Privacy notice
This notice explains which personal data we process on vekil.tech, why, where and for how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK).
Controller
CCG Consulting Ltd., Famagusta, TRNC · info@ccg-consulting.co
Contact form
Data processed: full name, work email and, optionally, company, phone and your message; also the page the form was sent from, the page language and the time of sending.
Purpose: to answer your request for an introduction, a demo or pricing and to contact you about it.
Legal basis: steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b); KVKK Art. 5/2-c).
Storage and transfers: form entries are stored on Supabase infrastructure in a data centre in Germany (Frankfurt). Your request reaches our team as a notification email, which passes through our email service provider's servers. Because these providers are located outside Türkiye, your data is transferred abroad; for visitors from Türkiye this transfer is based on the explicit consent you give before sending the form (KVKK Art. 9/6-a). Your data is never shared for marketing or sold.
Retention: 2 years, after which it is deleted.
Abuse protection: the form contains a hidden field to filter out bots, and at most 5 requests per day are accepted from the same email address.
Visit measurement
We use our own measurement tool to see, in aggregate, how the site is used; we do not use third-party analytics.
- Recorded: the page viewed, the domain of the site that referred you, campaign tags in the link (utm), device type (phone/tablet/desktop, derived from screen width) and time spent on the page.
- Your IP address is not stored. To tell visits apart within the same day, your IP address and browser details are hashed one way together with a random value that is replaced every day; the previous day's value is deleted, so visits cannot be linked across days and the hash cannot be traced back to an IP address.
- If your browser sends Do Not Track, nothing is measured.
- Legal basis: our legitimate interest in improving the site (GDPR Art. 6(1)(f); KVKK Art. 5/2-f).
- Retention: 400 days.
ChatGPT app
Vekil's ChatGPT app offers three tools: an AI compliance readiness check, a masking demonstration on built-in samples, and a demo request.
Compliance check and masking example: your answers and the sample you pick are processed only to produce the response and are not stored. These tools do not ask you for personal data.
Demo request — data processed: full name, work email and, optionally, company and your message; also the language and the time of sending. Purpose and legal basis: the same as for the contact form (GDPR Art. 6(1)(b); KVKK Art. 5/2-c). Storage and transfers: the request reaches us through ChatGPT (OpenAI), the channel you chose; the record is stored on the same Supabase infrastructure as the contact form (Frankfurt, Germany) and reaches our team as a notification email. For users from Türkiye, the transfer abroad is based on the explicit consent you give in ChatGPT before sending (KVKK Art. 9/6-a). Retention: 2 years. At most 5 requests per day are accepted from the same email address.
Logging: our server records only which tool was called, how long it took and the result; no content, name or email is logged. Your IP address is not logged.
Cookies
This site does not use cookies and does not write to your browser's local storage.
Your rights
Under GDPR Art. 15-21 and KVKK Art. 11 you have the right to access your data, to have it corrected or erased, to restrict or object to its processing and to receive it in a portable format. You can withdraw your consent at any time; this does not affect processing carried out before the withdrawal.
Send your requests to info@ccg-consulting.co. You also have the right to lodge a complaint with the data protection authority of your EU country of residence or, in Türkiye, with the Personal Data Protection Board.