Data Protection Notice

This notice explains how werea processes personal data collected through this website: what we collect, why, on what legal basis, and what rights you have. It is prepared under Turkish Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the EEA and the UK, is intended to satisfy Articles 13 and 14 of the GDPR.

Data controller

werea — Hamidiye Mah. Cendere Cad. No: 103/1, Porta Vadi T2 Blok, Floor 6, Kağıthane / İstanbul, Türkiye
E-mail: kvkk@werea.co

VERİ_SORUMLUSU_KİMLİK: registered company name, tax office and number, and trade registry number to be added here.

Personal data we process

We process only what you give us directly and what the site technically needs to work. There are no accounts, no profiles and no purchases on this site.

Contact form

• Identity and contact: full name, e-mail address, phone number (optional), company name (optional)
• Transaction security: your IP address and browser information at the moment of submission
• Message content: whatever you write in the free-text field

Demo request form

• In addition to the contact form fields: your role, company size, the topic you are interested in, and the date and time slot you request

Job application form

• Identity and contact: full name, e-mail address, phone number (optional)
• Professional background: the role you apply for, any links you share, your CV file and everything in it

Please do not include special categories of personal data in your CV — health information, union or association membership, biometric data and the like. Such data plays no part in our assessment.

Cookies and site usage

• A random visitor identifier generated to remember your cookie preference, the categories you consented to, the method of consent, the policy version, and your IP address and browser information at the moment of consent
• If you allowed analytics cookies: pages visited, time spent on the site, device and browser information

Purposes

• Answering the requests, questions and applications you send through the forms
• Scheduling a suitable session and getting back to you on demo requests
• Assessing your application and running the recruitment process
• Keeping the site secure and detecting abuse and automated attacks
• Remembering your cookie preference and being able to demonstrate your consent
• Measuring and improving the site, if you allowed it

Legal bases

• Performance of a contract or pre-contractual steps (KVKK art. 5/2-c; GDPR art. 6(1)(b)): demo requests and job applications
• Legal obligation (KVKK art. 5/2-ç; GDPR art. 6(1)(c)): statutory retention and disclosure duties
• Legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)): answering enquiries, site security, strictly necessary cookies
• Consent (KVKK art. 5/1; GDPR art. 6(1)(a)): functional, analytics and marketing cookies, and loading third-party content

How data is collected

Personal data is collected electronically, by automated and partly automated means, while you browse the site and complete the forms. We collect nothing by phone, by post or through any other channel.

Recipients and transfers

We do not sell, rent or share your personal data for marketing purposes. The following providers act as processors, strictly within what their service requires:

• Hosting and infrastructure provider: the servers running the site and the database
• E-mail provider: delivery of form notifications
• Analytics providers: only if you allowed analytics cookies
• Map provider: only if you allowed functional cookies, for the embedded map on the contact page

Analytics and map services may hold servers outside Türkiye. They are activated only with your explicit consent; without it, no request reaches those providers and no transfer abroad takes place. No data leaves the country other than through these consented services and any transfer required by law.

Data may be disclosed to competent public authorities only where legislation requires it, and only within the scope of the request.

Retention

• Contact and demo requests: 2 years from the resolution of the request
• Job applications and CVs: 1 year from the date of application; unsuccessful applications are deleted at the end of that period
• Cookie consent records: 1 year, as proof of consent
• Security logs: the period required by law

At the end of the period, data is deleted, destroyed or anonymised.

Your rights

You have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred at home or abroad; to request rectification if it is incomplete or inaccurate; to request erasure or destruction; to request that these actions be notified to third parties the data was transferred to; to object to a result reached solely by automated analysis that works against you; and to claim compensation for damage arising from unlawful processing. Visitors in the EEA and the UK additionally have the rights to restriction of processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

You can exercise these rights through the data subject request form or by writing to kvkk@werea.co. We respond within 30 days at the latest.

You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, where applicable, with your local supervisory authority.