Data Processing and KVKK Notice

Data controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the GDPR, the data controller is Codeativ, the operator of Cotesty. You can reach the controller at [email protected].

Personal data we process

• The URL you submit and the page you submitted it from.
• Your email address, where you choose to provide it for the waitlist.
• Transaction and security metadata: IP address, user-agent and request time.

Purposes and legal grounds

We process this data to provide the report or waitlist place you request (a contractual necessity), to keep the service secure and prevent misuse (a legitimate interest), and to contact you where you gave your email (on the basis of your consent). These correspond to KVKK Art. 5/2 (c) and (f) and, where consent applies, Art. 5/1, and to GDPR Art. 6(1)(b), (f) and (a).

Transfers

To operate the site we use Cloudflare as a hosting and infrastructure processor, and our own report API. This may involve processing on servers abroad, including outside Türkiye and the EEA, under the safeguards those providers offer. We do not sell personal data.

Retention

We retain personal data only as long as its purpose requires: waitlist data until launch or your withdrawal, a submitted URL for as long as needed to produce your report, and logs for a short rotation period, after which data is deleted or anonymised.

Your rights under KVKK Article 11

You have the right to learn whether your personal data is processed and to request information about it, to know the purpose of processing, to request correction of incomplete or inaccurate data, to request deletion or destruction, to object to a result reached solely by automated analysis, and to claim compensation for damage caused by unlawful processing. Under the GDPR you additionally have rights of access, portability, restriction and objection, and the right to complain to a supervisory authority.

How to apply

Send your request to [email protected]. We respond within the time limits the KVKK and GDPR set. This notice is provided to inform you under KVKK Art. 10; the wider Privacy Policy gives the full picture.