Legal
Privacy Notice
Last updated: August 22, 2026
This notice explains how CND STUDIO YAZILIM TEKNOLOJİLERİ LTD. ŞTİ., trading as Nasirus ("we"), processes personal data on nasirus.com. We are based in Türkiye and are subject to Türkiye's Personal Data Protection Law (KVKK, Law No. 6698). Where the EU/UK General Data Protection Regulation ("GDPR") applies to you, this notice is written to meet its transparency requirements (Art. 13) as well.
1. Controller
CND STUDIO YAZILIM TEKNOLOJİLERİ LTD. ŞTİ. (brand: Nasirus)
Musalla Bağları, Gürsesler Sk. No:1/47, Esmira Office Center, 42060 Selçuklu / Konya, Türkiye
Email: info@nasirus.com
2. What we process, why, and on what legal basis
| Context | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, institution, email, phone (optional), message content, IP address | Receiving and answering your enquiry; arranging a demo | Steps prior to entering into a contract, at your request (GDPR Art. 6(1)(b)); IP logging: legitimate interest in preventing abuse (Art. 6(1)(f)) |
| Bot protection (Cloudflare Turnstile) | IP address, User-Agent and TLS/device signals (per Cloudflare, processed solely for bot detection; no cookies are used to collect information) | Protecting the form against automated abuse | Legitimate interest in service security (Art. 6(1)(f)) |
| Server logs | IP address, request time and requested page | Security and service continuity | Legitimate interest (Art. 6(1)(f)) |
| Analytics (Google Analytics) | Cookie identifiers, page-view and usage data | Aggregate measurement and improvement of the site | Consent (Art. 6(1)(a)) — loaded only if you enable "Analytics" in the cookie banner; you can withdraw at any time |
For details on cookies and similar technologies, see the Cookie Policy. We do not sell personal data and do not use it for third-party advertising.
3. Recipients and international transfers
- Email delivery provider: contact-form content reaches us via our email infrastructure.
- Cloudflare (bot protection) and Google (analytics, only with your consent) act as service providers whose servers may be located outside your country, including outside the EU/EEA.
- Authorities: where disclosure is required by applicable law.
As we are established in Türkiye, data you submit is processed in Türkiye. If you access the site from the EU/EEA, please note that Türkiye is not covered by an EU adequacy decision; for the contact form, the transfer is necessary for pre-contractual steps taken at your request (GDPR Art. 49(1)(b)). Google LLC and Cloudflare, Inc. are certified under the EU-US Data Privacy Framework for transfers to the United States; analytics additionally runs only with your consent.
4. Retention
We keep personal data only as long as needed for the purposes above: contact-form records for up to 2 years after your enquiry is closed, server logs for up to 1 year. Data is then deleted, destroyed or anonymised, subject to statutory limitation periods in the event of a dispute.
5. Your rights
Subject to the law that applies to you (GDPR Arts. 15-21; KVKK Art. 11), you have the right to:
- access the personal data we hold about you and obtain a copy;
- have inaccurate data rectified and, in the cases provided by law, have data erased;
- restrict or object to processing based on legitimate interests;
- receive data you provided in a portable format, where processing is based on consent or contract;
- withdraw consent at any time (for analytics: use "Reset cookie preferences" on the Cookie Policy page), without affecting prior processing;
- lodge a complaint with a supervisory authority — in Türkiye the Personal Data Protection Authority (kvkk.gov.tr); if the GDPR applies to you, also the supervisory authority of your habitual residence.
We do not use automated decision-making producing legal or similarly significant effects.
Providing personal data on this site is neither a statutory nor a contractual requirement; however, without the contact details requested in the form we cannot answer your enquiry.
6. Contact
To exercise your rights or ask questions, write to info@nasirus.com or to the postal address above with information sufficient to verify your identity. We respond without undue delay and at the latest within 30 days.