DATA PROTECTION

Privacy notice

Last updated 2 September 2026

The Turkish counterpart of this notice is the KVKK aydınlatma metni.

This notice covers serinet.com.tr, lima.serinet.com.tr and saga.serinet.com.tr. It sets out what personal data those three websites collect, what happens to it, how long it is kept and what you can require of Serinet. One notice governs all three sites, because Serinet is the controller for each of them and three copies of the same document drift apart.

What Serinet collects

Serinet collects personal data in one place: the contact form at the foot of each of the three websites. The form asks for five things.

• Your name.
• Your organization.
• Your work email address.
• An approximate scale. The Lima form asks for the number of displays, the Saga form for the size of your workforce, and the Serinet form for the area of interest.
• The message you write.

The consent checkbox under the form is required. The form does not submit without it.

What is recorded alongside your message

The email that reaches Serinet carries four further items that you did not type. Most privacy notices leave this out, so it is stated here plainly.

• The IP address the submission came from.
• The address of the page that referred you to the form.
• The user agent string your browser sent, which names the browser and the operating system.
• The date and time of the submission, in UTC.

Serinet records these to tell a real inquiry from an automated one, and to answer a later question about a particular submission. They travel no further than the mailbox the message is delivered to.

How Serinet collects it

You type it into the form and press the button. There is no other route. Serinet runs no import, buys no list and takes nothing from any other source. The form works with JavaScript turned off and the result is the same either way.

How Serinet uses it

Serinet reads your message, answers it and carries the conversation forward from there. That is the whole of the use. Your details serve no other purpose and reach nobody outside the company.

Anti-spam handling

The server limits how often one address submits the form. It counts submissions over a one hour window and keeps that count in a temporary file. The file is named after a SHA-1 hash of the IP address and holds nothing but the times of recent submissions. The address itself is never written into it, the file identifies nobody and it carries no other data.

If delivery fails

When the mail server is unavailable at the moment you submit, the website writes your inquiry to a log file on the server rather than lose it, and records the failure in the server error log. Serinet delivers the message by hand. The website removes any entry older than thirty days from that file automatically, each time it writes to it, so a copy of your message does not sit there once the outage has passed. The web server refuses to serve log files, so the file is not reachable from the internet.

Legal basis

The form carries an explicit consent checkbox, so the basis is your consent under Article 6(1)(a) of the General Data Protection Regulation. Where the exchange moves toward a contract, Article 6(1)(b) covers the steps taken at your request before that contract is entered into.

You withdraw your consent at any time by writing to bilgi@serinet.com.tr. Withdrawing is as simple as giving consent was, and it costs nothing. It does not affect what Serinet did with your data before you withdrew.

Who receives it

Your message is delivered to the company mailbox at bilgi@serinet.com.tr and read by the people at Serinet who answer inquiries. The hosting provider that runs the websites and the mail server processes the data on Serinet's instructions, as an infrastructure provider under contract. Nobody else receives it. Serinet sells no personal data, rents none and shares none.

Transfers outside Turkey

These websites and the mailbox that receives your inquiry run on a shared server in Amsterdam, in the Netherlands. Your message, and the technical details recorded with it, are therefore stored and processed outside Turkey.

The Netherlands is a member state of the European Union, and the hosting provider is subject to the General Data Protection Regulation. Under Turkish data protection law the transfer rests on the explicit consent you give when you tick the box on the contact form. That is why this notice states where the data goes before you send anything. If you withdraw your consent, the data is deleted.

No personal data goes to any other country, and no recipient other than the hosting provider is involved.

No page on any of the three sites requests anything from any other host: no script, no stylesheet, no image, no font, no tracker. The typefaces are served from Serinet's own servers, so opening a page discloses your IP address to nobody but the hosting provider named above.

How it is stored and for how long

Your message sits in the company mailbox on the mail server. Where delivery failed, a copy also sits in the failure log described above, and that copy is removed after thirty days. Serinet keeps the message in the mailbox for twelve months from the last contact between you and the company, and deletes it at the end of that period, where no business relationship follows.

Where the exchange leads to a contract, the statutory record keeping periods that govern commercial and tax records apply to the records of that relationship instead, and those periods run longer than twelve months.

Marketing

There is none. Serinet runs no newsletter, sends no marketing email and adds no address to a mailing list. The address you give is used to answer you.

Cookies and tracking

The three websites set no cookies. Not one, of any kind, first party or third party. They write nothing to local storage and nothing to session storage.

There is no analytics, no tracking pixel, no advertising, no social media widget and no fingerprinting. Serinet builds no profile of you, and no decision about you is taken by automated means.

Your rights

The General Data Protection Regulation gives you the following rights over your personal data.

• Access. Ask whether Serinet holds data about you, and receive a copy of it.
• Rectification. Have data that is wrong or incomplete corrected.
• Erasure. Have your data deleted.
• Restriction. Have the processing paused while a dispute about the data is settled.
• Portability. Receive your data in a structured, commonly used, machine readable format, or have it sent straight to another controller.
• Objection. Object to the processing of your data.
• Withdrawal of consent. Withdraw the consent you gave, at any time.
• Complaint. Lodge a complaint with the data protection supervisory authority of the country where you live, where you work, or where the matter arose.

Write to bilgi@serinet.com.tr to exercise any of these. Serinet answers within one month of receiving the request, and there is no charge.

Changes to this notice

Serinet revises this notice whenever the way these websites handle data changes. The date at the head of the page records the last revision, and the text on this page is the version in force.

How to get in touch

Write to bilgi@serinet.com.tr with any question about this notice, about the data Serinet holds about you, or about exercising a right listed above. The postal address is at the head of this page.