2. Scope

This policy explains how personal data are handled when you visit velo-ops.com, submit a contact or scope form, schedule a meeting, request or purchase a service, make a payment or work with Velo Ops on a project.

3. Categories of personal data

Identity data: name, surname, authorised representative and, where required, identity details appearing on an invoice.

Contact data: email address, phone number, company and business address.

Customer and transaction data: purchased service, order number, agreements, proposals, delivery and support records.

Financial and billing data: invoice details, tax number, payment status and transaction reference. Velo Ops does not store full card details; payment is processed by iyzico and the relevant financial institutions.

Professional data: company, role, team structure, systems in use and requested service scope.

Project data: process descriptions, supplied documents, access logs and information needed for integrations or configuration.

Communication records: emails, form responses, meeting notes and support requests.

Technical data: IP address, device and browser data, session and security logs, cookie and similar technology data.

Marketing preferences: communication preferences and campaign interactions where valid consent or another lawful basis applies.

4. Purposes of processing

Responding to enquiries, arranging meetings and preparing proposals.

Forming and performing contracts, confirming payment and providing purchased services.

Delivering CRM, automation, integration, reporting, documentation and training work.

Providing client support, project communication, quality control and dispute management.

Meeting invoicing, accounting, tax and other legal obligations.

Protecting the website, accounts and information systems.

Measuring service and website performance and, where legally permitted, sending marketing communications.

Establishing, exercising or defending legal rights.

5. Legal bases

Personal data may be processed because processing is necessary to form or perform a contract, comply with a legal obligation, establish or protect a right, pursue a legitimate interest without harming fundamental rights and freedoms or, where required, based on explicit consent. Privacy notice and explicit consent are separate processes; you are not required to consent merely to receive this notice.

6. Recipients

Where necessary and proportionate, personal data may be shared with iyzico, banks, accounting and legal advisers, tax and other competent authorities, hosting and email providers, providers of CRM, forms, scheduling, files, analytics, communication and automation tools, and authorised project partners needed to deliver the service.

7. International transfers

Some cloud, CRM, analytics, communication or automation providers may host data outside Türkiye. International transfers are made in accordance with Article 9 of the KVKK and applicable secondary legislation, relying on an adequacy decision, appropriate safeguards, standard contracts or another transfer mechanism permitted by law, as applicable.

8. Retention

Personal data are retained for as long as required for the relevant purpose and for the periods required under applicable tax, commercial, consumer, contract and other laws. At the end of the applicable period, data are deleted, destroyed or anonymised unless continued retention is required for a legal obligation or dispute.

9. Security

Velo Ops uses appropriate technical and organisational safeguards such as access restrictions, strong authentication, current software, secure transmission, logging and backups to help prevent unauthorised access, loss, alteration or disclosure. No internet transmission method can be guaranteed to be completely secure.

10. Cookies

The website may use essential cookies and, where the visitor provides the required preference, analytics and marketing cookies. Non-essential cookies are not activated before the required choice is obtained under applicable law. Visitors can change or withdraw their preferences through the cookie panel.

11. Your rights

Under Article 11 of the KVKK, you may ask whether your personal data are processed, request information about processing, learn the purpose and whether data are used consistently with that purpose, learn the recipients, request correction of incomplete or inaccurate data, request deletion or destruction where the legal conditions are met, request notification of correction or deletion to recipients, object to an outcome based solely on automated analysis and request compensation for damage caused by unlawful processing.

12. Requests

You may submit a rights request to emel@velo-ops.com or the KEP/registered address above, including sufficient information to verify your identity and explain the request. Requests will be answered within the period required by applicable law.