Privacy Policy

This privacy policy applies to the donedynamics.com website and related services operated by Done Dynamics Yazılım A.Ş. ("Done Dynamics", "we").

Controller contact: info@donedynamics.com · Data Protection Officer: devrim@donedynamics.com.

Contact form data: first/last name, work email, company name, message content.

Technical data: anonymised IP address, browser type, device type, session duration, pages visited.

Analytics data: anonymous usage statistics via Google Analytics 4 — only when you give explicit consent.

Service delivery, customer communication, request handling and performance of contracts (GDPR art. 6(1)(b), KVKK art. 5/2-c).

Site security, abuse detection and technical improvement (legitimate interest — GDPR art. 6(1)(f), KVKK art. 5/2-f).

Marketing and analytics processed strictly on the basis of consent (GDPR art. 6(1)(a), KVKK art. 5/1).

We may share data with our hosting (Vercel, AWS), email (Google Workspace), analytics (Google Analytics) and CRM (HubSpot) service providers.

For cross-border transfers, appropriate safeguards under GDPR Chapter V and KVKK art. 9 (Standard Contractual Clauses / adequacy decisions) are in place.

Contact form data: up to 24 months.

Contract and invoice records: 10 years where required by applicable law.

Anonymous analytics data: up to 14 months.

Under GDPR art. 15-22 and KVKK art. 11 you have rights of information, access, rectification, erasure, restriction, objection and data portability.

To exercise these rights, contact devrim@donedynamics.com. We respond within 30 days at no cost.

We use TLS encryption, field-level encryption, RBAC, audit logs and regular penetration testing.

Breaches are reported to competent authorities within 72 hours pursuant to GDPR art. 33 and KVKK art. 12/5.

For inquiries: info@donedynamics.com

You have the right to lodge a complaint with the Turkish DPA (kvkk.gov.tr) or your local EU supervisory authority.