Privacy Notice (KVKK)

Data controller

The data controller under KVKK is Osman Kavak (sole proprietorship), which operates the nextgeoagency.com domain and trades as “Next GEO Agency”. Address: Onikişubat, Kahramanmaraş, Türkiye. E-mail: info@nextgeoagency.com.

Whether registration in the Turkish Data Controllers’ Registry (VERBİS) is required depends on headcount and balance-sheet thresholds set by decisions of the Turkish Personal Data Protection Board. We are a sole proprietorship and, against those thresholds, are not currently within the registration obligation. If the thresholds or our situation change, we will register and update this notice.

Which personal data we process

nextgeoagency.com is a static website. There is no server-side application, no membership system and no user accounts. Personal data is processed at only two points:

• Contact form: first name, last name, company name, industry, e-mail address, phone number and the free-text message you write. E-mail and message are required; the other fields are optional.
• Technical access data: when you load the site, our infrastructure providers (Cloudflare) may temporarily process connection records such as IP address, browser type, request time and the requested page, in their own systems, to run and secure the service. We do not access these records directly and do not use them to identify anyone.

The form does not ask for special categories of data (health, religion, political opinion and so on). Please do not include such information in the message field.

Purposes of processing

• To answer the request you send through the contact form, prepare a proposal and get back to you.
• To understand which service area your request belongs to (GEO, SEO, websites, automation) and route it to the right person.
• If a contract follows, to carry out the communication needed to conclude and perform it.
• To keep the site secure and available and to block abuse and automated attacks.
• To meet our legal obligations and to protect our rights in any dispute.

Legal basis

Your personal data is processed on the following legal bases listed in Article 5 of KVKK:

• Article 5/2-c: processing is necessary for the conclusion or performance of a contract to which you are a party (your request for a proposal and any service relationship that follows).
• Article 5/2-f: processing is necessary for the legitimate interests of the data controller, provided that this does not harm your fundamental rights and freedoms (site security, routing your request to the right team, keeping communication records).
• Article 5/2-ç: processing is necessary for the data controller to comply with a legal obligation (statutory retention and reporting duties).
• Article 5/1: your explicit consent, for any processing that falls outside the bases above. As of today the site performs no consent-based processing, for example no marketing mailing list and no analytics cookies.

How data is collected

Your data is collected electronically, by automated means, when you fill in and submit the contact form. The submission is sent encrypted over HTTPS. The site uses no tracking analytics cookies and no browser storage (localStorage); details are in the Cookie Policy.

Transfers of personal data

The site runs on service providers established outside Türkiye. Your personal data is therefore transferred abroad within the framework of Article 9 of KVKK and the related Board decisions:

• Resend (USA): when you submit the contact form, the information reaches us as an e-mail delivered through Resend’s infrastructure. Resend acts as a data processor here and keeps delivery records for as long as delivering the message requires; we do not store submissions in a separate database.
• Cloudflare, Inc. (USA): provides DNS, the content delivery network (CDN), the web application firewall and bot protection. Every request to the site passes through Cloudflare’s network, and Cloudflare may process connection data such as IP addresses for security purposes.

Beyond this, your personal data is not transferred to third parties, sold, or shared for marketing purposes unless you give explicit consent or the law requires it. Lawful requests from competent public authorities are reserved.

When you click the WhatsApp link on the site you are taken to the WhatsApp app; from that point the conversation is governed by WhatsApp’s (Meta Platforms) own privacy policy.

Retention period

Contact-form data is kept until your request has been evaluated and closed, and then for at most 2 years in case a service relationship or follow-up contact develops. If a contract is concluded, the data is retained for the statutory periods required by Turkish law (commercial books and records, tax records and similar). When the period ends, the data is deleted, destroyed or anonymised.

Retention of connection logs held by infrastructure providers is subject to each provider’s own policy and is generally short.

Your rights under Article 11 of KVKK

By applying to the data controller you have the right to:

• learn whether your personal data is being processed,
• request information about the processing if it is,
• learn the purpose of processing and whether the data is used in line with that purpose,
• know the third parties, in Turkey or abroad, to whom the data is transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction of the data under the conditions set out in Article 7 of KVKK,
• request that corrections, deletions and destructions be notified to third parties who received the data,
• object to a result that is to your detriment and arises from analysis carried out exclusively by automated systems,
• claim compensation for damage suffered because of unlawful processing.

If you are located in the European Union or the United Kingdom, the GDPR or UK GDPR may also apply to you and give you comparable rights. You can use the same contact details to exercise them.

How to apply

You can send requests about your rights in writing to Onikişubat, Kahramanmaraş, Türkiye, in line with the Communiqué on the procedures and principles for applying to the data controller, or by e-mail to info@nextgeoagency.com. Your request should include your name, the subject of the request and your contact details; an e-mail request must contain enough information for us to verify your identity.

Requests are answered free of charge as soon as possible and at the latest within 30 days, depending on their nature. If the process involves an additional cost, a fee from the tariff set by the Board may be charged. If your request is refused, the answer is unsatisfactory or no answer is given in time, you may lodge a complaint with the Turkish Personal Data Protection Board under Article 14 of KVKK.

Changes

This notice is updated when the law changes or when the site starts a new data-processing activity. The current version is always published on this page; the date at the top shows the last update.