Privacy Policy

Last updated: June 2026

Thank you for your interest in DigiShifter. Protecting your personal data is important to us. Below we inform you, in accordance with the General Data Protection Regulation (GDPR) and the Turkish Law on the Protection of Personal Data (KVKK), about the nature, scope and purpose of the processing of personal data on this website.

1. Controller

The controller within the meaning of the GDPR and comparable regulations is:

DigiShifter Ltd.
Full registered name: DİGİSHİFTER YAZILIM HİZMETLERİ TİCARET LİMİTED ŞİRKETİ
Zeytinlik Mah. Fişekhane Cad. No: 5, Bakırköy / İstanbul, Türkiye
Email: info@digishifter.com · Phone: +90 539 570 20 20

2. Contact for data protection

The appointment of a statutory data protection officer is not mandatory in our case. The contact for data protection matters is Ahmet Burak Yıldırım; you can reach him at info@digishifter.com.

3. Legal bases for processing

We process personal data only where a legal basis exists. In particular, these may be: your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (lit. b), compliance with legal obligations (lit. c), and the protection of our legitimate interests (lit. f), provided your interests do not override them.

4. Hosting and server log files

This website is operated by an external hosting provider (Turhost, Türkiye). When the pages are accessed, information transmitted by your browser is automatically stored in server log files:

  • IP address of the requesting device
  • date and time of access
  • name and URL of the file accessed and the previously visited page (referrer)
  • browser used, operating system and, where applicable, your internet access provider

This processing serves to ensure stable and secure operation, to defend against attacks and for error analysis, based on our legitimate interest (Art. 6(1)(f) GDPR). Log files are stored for as long as necessary to achieve this purpose and then deleted. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar. When encryption is active, the data you transmit to us cannot be read by third parties.

6. Contact (contact form and email)

If you contact us via the contact form or by email, we process the data you provide (e.g. name, company, email address, interest, message) solely to handle your request and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding). The data is deleted once it is no longer required and no statutory retention obligations apply.

7. Cookies, consent and local storage

This website does not use tracking or marketing cookies and performs no web analytics. Only technically necessary storage mechanisms are used:

  • Consent storage: your choice in the cookie banner is saved in your browser's local storage (localStorage, key ds-consent) so that we can honour your decision on subsequent visits.
  • Scroll position: when you switch language, the current scroll position is briefly stored in session storage (sessionStorage).
  • Language preference: if you switch language manually, your choice is stored in local storage (localStorage, key ds-lang) so that we can greet you in your preferred language in future.

When you first open the homepage, a matching language version may be selected automatically based on your browser language settings and time zone. This evaluation happens entirely in your browser; no data is transmitted to third parties.

This necessary storage is based on Section 25(2) TDDDG and our legitimate interest in a functioning website (Art. 6(1)(f) GDPR). Via the cookie banner or the "Cookie settings" link in the footer you can allow consent-based content (external media) or withdraw your consent at any time with effect for the future.

8. Embedded YouTube videos

On individual pages we embed videos in enhanced privacy mode (youtube-nocookie.com). The provider is Google Ireland Limited. These videos are blocked by default via a content blocker and are loaded only after you have consented to the "External media" category through our cookie banner. Once a video is loaded, a connection to YouTube/Google servers is established and data (including your IP address) may be transferred to Google. The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG), which you can withdraw at any time via "Cookie settings" in the footer. For more information, see Google's privacy policy.

9. Social media

In the footer we link to our profiles on LinkedIn, Instagram and YouTube. These are simple links, not embedded social media plugins. Data is only transmitted to the respective providers when you actively click one of these links and open the platform. The respective provider is responsible for the processing that takes place there.

10. Recipients and processing on our behalf

Your data is only disclosed to third parties to the extent necessary, e.g. to our hosting and email provider for operating the website and for communication. Where service providers process personal data on our behalf, this is done on the basis of data processing agreements pursuant to Art. 28 GDPR. We do not sell your data.

11. Transfer to a third country

The controller is based in Türkiye. From the EU's perspective, Türkiye is a third country for which no adequacy decision of the European Commission exists; your data is therefore processed in Türkiye. We have not currently concluded standard contractual clauses under Art. 46 GDPR. Processing in Türkiye is therefore based on the derogations of Art. 49 GDPR — in particular the necessity for the performance or initiation of a contract with you (Art. 49(1)(b)) and, insofar as you activate external media (e.g. YouTube), your explicit consent (Art. 49(1)(a)). We reserve the right to conclude standard contractual clauses as an additional safeguard.

12. Storage period

We process and store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. When the purpose ceases to apply or a period expires, the data is routinely deleted or blocked.

13. Your rights as a data subject

Under the GDPR you have the following rights:

  • access to the data processed (Art. 15)
  • rectification of inaccurate data (Art. 16)
  • erasure (Art. 17) and restriction of processing (Art. 18)
  • data portability (Art. 20)
  • objection to processing (Art. 21)
  • withdrawal of a given consent with effect for the future (Art. 7(3))

To exercise your rights, simply send a message to info@digishifter.com.

14. Right to object

Insofar as we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation (Art. 21 GDPR).

15. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority — in the EU, in particular with the authority of your habitual residence or place of work (Art. 77 GDPR), as well as with the Turkish data protection authority (KVKK, kvkk.gov.tr).

16. Obligation to provide data

Providing your data is not required by law. However, to process a request we need the information marked as required in the contact form; without it we cannot handle your request.

17. No automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

18. Validity and changes to this privacy policy

This privacy policy is currently valid. As our website develops or due to changed legal or regulatory requirements, it may become necessary to amend it. The current version can be accessed on this page at any time.

Note: This privacy policy is prepared in line with the GDPR and KVKK. A final legal review is recommended.