Privacy notice

Last updated: 27 September 2026

Who we are

Nordera Works Teknoloji ve Danışmanlık A.Ş. ("Nordera Works", "we"), Metrocity, Esentepe, Şişli, İstanbul, Türkiye, is the data controller for personal data collected through norderaworks.com. This notice is given under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, for visitors in the EU and UK, the GDPR.

What we collect

Contact form: your name, email address, company, the topic you choose and your message.

Newsletter: your email address, preferred language, and a record of your consent (date, time and the text you agreed to).

Technical data: our hosting provider keeps short-lived server logs (such as IP address and browser type) to keep the site secure. We do not use analytics or advertising cookies.

Why, and on what legal basis

To reply to your enquiry and take pre-contract steps you ask for: KVKK Art. 5(2)(c) and (f); GDPR Art. 6(1)(b) and (f).

To send the newsletter: your explicit consent, KVKK Art. 5(1) and Law No. 6563 on electronic commerce; GDPR Art. 6(1)(a). You can withdraw consent at any time.

To keep the site secure: our legitimate interest, KVKK Art. 5(2)(f); GDPR Art. 6(1)(f).

Who we share it with

Brevo (Sendinblue SAS, France) stores contacts and sends our emails. Vercel Inc. (USA) hosts the website. Both act as data processors under written agreements. If you allow analytics cookies, Google Ireland Ltd. processes usage data for us.

Because these providers are located outside Türkiye, your data is transferred abroad. For Türkiye, these transfers rely on the standard contractual clauses provided under KVKK Art. 9. For the EU and UK, Vercel transfers rely on the EU-US Data Privacy Framework and standard contractual clauses.

We do not sell your data or share it with third parties for their own marketing.

How long we keep it

Enquiries: up to two years after our last contact, unless a business relationship follows.

Newsletter: until you unsubscribe. The record of your consent and its withdrawal is kept for three years afterwards, as Turkish law requires.

Server logs: for the short period set by our hosting provider.

Your rights

Under KVKK Art. 11 you may ask whether we process your data, get information about it, learn the purpose and whether it is used for that purpose, know who it is transferred to, ask for correction or deletion, object to results produced solely by automated processing, and claim compensation for damage caused by unlawful processing.

Under the GDPR you also have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local data protection authority.

Write to hello@norderaworks.com. We answer within 30 days, free of charge.

Cookies

The public site works without cookies. Analytics cookies are used only if you allow them; see our cookie policy.

Children

This site is not directed at anyone under 18.