About this notice
This is our information notice under article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) for geekycodelab.com (the public site) and the Geeky Code Lab Hub (the signed-in area for our team and clients). It is the short version. Our Privacy policy explains each point in full, also for people in the European Union.
Data controller
| Item | Details |
|---|---|
| Name | Kaveh Movahedi, sole proprietorship (şahıs işletmesi), trading as Geeky Code Lab |
| Address | Akpınar Mah. Arızlı TOKİ Konutları Sk. Arızlı TOKİ Konutları 4. Ada A6 Blok No: 19 İç Kapı No: 6, İzmit / Kocaeli, Türkiye |
| Tax office and number | Tepecik Tax Office, tax ID number 6231650161 |
Why we process your data, on what legal reason and for how long
| What | Purpose | KVKK legal reason (art. 5) | How long |
|---|---|---|---|
| Visiting the site | Serving pages, keeping the site secure, finding faults | Legitimate interest (5/2-f) | Up to 30 days in logs |
| Your cookie choice | Remembering your choice; proving what you agreed to | Legal obligation (5/2-ç); establishing, using or protecting a right (5/2-e) | Cookie: 12 months. Record: 3 years |
| Analytics (only with your consent) | Seeing which pages work and what to improve | Explicit consent (5/1) | Cookies up to 2 years; Google keeps reports for 2 months |
| Contact form | Answering your enquiry and preparing a proposal | Establishing a contract (5/2-c); legitimate interest (5/2-f) | 2 years from arrival (privacy requests: 3 years) |
| Answering your enquiry | Establishing a contract (5/2-c); legitimate interest (5/2-f) | Until we delete the conversation | |
| Site chat assistant | Answering your questions about our services | Legitimate interest (5/2-f); establishing a contract (5/2-c) | 30 days on our server |
| Hub account | Giving you access to the Hub and keeping it secure | Performing a contract (5/2-c); legitimate interest (5/2-f) | While the account exists; anonymised 12 months after deactivation, after 30 days' notice |
| Invitations | Giving you access to the Hub | Legitimate interest (5/2-f) | While your account exists; revoked or unused invitations deleted after 90 days |
| Hub security log | Security, investigating misuse, proving what happened | Legitimate interest (5/2-f); establishing, using or protecting a right (5/2-e) | Up to 30 days |
| Project work in the Hub | Running the projects we do together | Performing a contract (5/2-c); legitimate interest (5/2-f) | As set in the client's contract; deleted items and articles 30 days in Trash, their files 30 more days in storage history |
| Hub AI chat | Answering your questions from the Hub's information | Performing a contract (5/2-c); legitimate interest (5/2-f) | 12 months after the chat's last message, or until you delete it |
| Invoices | Recording what we billed and what was paid | Legal obligation (5/2-ç); performing a contract (5/2-c) | 10 years from the issue date |
| Backups | Recovering from faults and mistakes | Legitimate interest (5/2-f) | Database copies 30 days, plus up to 30 more in version history; file copies 30 days |
After these periods we delete, destroy or anonymise the data.
Who receives your data and why
We don't sell personal data. We share it only to run the site and the Hub, or when the law requires it:
- Amazon Web Services (servers in Frankfurt, Germany; Amazon CloudFront close to you; Amazon Simple Email Service in the USA): hosting, delivering pages and sending emails.
- Google (EU and USA): Google sign-in, our email (Google Workspace) and, with your consent, Google Analytics 4.
- Meta (EU and USA): WhatsApp, if you write to us there.
- Anthropic PBC (USA): answers in the AI chat on the site and in the Hub.
- Voyage AI (USA): finding the passages the AI answers use.
- Other Hub users: your name, photo and work in shared projects.
- Public authorities and courts: only when the law requires it.
Transfers abroad
Our servers are in Germany, and some of the providers above are in the USA or work worldwide, so your data is transferred outside Türkiye (KVKK art. 9) to Amazon Web Services, Google, Meta, Anthropic PBC and Voyage AI, in the countries named above. We rely on your explicit consent for none of these transfers.
How we collect your data
We collect data electronically, through the site, the Hub, email and WhatsApp:
- automatically, from your browser and device when you use the site or the Hub;
- from you, when you fill in a form, write to us, use a chat assistant, accept an invitation or work in the Hub;
- from others: the person who invites you to the Hub, Google when you sign in with Google, and other Hub users who mention you or write about you in a project.
Your rights
Under article 11 of the KVKK you can ask us:
- to learn whether your personal data is processed and, if so, to request information about it;
- to learn the purpose of the processing and whether it is used for that purpose;
- to know the third parties in Türkiye or abroad it is transferred to;
- to have it corrected if it is incomplete or wrong, and to have that passed on to those third parties;
- to have it deleted or destroyed when the reasons for processing it no longer apply (article 7), and to have that passed on to those third parties;
- to object to a result against you that comes only from analysing your data with automated systems;
- to claim compensation if you suffer loss because of unlawful processing.
How to apply
- Online: through our contact form, choosing Privacy request (your personal data) under "What do you need?".
- By post: a signed letter to the address under "Data controller", with your name, signature, Turkish ID number (for foreigners: nationality and passport or ID number), address and request.
We answer free of charge within 30 days at the latest; if the request needs extra cost, the fee set by the Personal Data Protection Board may apply. If you are not satisfied with our answer, or we don't answer within 30 days, you can complain to the Personal Data Protection Board (www.kvkk.gov.tr).
For the full details, see our Privacy policy.
