Privacy Policy
FaStart Teknoloji A.Ş. ("FaStart", "we", "us") is the data controller for personal data processed through fastart.tech. This Privacy Policy explains what data we collect, why, the legal basis under Turkey's KVKK and the EU's GDPR, with whom we share it, how long we keep it, and how to exercise your rights.
For the explicit Turkish disclosure required under KVKK Article 10, see our KVKK Aydınlatma Metni.
Questions and rights requests. For questions about this policy, contact privacy@fastart.tech.
1. Who we are
FaStart Teknoloji A.Ş. is a joint-stock company incorporated in Turkey, headquartered at Gebze/Kocaeli. Corporate registration identifiers are not published without verified registry evidence.
Contact for privacy matters: privacy@fastart.tech.
2. Personal data we process
Identity and contact data you provide via forms (name, email, optional phone) and any free-text content in messages.
Online identifiers such as IP address, user-agent, locale preference, cookie identifiers, and consent state.
Professional data only when you share it (e.g., role or company in an inquiry).
3. Why we process this data and the legal basis
Operating the website and routing inquiries to the correct mailbox: necessary for the performance of a (pre-)contractual measure (KVKK 5/2-c, GDPR 6(1)(b)).
Aggregated, cookieless analytics to improve the site: legitimate interest (KVKK 5/2-f, GDPR 6(1)(f)). You can object at any time via the cookie preferences.
Event-level analytics and remarketing-style measurement: only with your explicit consent (KVKK 5/1, GDPR 6(1)(a)).
Security, fraud prevention, and legal compliance: legitimate interest and legal obligation (KVKK 5/2-ç, GDPR 6(1)(c)/(f)).
4. Recipients and processors
Resend (US) — transactional email delivery for contact form, auto-replies, and newsletters. Data transfer covered by Standard Contractual Clauses.
Plausible (EU) — cookieless web analytics. No personal identifiers leave the EU.
PostHog (EU instance) — event analytics and product telemetry. Loaded only after analytics consent.
Cloudflare / Vercel — hosting, CDN, DNS, and DDoS protection. Some edge nodes process traffic worldwide.
Sentry (EU) — error monitoring. PII is scrubbed by default.
We do not sell personal data and do not run advertising.
5. International transfers
Transfers outside Turkey or the EEA are made only when an adequate safeguard is in place — currently, Standard Contractual Clauses with each non-EEA processor.
6. Retention
Inquiry records: 3 years from last interaction, then deleted or anonymized.
Cookie consent record: 12 months.
Newsletter subscription state: until you unsubscribe.
Server logs: 30 days unless required for security investigation.
7. Your rights
Under KVKK Article 11 and GDPR Articles 15–22 you may request access, rectification, erasure, restriction, portability, and may object to processing or withdraw consent at any time. You may also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK Kurumu) or your local EEA supervisory authority.
Email privacy@fastart.tech to exercise any of these rights. We respond within 30 days.
8. Cookies
We use a cookie consent banner that lets you accept all, reject non-essential, or manage individual categories. See the Cookie Policy for the full inventory.
9. Changes to this policy
We update this policy when our processing changes. Material changes are signaled at the top of the page and dated. The current version is dated above.