Last updated: 3 November 2026
Privacy and cookies
This notice explains how we process personal data when you visit parema.co and when you contact us by email. It is prepared under Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Obligation to Inform. If you are in the European Economic Area or the United Kingdom, section 9 sets out your rights under the GDPR and UK GDPR.
1. Who we are
The data controller is Parema.
Email: iletisim@parema.co
Parema is in the process of incorporating as a company in Türkiye. Once that is complete, its registered name, address and MERSİS number will be published here.
2. What we collect
- Identity: your name.
- Contact: your email address.
- Professional: your company or project name, if you share it.
- Your enquiry: the service you’re interested in, when you’d like to start, your message and our later correspondence.
- Technical and security data: IP address, browser and device information, and the time of your visit or submission.
Please don’t include special categories of data (such as health, religion or ethnic origin) or other people’s personal data in your messages. We don’t intend to process such data and will delete it if it reaches us by mistake.
We collect this data electronically: from you, when you email us; and automatically, through our hosting provider’s systems, when you visit the site.
3. Why, and on what legal basis
| Purpose | KVKK (Art. 5(2)) | GDPR (Art. 6(1)) |
|---|---|---|
| Replying to your message; preparing the meeting or proposal you asked for | (c) directly related to entering into a contract; (f) legitimate interest for general questions | (b) steps taken at your request before a contract; (f) legitimate interests |
| Keeping a record of our correspondence; establishing, exercising or defending legal claims | (e) establishing, exercising or protecting a right | (f) legitimate interests |
| Keeping the site and our contact channels secure; filtering spam; seeing visit numbers in aggregate | (f) legitimate interest | (f) legitimate interests |
| Responding to authorities and meeting our legal obligations | (ç) legal obligation | (c) legal obligation |
We do not rely on your consent for any of these purposes. We don’t use your data for marketing, advertising or profiling, we don’t sell it, and we don’t make decisions about you by solely automated means.
4. Who processes it
We share your data only for the purposes above and only as far as necessary, with:
- Our service providers, acting on our instructions:
- Cloudflare, Inc. (USA): hosting, content delivery, security and cookieless visit statistics. Because of its global network, data may be processed in data centres outside Türkiye.
- Zoho Corporation B.V. (the Netherlands; EU data centres): email.
- Public authorities, where they are legally entitled to request it.
- Our legal advisers, only where needed to establish, exercise or defend a right.
International transfers
We are based in Türkiye, and our providers’ servers are in the United States and the European Union, so your data is processed outside your country and transferred abroad from Türkiye.
5. How long we keep it
- Enquiries that don’t become a project: up to 2 years from our last exchange.
- Enquiries that become a project: for the duration of the contract and afterwards for the periods required by law (for example, 10 years under Article 82 of the Turkish Commercial Code).
- Technical and security logs: for the periods our infrastructure providers set for security purposes; Parema does not keep separate copies.
When the period ends or the reason for processing no longer applies, we delete, destroy or anonymise the data.
6. Website visits and analytics
When you open a page, Cloudflare processes your IP address, browser and device information, the page requested and the time, to deliver the page and protect the site against attacks.
- Visit statistics: we use Cloudflare Web Analytics to see, in aggregate, which pages are viewed, which sites visitors come from and how fast pages load. It uses no cookies or browser storage, and Cloudflare discards the IP address rather than adding it to the statistics.
- Network error reports: if a network error occurs while connecting, your browser may send Cloudflare a technical error report so that connection quality can be monitored.
We don’t use advertising or tracking tools such as Google Analytics or Meta Pixel, and we don’t embed third-party content such as YouTube videos or Google Maps. Fonts are served from our own server, so no requests go to services such as Google Fonts. Links to LinkedIn, Instagram and our product sites are plain links; once you follow them, those sites’ own privacy policies apply.
7. Cookies
This site uses no analytics, advertising or tracking cookies and writes nothing to your browser’s local storage, which is why we don’t show a cookie banner. A normal visit stores no cookies at all. If Cloudflare detects suspicious or automated traffic, it may set the following strictly necessary security cookies, which are not used for advertising or to track you across sites:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare | Telling human visitors apart from bots | 30 minutes |
cf_clearance | Cloudflare | Remembering that you passed a security check, so it isn’t shown again | Depends on Cloudflare’s security setting |
_cfuvid | Cloudflare | Limiting excessive requests from visitors who share an IP address | Browser session |
You can view, delete or block cookies in your browser settings; if you block these security cookies, access may be interrupted when Cloudflare shows a security check. If we ever add a tool that uses analytics or advertising cookies, it will not run until you consent, and refusing will be as easy as accepting.
8. Your rights under KVKK
Under Article 11 of KVKK, you have the right to: learn whether your personal data is processed; request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; ask for it to be corrected if it is incomplete or inaccurate; ask for it to be deleted or destroyed under the conditions in Article 7; ask for corrections, deletions and destructions to be notified to the third parties it was transferred to; object to an outcome against you arising from analysis by solely automated systems; and claim compensation for damage caused by unlawful processing.
9. If you are in the EEA or UK
If the GDPR or UK GDPR applies to our processing of your data, you also have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format, and object to processing based on our legitimate interests. You can also lodge a complaint with the data protection authority in the country where you live or work, or where an alleged infringement took place; in the UK, that is the Information Commissioner’s Office (ICO).
10. How to make a request
You can send requests in Turkish or English to iletisim@parema.co, either from an address you have previously used to correspond with us or signed with a qualified electronic signature or mobile signature. Please include your full name, your Turkish ID number (Turkish citizens) or your nationality and passport or ID number (non-citizens), your postal address, your email address and the subject of your request.
We respond as soon as possible and within 30 days at the latest, free of charge as a rule; a fee may be charged under the Communiqué only where a reply requires extra cost (for example, more than ten printed pages or a storage medium). If your request is refused, if you find our reply insufficient or if we don’t reply in time, you may complain to the Turkish Personal Data Protection Board within 30 days of learning of our reply and in any case within 60 days of your request.
11. Security and changes
The site is served only over encrypted connections (HTTPS) and sends browsers a content security policy that allows only its own files and the services named above. Data we receive is accessible only to authorised people. We update this notice whenever our processing changes; the date at the top shows the latest version.