Legal
Privacy Policy
What information Clevel collects from clevel.group visitors, how it is used and protected; third parties, transfers abroad, your rights under the KVKK and GDPR, and contact details.
Last updated
Contents
- 1. Our General Approach
- 2. Information We Collect
- 2.1 Information You Provide to Us
- 2.2 Information Collected Automatically
- 2.3 Cookies
- 3. How We Use Information
- 4. Security Measures
- 4.1 Technical Measures
- 4.2 Organisational Measures
- 4.3 Data Breaches
- 5. Third Parties
- 5.1 Group Companies
- 5.2 Service Providers
- 5.3 Analytics and Marketing Tools
- 5.4 Legal Requirements
- 6. Transfers Abroad
- 7. Retention Periods
- 8. Your Rights
- 8.1 Your Rights under the KVKK
- 8.2 Your Rights under the GDPR
- 9. Children's Privacy
- 10. External Links
- 11. Changes
- 12. Contact
This Privacy Policy explains in plain language what information we collect when you visit the clevel.group website (the "Site") operated by Clevel Yapay Zeka ve Teknoloji A.Ş. ("Clevel" or the "Company"), how we use it and how we protect it. For the legal details of the processing of your personal data, please see the Privacy Notice (KVKK).
1. Our General Approach
We process your personal data in compliance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, to the extent applicable, the European Union General Data Protection Regulation ("GDPR"). The core principles of this approach are:
- Data minimisation: We collect only the information necessary to respond to your request and to provide the Site securely.
- Transparency: We clearly state what information we process and why.
- Purpose limitation: We use your information only for the purposes we have communicated.
- Privacy by default: Analytics and marketing tools do not run unless you give your consent.
2. Information We Collect
2.1 Information You Provide to Us
When you use the forms on the Site, you provide us with the following information:
- Contact form: Full name, organisation, email address, telephone number, sector, relevant group company, subject and message.
- Demo request form: Name, email address, telephone number, company, fleet size, country and message.
Please do not share special categories of personal data, such as health or religion, or information belonging to third parties in your messages.
2.2 Information Collected Automatically
When you visit the Site, server and access logs are kept for security and operational purposes. These logs contain browser and device information (user-agent), access time and the requested page. Your IP address is not stored in plain form; it is converted into a salted hash and recorded in that form.
2.3 Cookies
Apart from cookies that are strictly necessary for the Site to function, no cookies are used without your consent. Detailed information about your cookie preferences and your consent record can be found in the Cookie Policy.
3. How We Use Information
- To evaluate your contact and demo requests and respond to you,
- To forward your request to the relevant group company if you consent,
- To send you information about our products, services and events if you give a separate consent,
- To ensure the security of the Site, prevent misuse and resolve technical issues,
- To measure Site usage and evaluate advertising performance if you consent,
- To fulfil our legal obligations and protect our rights.
We do not sell or rent your personal data. We do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.
4. Security Measures
Pursuant to Article 12 of the KVKK, we take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss and unlawful processing.
4.1 Technical Measures
- Communication between the Site and your browser takes place over an encrypted connection (HTTPS/TLS),
- IP addresses are stored as salted hashes rather than in plain form,
- Access to systems is restricted through authorisation and role-based access control,
- Software and infrastructure components are kept up to date and security vulnerabilities are monitored,
- System access is logged and unusual activity is monitored,
- Regular backups and protection against automated abuse attempts.
4.2 Organisational Measures
- Only employees who need access to personal data for their duties can access it,
- Employees are bound by confidentiality obligations and are informed about data protection,
- Contracts containing confidentiality and data security obligations are concluded with service providers,
- Retention periods are defined, and data whose retention period has expired is deleted, destroyed or anonymised.
4.3 Data Breaches
If we become aware that your personal data has been obtained by unauthorised persons, we will notify the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu, the Turkish data protection authority) and, where necessary, you within the periods prescribed by legislation. As no system is completely secure, we kindly ask you to report any potential security issue to hello@clevel.group.
5. Third Parties
5.1 Group Companies
The Clevel Technology Group includes group companies providing services in different fields. If your request relates to a product or service of a group company, your information is forwarded to the relevant group company only with your explicit consent and solely for the purpose of responding to your request.
5.2 Service Providers
To provide the Site, we work with suppliers from whom we obtain hosting, email and information technology services. The Site runs on servers hosted in Türkiye, while media files are served through a cloud storage and content delivery service located abroad (DigitalOcean Spaces). Our service providers process your data only in accordance with our instructions.
5.3 Analytics and Marketing Tools
The following tools on the Site run only if you consent to the relevant category in the cookie consent panel:
- Google Tag Manager and Google Analytics 4 (Google): Measuring Site usage,
- Plausible Analytics: Aggregate visit statistics without the use of cookies,
- Google advertising measurement (Google) and Meta Pixel (Meta): Measuring advertising conversions and targeting.
Google tools are configured according to the consent you give through Google Consent Mode v2. How these providers process data is subject to their own privacy policies.
5.4 Legal Requirements
Where required by legislation, we may share your information with competent public authorities and institutions and with judicial authorities.
6. Transfers Abroad
Some data may be transferred abroad due to the serving of media files and the use of analytics and marketing tools that depend on your consent. These transfers are carried out within the framework of the conditions and safeguards set out in Article 9 of the KVKK and, to the extent applicable, in the GDPR. For details, please see the Privacy Notice (KVKK).
7. Retention Periods
We retain your information only for as long as necessary: contact and demo requests are retained for 2 years from the conclusion of the request, server and access logs for 2 years, and cookie consent records for 3 years. Your marketing permission remains valid until it is withdrawn. All retention periods are set out in the Privacy Notice (KVKK).
8. Your Rights
8.1 Your Rights under the KVKK
Your rights listed in Article 11 of the KVKK and how you can exercise them are explained in detail in the Privacy Notice (KVKK).
8.2 Your Rights under the GDPR
If you are located in the European Union or the European Economic Area and the GDPR applies, your data is processed under Article 6(1) GDPR on the basis of your consent (a), steps prior to entering into a contract (b) or our legitimate interests (f). In that case, you have the following rights:
- To access your data and request a copy of it,
- To request the rectification of inaccurate data,
- To request the erasure of your data,
- To request the restriction of processing,
- To request the portability of your data,
- To object to processing based on legitimate interests and to direct marketing,
- To withdraw your consent at any time,
- To lodge a complaint with the data protection supervisory authority in the country where you live or work or where the infringement took place.
9. Children's Privacy
The Site is intended for corporate users and is not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with information, please notify us at hello@clevel.group and we will delete that information.
10. External Links
The Site may contain links to the websites of group companies, social media accounts and other third-party websites. We are not responsible for the privacy practices of these websites; we recommend that you review the privacy policy of each website you visit.
11. Changes
We may update this Privacy Policy in line with changes in legislation or in our services. The current version is always published on this page. Significant changes may also be announced separately on the Site.
12. Contact
You can contact us with any questions about privacy and personal data:
- Data controller: Clevel Yapay Zeka ve Teknoloji A.Ş.
- Address: İçerenköy Mah., Umut Sk. No:10 Kat: 16, Ataşehir/İstanbul
- Email: hello@clevel.group
