Privacy notice

Who we are

This website is operated by Digital Cosmonot Bilişim Danışmanlık Eğitim Ltd. Şti. (“Digital Cosmonot”, “we”), registered at Dijitalpark Teknokent Ataşehir Yerleşkesi, Barbaros Mah. Şebboy Sok. No: 4/1, İç Kapı No: 1, 34758 Ataşehir, Istanbul, Türkiye. We are the data controller (veri sorumlusu) under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the controller under the EU General Data Protection Regulation (“GDPR”) for the data described here.

This notice covers digitalcosmonot.com, its forms and your correspondence with us. It does not cover the G8 product: G8 runs in each customer’s own infrastructure, and the data it handles stays under the customer’s control. We do not receive it.

Data we process and why

Website visits

Our hosting provider processes the technical data needed to deliver the pages you request: your IP address, the address requested, the time, your browser type and the referring page. We use it to run and secure the website.

Legal basis: our legitimate interest in a secure website (KVKK art. 5(2)(f); GDPR art. 6(1)(f))
Kept for: up to 30 days in the hosting provider's logs

Visit statistics

We count visits with a cookieless analytics service that stores nothing in your browser and does not follow you across websites. It counts page views, referrers, countries and device types.

Legal basis: legitimate interest in understanding how the website is used (KVKK art. 5(2)(f); GDPR art. 6(1)(f))
Kept for: aggregated statistics only

Contact form and email

When you write to us we process your name, email address, organisation, your phone number if you give it, and your message, to answer you. We send a short email confirming that your message reached us.

Legal basis: steps taken at your request before a contract (KVKK art. 5(2)(c); GDPR art. 6(1)(b)) and legitimate interest in answering correspondence (KVKK art. 5(2)(f); GDPR art. 6(1)(f))
Kept for: 24 months after our last exchange, or longer when a contract follows

Job applications

When you apply for a role we process your CV and the details you send with it: contact information, education, experience and anything else you choose to include. We use them only to assess your application and to contact you about it.

Legal basis: steps taken at your request before an employment contract (KVKK art. 5(2)(c); GDPR art. 6(1)(b)); your explicit consent if you ask us to keep your application for future roles (KVKK art. 5(1); GDPR art. 6(1)(a))
Kept for: 12 months after the role is filled, or until you withdraw consent

News and event invitations

If you tick the separate box we may send you news and invitations to our events by email. Every email has a link to stop them.

Legal basis: your explicit consent (KVKK art. 5(1); GDPR art. 6(1)(a); Law No. 6563, with registration in İYS where required)
Kept for: until you withdraw consent

Spam protection

When you send a form, Cloudflare Turnstile checks that a person, not a program, is sending it. For this check Cloudflare processes your IP address and technical details of your browser; it does not use them for advertising.

Legal basis: legitimate interest in keeping the forms free of automated abuse (KVKK art. 5(2)(f); GDPR art. 6(1)(f))
Kept for: only for the duration of the check

We do not ask for special categories of personal data, such as health or religious belief, and ask you not to send any, including in a CV.

Who receives it

Only processors who act on our instructions under a data processing agreement:

Cloudflare, Inc.
Hosts and delivers the website, provides the cookieless visit statistics and runs the Turnstile check on forms.
Resend
Delivers form messages and confirmation emails.
Microsoft 365
Our business email, where correspondence and applications are kept.

We do not sell personal data and do not share it with advertisers.

International transfers

Some of these processors handle data outside Türkiye and the European Economic Area, including in the United States. Under KVKK these transfers rely on the safeguards of art. 9: an adequacy decision, standard contractual clauses notified to the Personal Data Protection Authority, or your explicit consent where no other safeguard applies. Under the GDPR they rely on an adequacy decision or the European Commission’s Standard Contractual Clauses.

KVKK information notice

Under KVKK art. 10, in summary:

Data controller: Digital Cosmonot Bilişim Danışmanlık Eğitim Ltd. Şti.
Purposes: Running the website, answering requests, assessing job applications and, with consent, sending news and invitations
Method of collection: Electronically, through the website forms, email and the hosting provider's logs
Recipients: The processors listed above, and public authorities when the law requires it
Transfers abroad: To processors outside Türkiye, under KVKK art. 9
Your rights: KVKK art. 11, described below

This notice is also available in Turkish: Gizlilik ve kişisel verilerin korunması.

Your rights and how to apply

Under KVKK art. 11 you may learn whether your data is processed and request information about it; learn the purpose and whether it is used for that purpose; know the third parties it is transferred to, in Türkiye or abroad; ask for it to be corrected or deleted and for those third parties to be told; object to a result produced solely by automated analysis; and claim compensation for damage caused by unlawful processing.

Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time without affecting earlier processing.

To apply

in writing, signed, to our registered address above;
by email to hello@g8.dev from the address you have given us before.

We answer within 30 days under KVKK and within one month under the GDPR. You may also complain to the Personal Data Protection Authority (kvkk.gov.tr) or to the supervisory authority of your EU member state.

Cookies

digitalcosmonot.com uses no advertising or tracking cookies, and none to measure visits. That is why there is no cookie banner: there is nothing to consent to.

Preferences. Your language choice may be kept in your browser’s local storage. It never leaves your browser.
Security. Cloudflare may set a short-lived cookie such as __cf_bm to tell people from automated traffic. It is strictly necessary and expires within 30 minutes. The Turnstile check on forms runs in a frame from challenges.cloudflare.com and sets no cookie on this website.

Neither needs consent under KVKK, the Turkish Electronic Communications Law or the EU ePrivacy rules, because they are strictly necessary or involve no personal data. If we ever add a cookie that does, we will ask first.

Changes

We update this notice when our processing changes and show the date of the last update at the top. This website is meant for professionals and is not directed at children under 16.