for email delivery. GDPR-compliant data processing agreement in place.
- Google Analytics (ABD): Used to analyze website traffic. Only anonymous and aggregate data is processed.
- Vercel (ABD): Provides website hosting services. Secure infrastructure and GDPR compliance available.
For international data transfers, measures stipulated in Article 9 of KVKK are taken, and we work with countries with adequate protection or companies with data protection agreements.
6. Data Retention Period
Your personal data is deleted, destroyed, or anonymized when the processing purpose ceases or legal retention periods expire:
- Contact form data: 2 years
- Analytics data: 14 months (Google Analytics default)
- Server logs: 6 months
7. Rights of Data Subjects
You have the following rights under Article 11 of KVKK:
- Learn whether your personal data is being processed
- Request information if processed and learn the purpose
- Know the third parties to whom data is transferred domestically or abroad
- Request correction if processed incorrectly or incompletely
- Request deletion or destruction under the conditions of Article 7 of KVKK
- Request notification of corrections, deletions to third parties
- Object to adverse results from automated processing
- Request compensation for damages due to unlawful processing and file complaints with the Personal Data Protection Authority
8. Application Method
You can apply through the following methods to exercise your rights mentioned above:
- By email: Send your petition with identity documents to mete@wavearc.co
- Identity verification will be performed and authentication may be requested for security reasons.
- You must clearly state which right you wish to exercise in your application.
Your request will be finalized free of charge within 30 days at the latest. If the transaction requires additional cost, the fee determined by the Personal Data Protection Board may be charged.
