Privacy
Cookie Policy
How BISETRA uses cookies, browser storage and cookieless performance measurement, and how to manage your preferences and exercise your rights.
Last updated: · Policy version: 4
Data controller and contact
BISETRA SOFTWARE AND TECHNOLOGY
Camikebir Mah. 138022 Sok. No:25/C Kulu/KONYA
[email protected]
This policy applies to the bisetra.com corporate website. Links to other websites lead to services with their own privacy and cookie rules. Your choice of display language does not by itself determine which data protection laws apply to you.
What are cookies and local storage?
HTTP cookies are small records that your browser can include in requests to a website. localStorage holds information in your browser and is not automatically included in HTTP requests. A cookieless measurement service can still process data over the network; not using cookies does not mean that no personal data is processed.
Browser records we use
| Record / type | Purpose, content and creation | Duration | Access / recipient |
|---|---|---|---|
bisetra-consentlocalStorage | Remembers your choice in the preferences panel. Contains the policy version, necessary/analytics/marketing preferences, action type, selection and expiry times. Created when you save a choice or acknowledge the notice. Contains no name, email, form content, IP address or visitor identifier. | 180 days | Only the BISETRA application in the same browser; this record is not sent to a server or analytics provider. |
bisetra-languageHTTP cookie | Remembers the tr or en language you explicitly select from the language menu. Created only when you use the language switch link. Not used for advertising or visitor tracking. | 180 days | Included in requests to BISETRA and passes through the Vercel and Cloudflare infrastructure serving the site. Uses HttpOnly and SameSite=Lax; sent with the Secure attribute over HTTPS. |
Periods run from your last save or language selection. The 180-day period is BISETRA’s chosen preference retention period, not a statutory fixed period. The browser expires the language cookie. The localStorage record becomes invalid on expiry and is removed while the site is open or when reopened; it is not automatically deleted while the site is closed. If storage is blocked, your privacy choice is held only in memory for the open page.
Purposes and legal bases
Preference and language records remember the privacy choice and interface language you request. For personal data processing connected with these limited purposes, the basis is legitimate interests under Article 5(2)(f) of the Turkish KVKK and, where GDPR applies, Article 6(1)(f) GDPR. Our interest is to respect your choice and provide the site without repeatedly asking for the same preference; these records are not used for advertising, profiling or cross-site tracking.
In the European Economic Area, storing or reading information on your device is also governed by Article 5(3) of the ePrivacy Directive and national implementing rules. Records necessary to remember the preferences you expressly request are used only for that limited purpose. Other cookies or similar technologies requiring consent are not enabled without prior, specific and informed consent.
Analytics and marketing
Vercel Analytics and marketing services within the application are currently disabled. You can change and store your preferences for these categories in the panel; a saved selection does not enable the disabled service or constitute consent to a future service. If measurement or marketing requiring consent is introduced, provider, purpose, data types, retention and transfer information will be updated beforehand. You will be able to reject, accept and manage optional categories individually; rejection will not prevent access to the site.
Cloudflare Web Analytics — separate performance measurement
Cloudflare Web Analytics is enabled on bisetra.com. According to Cloudflare, it does not use cookies or localStorage and does not track people across websites. Measurement information such as page views, referrer, browser/device characteristics and loading performance is sent to Cloudflare. IP addresses and HTTP headers may be processed by the infrastructure when network requests are transmitted.
This measurement is added by Cloudflare infrastructure; the Analytics category in the preferences panel refers only to the application’s Vercel Analytics integration. Saving preferences in the panel does not enable or disable Cloudflare measurement. The purpose is to assess site usage and performance in aggregate. To the extent personal data is processed, the basis is legitimate interests under Article 5(2)(f) KVKK and, where GDPR applies, Article 6(1)(f). You may contact us to object to this processing.
Cloudflare data collection information · Cloudflare privacy policy
Changing and deleting your preferences
Open the panel with the “Privacy preferences” button on any page or “Cookie preferences” in the footer. Save Preferences applies your panel choice; Understood only remembers that you acknowledged the notice. Closing the panel, scrolling or continuing to browse does not grant permission for optional processing. If a consent-based category is enabled, you can withdraw consent in the same panel; withdrawal does not affect the lawfulness of earlier processing.
You can delete or block cookies and local storage for bisetra.com in your browser’s site data settings. After deletion, the preference notice may reappear and your language choice will be forgotten. Explicit /tr and /en addresses remain usable. This does not erase network or measurement records already received by providers; contact us with requests concerning those records.
Recipients and international transfers
The preference record remains in your browser. The language cookie and web requests may reach Vercel for hosting and Cloudflare for content delivery, security and the measurement described above. These providers operate global infrastructure; network data may be processed outside Türkiye or the European Economic Area. Essential delivery and security operations are separate from optional cookie preferences.
International transfers of personal data are subject to the adequacy or appropriate safeguard requirements of the current Article 9 KVKK; transfers covered by GDPR are subject to Chapter V. A cookie preference is not by itself an international transfer safeguard. Contact us for information about processing locations, provider retention periods and applicable transfer safeguards, or for a copy of the relevant safeguards.
Your rights under Turkish KVKK
Under Article 11 KVKK, you may obtain information about processing, purposes and recipients; request correction, erasure or destruction where the legal conditions are met, and notification of those actions to recipients. You may object to adverse results arising solely from automated analysis and seek compensation for harm caused by unlawful processing.
Submit your request in writing to the address above or using a method accepted by the Turkish communiqué on applications to controllers. For email applications, use an address previously provided to us and registered in our systems, and write to our contact email. Include the identity, contact and request details required by that communiqué. KVKK requests are handled as soon as possible and within 30 days, generally free of charge; the Board’s tariff may apply if additional costs arise.
If your request is rejected, the response is inadequate or no response is provided in time, you may complain to the Turkish Personal Data Protection Board within the time limits in Article 14 KVKK. You must first apply to the controller.
Your rights where GDPR applies
Where GDPR applies, you have rights of access, rectification, erasure, restriction and data portability, subject to the applicable conditions. You may object to processing based on legitimate interests on grounds relating to your situation and withdraw consent for consent-based processing. Our cookie and preference records are not used for automated decisions producing legal or similarly significant effects.
Send GDPR requests to our contact email. Responses are generally free and provided within one month; where necessary due to complexity or the number of requests, the period may be extended by two further months, with reasons communicated within the first month. You may also complain to a competent data protection authority, particularly in the country where you live, work or where the alleged infringement occurred.
Changes to this policy
When technologies, purposes or providers change, we update this page and its date. Material changes affecting preferences result in a new policy version and invalidate the previous preference record. New processing requiring consent is not started before updated information and a new choice are provided.