Privacy Policy
This policy explains how the personal data of all natural persons who use the Collobr platform is collected, used and protected. By using the platform, you are deemed to have accepted this policy.
This is a translation provided for your convenience. In case of any discrepancy, the Turkish original is legally binding: Türkçe metin
1Data Controller
Under Law No. 6698 on the Protection of Personal Data (KVKK), the Turkish personal data protection law, the data controller is Bink Teknoloji Sanayi Ticaret Limited Şirketi, the owner of the Collobr brand.
Address: Sahabiye Mah. Ahmet Paşa Cad. Kalender İş Mrk. No:41/602 Kocasinan, Kayseri
For any questions or requests regarding your personal data: [email protected]
2Personal Data Collected
The following personal data is processed in order to provide our services:
| Data Category | Data Collected | Collection Method |
|---|---|---|
| Identity | First name, last name | Sign-up form |
| Contact | Email address, phone number | Sign-up form, support requests |
| Company | Company name, tax number, industry | Sign-up form |
| Usage | Session information, in-platform activities, log records | Automatic (platform use) |
| Payment | Transaction reference numbers (card details are not stored) | Via the payment provider |
Payments are processed through PCI-DSS compliant payment providers, and card details are not stored by us.
3Purposes of Data Processing
Your personal data is processed for the following purposes and on the following legal grounds:
- Performance of the contract: Account creation, platform access and service delivery
- Customer support: Handling technical support requests
- Billing: Subscription management and payment transactions
- Security: Detection of unauthorized access and misuse
- Legal obligations: Tax, accounting and official reporting requirements
- Legitimate interest: Improving service quality, product development (anonymized data)
- Explicit consent: Marketing communications (only for those who have given consent)
4Data Transfers
To provide the service, your personal data is shared with the following providers, and only to the extent the respective service requires:
| Provider | Purpose | Location |
|---|---|---|
| Veridyen Bilişim Teknolojileri | Application and database servers | Turkey (Izmir) |
| Cloudflare, Inc. | Delivery and protection of website traffic; file storage (quote PDFs, documents, call recordings) | Outside Turkey (US-based company, global infrastructure) |
| Resend, Inc. | Sending platform emails (verification codes, notifications) | EU (Ireland); US-based company |
| OpenAI | AI features | Outside Turkey (US) |
| Sign-in with Google; Google Calendar integration and mobile notifications (if used) | Outside Turkey | |
| Apple, LinkedIn | Sign-in with the respective account (if used) | Outside Turkey |
| Meta (WhatsApp Business) | Message delivery if the WhatsApp integration is connected | Outside Turkey |
| Payment institution | Payment transactions (card details are not stored by us) | Turkey |
| Competent public authorities | Where required by law | Turkey |
Transfers abroad: Through the providers marked “Outside Turkey”, your data may be transferred outside Turkey. See the KVKK Notice for details, and send any questions to [email protected].
5Security Measures
Technical and administrative measures are taken to ensure the security of your personal data:
- Secure data transmission with SSL/TLS encryption
- Application and database servers hosted in Turkey (Izmir)
- Role-based access control (RBAC)
- Regular automatic backups
- Option to sign in with an electronic signature
- Two-step verification (authenticator app) option
6Retention Periods
Your personal data is retained for as long as the purpose of processing requires:
- For as long as the account is active: Account and platform usage data
- 30 days after the account is closed: Deletion of platform data
- 10 years: Financial and accounting records required by law
- 2 years: Support request records
7Your Rights Under the KVKK
Pursuant to Article 11 of KVKK No. 6698, you have the following rights:
- To learn whether your personal data is being processed
- If it has been processed, to request information about it
- To learn the purpose of processing and whether it is used in accordance with that purpose
- To know the third parties in Turkey or abroad to whom it has been transferred
- To request its correction if it is incomplete or inaccurate
- To request its deletion or destruction
- To object to outcomes against you resulting from automated systems
- To claim compensation if you suffer damage due to unlawful processing
To exercise your rights, you may submit a written application to [email protected]. Applications are answered within 30 days.
8Users in the EU/EEA and UK (GDPR)
This section applies to users located in the European Union, the European Economic Area (EEA) or the United Kingdom, and provides the additional information required by the General Data Protection Regulation (GDPR) and the UK GDPR. If this section conflicts with the rest of this policy, this section prevails for those users.
Roles: For data collected directly from you through your Collobr account, our website and our mobile app, the controller is Bink Teknoloji Sanayi Ticaret Limited Şirketi. For customer, contact, call and message data processed in a business’s Collobr account, that business is the controller and Collobr acts as a processor, processing the data only on the business’s instructions (Art. 28 GDPR). A data processing agreement (DPA) is available to business customers on request. On websites that use Collobr visit measurement, visitors who do not consent are only counted anonymously: pages viewed on the same day are grouped by an irreversible code created with a secret key that changes every day and is kept only in server memory; IP addresses and browser details are not stored, and visits on different days cannot be linked.
Legal bases (Art. 6(1) GDPR):
- Performance of a contract (b): account creation, platform access and service delivery, support and billing
- Legal obligation (c): tax, accounting and official reporting requirements
- Legitimate interests (f): security, abuse prevention and improving the service
- Consent (a): marketing communications and non-essential cookies; you can withdraw your consent at any time
International transfers: Our application and database servers are located in Turkey. As there is no European Commission adequacy decision for Turkey and for some of the countries listed in section 4, transfers from the EEA and the UK to these countries rely on appropriate safeguards under Art. 46 GDPR, in particular the European Commission’s Standard Contractual Clauses (with the UK Addendum for UK transfers), together with supplementary technical measures (encryption in transit and at rest, role-based access). You can request a copy of the safeguards in place at [email protected].
Your rights: Under the GDPR you have the right to:
- Access your data and obtain a copy (Art. 15)
- Have inaccurate or incomplete data rectified (Art. 16)
- Have your data erased (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interests and to direct marketing (Art. 21)
- Not be subject to decisions based solely on automated processing that significantly affect you (Art. 22)
- Withdraw your consent at any time, without affecting the lawfulness of prior processing (Art. 7(3))
Send your requests to [email protected]; we respond within one month at the latest. If your data is processed in a business’s Collobr account, we recommend contacting that business first; we forward any requests we receive to the business and assist it.
Right to lodge a complaint: You have the right to lodge a complaint with the data protection supervisory authority of the EU/EEA country where you live or work or where you believe an infringement occurred (for example the CNIL in France), or with the Information Commissioner’s Office (ICO) in the UK.
Collobr is a service for businesses and is not directed at children under 16.
9Cookies
The platform uses the following types of cookies:
- Strictly necessary cookies: Required for session management and authentication; they cannot be disabled.
- Analytics cookies: Used for anonymous platform usage statistics. Subject to your consent.
- Preference cookies: Used to remember your language and interface preferences.
You can manage cookies in your browser settings. Disabling strictly necessary cookies may affect the functionality of the platform.
10Changes to This Policy
Material changes to this privacy policy will be announced in advance on the platform and/or by email. You can always find the current policy on this page.
Continuing to use the platform after the changes take effect means that you accept the updated policy.
11Contact
For questions about our privacy policy or your personal data:
- General privacy: [email protected]
- KVKK applications: [email protected]
- You can also use our contact form.