01Data controller
Your personal data is processed by Callidus ("Callidus", "we") as the data controller.
- Email: contact@callidus.digital
For any question or request about this notice, you can reach us through the contact form on this site or email to contact@callidus.digital.
02What data we process
This site has no accounts, payments or online sales. We only process the following:
- Contact form data: your name, email address, optionally a subject and the topics you select, your message, language preference, time of submission and a record of the consent you gave.
- Security data: to protect the form from abuse, your IP address is held briefly in server memory only; it is not stored permanently.
- Server logs: technical records our hosting provider keeps to operate and secure the site (IP address, browser details, request time and path).
- Cookie-free usage statistics: pages visited, referring site, country and device or browser type. These are viewed in aggregate, are not used to identify you, and no cookie is set.
Please don't share special category data (health, religion, political opinion, biometrics and similar) or other people's personal data through the form. We don't need it and will delete it if received.
03Purposes and legal bases
| Purpose | Legal basis (KVKK / GDPR) |
|---|---|
| Replying to your request and running the conversation and proposal process | Steps prior to entering a contract; legitimate interest (KVKK 5/2-c, 5/2-f; GDPR 6(1)(b), 6(1)(f)) |
| Securing the form and site, preventing spam and automated submissions | Legitimate interest (KVKK 5/2-f; GDPR 6(1)(f)) |
| Operating the site and improving it with cookie-free statistics | Legitimate interest (KVKK 5/2-f; GDPR 6(1)(f)) |
| Complying with legal obligations and requests from authorities | Legal obligation (KVKK 5/2-ç; GDPR 6(1)(c)) |
| Establishing, exercising or defending legal claims | KVKK 5/2-e; GDPR 6(1)(f) |
| Transmitting form data through service providers abroad | Explicit consent (KVKK Art. 9; GDPR 49(1)(a)) |
04How we collect data
Data is collected electronically in two ways: directly, through the contact form you fill in, and automatically when you visit the site (server logs and cookie-free statistics).
06How long we keep data
- Contact form messages: up to 2 years after your request is concluded. If a business relationship begins, related records are kept for the periods required by law (for example 10 years for commercial books and records under the Turkish Commercial Code).
- IP address for abuse prevention: 10 minutes, in server memory only.
- Server logs: a limited period under our hosting provider's security and operations policy.
Data whose retention period has ended is deleted, destroyed or anonymised.
07How we protect your data
- All traffic between your browser and the site is encrypted (HTTPS, HSTS).
- We only ask for the data needed to reply to you and add no unnecessary fields.
- The form is protected against automated submissions by an invisible trap field and a rate limit.
- Only team members handling your request have access to it.
08Your rights
Under KVKK Article 11 you have the right to learn whether your data is processed and request information about it; learn the purpose of processing and whether it's used accordingly; know the third parties it's transferred to in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction under Article 7; ask that corrections and deletions be notified to recipients; object to outcomes against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.
If you are in the European Union or the European Economic Area, you also have the rights of access, rectification, erasure, restriction, objection and data portability under the GDPR, and you may lodge a complaint with the data protection authority in your country of residence.
You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
09How to make a request
You can send requests through the contact form on this site or email to contact@callidus.digital. Please include your name, contact details and a clear description of your request; we may ask for additional information to verify your identity.
We respond as soon as possible and within 30 days at the latest, free of charge; if the request involves an additional cost, the fee set by the Turkish Personal Data Protection Board may apply. If your request is rejected, the answer is insufficient or not given in time, you may complain to the Personal Data Protection Board.
10Children's privacy
This site is not directed at anyone under 18, and we do not knowingly collect their personal data. If we learn that we have, we delete it.
11Changes to this notice
We may update this notice as the site or the law changes. The current version is always published on this page, with the last update date shown at the top.