PRIVACY

Privacy Policy

Last updated: 11 December 2025

This Privacy Policy explains how ANOFA MÜHENDİSLİK PLANLAMA BİLİŞİM VE TİCARET LİMİTED ŞİRKETİ (“ANOFA”, “we”, “us”, “our”) processes your personal data when you visit anofa.co, contact us, or use our services. It is prepared mainly under Law No. 6698 on the Protection of Personal Data (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who we are

The data controller responsible for your personal data is:

ANOFA MÜHENDİSLİK PLANLAMA BİLİŞİM VE TİCARET LİMİTED ŞİRKETİ
Ayazağa Mah. Kemerburgaz Cad.
Vadi İstanbul Park Sitesi 7A Blok
No: 7B Kat: 2 İç Kapı No: 4
34396 Sarıyer / İstanbul / Türkiye
E-mail: info@anofa.co

2. Scope

This Policy applies to:

Visitors of our website (anofa.co and its subpages),
People who contact us via contact forms, e-mail or phone,
Representatives of our customers, partners, and suppliers,
Participants in our events, demos, or pilot studies.

It does not apply to processing carried out on third-party websites or platforms that have their own privacy policies.

3. What personal data we collect

Depending on how you interact with us, we may collect and process:

3.1. Contact and identification data

Name, surname
Organisation / company, role
Work e-mail address, phone number
Country / city

3.2. Communication data

Content of messages sent via contact forms or e-mail
Meeting notes and follow-up information
Your requests, feedback, and support records

3.3. Website and technical data

IP address, browser type and version, operating system
Device information, screen resolution, language settings
Pages visited, time and duration of visit, referring URLs
Cookie identifiers and similar technologies (see Cookies section)

3.4. Service and project data

Information related to your organisation, project, or use-case
Contractual and billing details (if you are a customer or supplier)
User accounts and access logs for our platforms, where applicable

We do not intentionally collect special categories of personal data (such as health data, political opinions, religion, etc.) through our website, unless you choose to share such information and it is strictly necessary for a specific service and processed under the conditions required by KVKK / GDPR.

4. Purposes and legal bases for processing

We process your personal data only for specific, explicit and legitimate purposes and based on a valid legal ground in line with KVKK and, where applicable, GDPR.

4.1. Responding to your requests and communications

To respond to your questions, demo requests, collaboration proposals and enquiries,
To manage our ongoing communication with you.

Legal basis: performance of a contract or steps prior to entering into a contract; or our legitimate interest in communicating with you.

4.2. Providing and improving our services

To plan, deliver and support our geospatial analytics, consulting and R&D services,
To manage customer relationships, proposals and projects.

Legal basis: performance of a contract; legitimate interest in operating and improving our business.

4.3. Website operation, security and analytics

To ensure the security and performance of our website (e.g. log files, security monitoring),
To understand how our website is used and improve user experience (e.g. basic analytics).

Legal basis: our legitimate interest in maintaining secure and user-friendly services; where required for non-essential cookies/analytics – your consent.

4.4. Legal and compliance obligations

To comply with obligations under applicable laws (e.g. tax, accounting, data protection),
To respond to lawful requests from authorities and to establish, exercise or defend legal claims.

Legal basis: compliance with a legal obligation.

4.5. Marketing and professional communication

To share information about projects, events and services that may be relevant for you in your professional role,
To follow up after meetings, conferences or workshops.

Legal basis: your consent (where required), or our legitimate interest in promoting our services to professional contacts, with an easy opt-out in each message.

5. Cookies and similar technologies

We use cookies and similar technologies to make our website function properly, keep it secure and improve user experience.

5.1. Types of cookies we may use

Strictly necessary cookies – required for the website to work (security, core functions).
Functional / preference cookies – remember your choices (e.g. language, settings).
Analytics cookies – help us understand how visitors use the site (page views, navigation paths).

Under KVKK and GDPR, non-essential cookies may require your consent, which is collected via a cookie banner or settings where implemented. You can manage cookies in your browser settings; disabling some cookies may affect site functionality.

For general information about cookies, see: https://www.allaboutcookies.org.

6. Sharing your personal data

We may share your personal data with:

Service providers / data processors (hosting, cloud infrastructure, e-mail, analytics, IT support) under written agreements and appropriate security measures.
Business partners and project collaborators where necessary for joint projects, proposals, events or services (e.g. universities, research institutes, funding agencies).
Public authorities and regulators where we are legally required to do so, or to establish, exercise or defend legal claims.

7. International data transfers

Our servers and main operations are located in Türkiye. Some of our partners or service providers may be located in other countries, including the EEA or other jurisdictions.

When we transfer personal data to another country, we:

Assess whether there is an adequate level of protection under applicable law,
Use appropriate safeguards such as standard contractual clauses where required,
Take reasonable steps to ensure your data remains protected.

8. Data retention

We keep your personal data only for as long as necessary for the purposes described in this Policy or for the retention periods required by applicable laws.

Website logs: kept for a limited period necessary for security and troubleshooting,
Customer / project data: stored for the duration of the contract and legal limitation periods,
Communication records: stored as long as needed to manage the relationship and comply with legal obligations,
Marketing contacts: stored while you remain subscribed or until you object/unsubscribe.

When the retention period expires, data are deleted, anonymised or archived securely in accordance with KVKK and relevant guidance.

9. Your rights

Under KVKK Article 11 and, where applicable, GDPR, you have several rights regarding your personal data, including the right to:

learn whether your personal data are processed,
request information about processing,
learn the purpose of processing and whether it is used accordingly,
know the third parties to whom data are transferred, in Türkiye or abroad,
request correction of incomplete or inaccurate data,
request deletion or destruction of your personal data under KVKK conditions,
request notification of correction/deletion to third parties,
object to results arising against you from analysis by exclusively automated systems,
request compensation for damage arising from unlawful processing.

Where GDPR applies, you may also have the right to data portability, to object to certain processing and not to be subject to a decision based solely on automated processing.

10. How to exercise your rights

To exercise your rights under KVKK and, where applicable, GDPR, you can contact us at:

E-mail: info@anofa.co

Please indicate which right you wish to exercise, describe your request and include your contact details. Under KVKK we generally respond within 30 days; under GDPR within one month, with possible extension in complex cases as permitted by law.

11. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss or destruction.

Access control and role-based permissions,
Secure servers and, where appropriate, encryption,
Backups and monitoring for security incidents,
Contractual and confidentiality obligations with staff and providers.

No system can be guaranteed 100% secure, but we work to maintain a reasonable level of protection.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised.

13. Contact

For any questions or requests regarding this Privacy Policy or our data protection practices: