Privacy Notice (KVKK)

Last updated: 30 October 2026 · Version: 2026-10-30.1

This notice explains how personal data is processed when you visit the Reformo AI website or send an enquiry, meeting or demo request. It is provided under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK).

Data controller and contact

The data controller is HGM Bilişim Yazılım Danışmanlık Ltd. Şti. Address: 19 Mayıs Mh. Turaboğlu Sk. H. Yazgan İş Merkezi No:4/2, 34736 Kadıköy, İstanbul, Türkiye. For personal data enquiries, contact [email protected].

Data collected and collection methods

We collect the name, email address, phone number and message you enter in the form. This includes your selected enquiry topic. We record the submission time, IP address and connection port, together with the time, language and version of your acknowledgment of this notice. Data is collected electronically through your browser, the form and the website’s security services.

The form is not intended for special categories of personal data. Please do not include passwords, health information, identity documents or unnecessary information about other people.

Purposes and legal grounds

• We review and respond to your request and discuss the relevant service or demo. Where your request is directly related to entering into or performing a contract, processing relies on Article 5(2)(c). Other business enquiries rely on our legitimate interest in handling communications, provided your fundamental rights and freedoms are protected, under Article 5(2)(f).
• We use technical connection information and Cloudflare Turnstile to prevent spam, limit abuse and protect the website, relying on the legitimate interest described in Article 5(2)(f).
• Records needed to establish, exercise or protect a right rely on Article 5(2)(e); records required by a legal obligation rely on Article 5(2)(ç). The notice acknowledgment is recorded to demonstrate compliance with the information obligation.

Recipients and service providers

Authorized HGM staff review requests. Hosting and technical support providers process data as needed to operate the website and its forms. New form submissions, including their contact details, message and connection information, are sent to HGM’s internal Slack notification channel so the team can follow up. Cloudflare receives technical information for Turnstile security checks. Data may also be disclosed to authorized public bodies where required by law.

Slack and Cloudflare services may involve processing outside Türkiye. International transfers require the conditions and safeguards set out in Article 9 of KVKK. Acknowledging this notice does not constitute consent to an international transfer.

Cookies and website measurement

A session cookie supports form security. A language preference cookie remembers your language selection. When you switch language, unsent form fields can be written to this tab’s session storage. The stored draft is removed when the next form page loads; its fields are restored only if it was saved less than 60 seconds earlier. Google Analytics loads only after you allow analytics cookies. It can process browser and device information, page addresses, usage events and cookies, including outside Türkiye. Form contents are not included in custom analytics events. You can reject analytics or change your choice at any time through “Cookie preferences” in the footer. Cookie names, purposes and lifetimes are listed in the Cookie Notice. The required form checkbox records that you have read this notice; it is separate from cookie and marketing permissions.

Retention

Personal data is retained only for as long as needed to handle your request and for any applicable statutory retention or limitation periods. When the purpose and legal grounds for retention no longer apply, the data must be erased, destroyed or anonymized in accordance with KVKK. This notice does not establish a fixed retention period.

Your rights and how to apply

Under Article 11 of KVKK, you may learn whether your data is processed, request information about processing and its purpose, learn the recipients in Türkiye or abroad, request correction of incomplete or inaccurate data, and request erasure or destruction where the legal conditions apply. You may request that corrections or erasure be notified to recipients, object to a result against you produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.

You can submit a written application to the address above, or use an email address previously supplied to us and recorded in our system to write to [email protected], in accordance with the Communiqué on the Principles and Procedures for Requests to the Data Controller. Include the information required by that Communiqué and describe your request clearly. Applications are answered as soon as possible and within 30 days at the latest; any fee is subject to the applicable legal rules.

Form acknowledgment

Before sending the form, you must select “I have read and understood the Privacy Notice (KVKK)”. The box is initially unchecked. This records receipt of the information; it does not give permission for promotional messages or replace any separately required explicit consent.

Official information: Personal Data Protection Authority — information obligation