Data Protection Notice (KVKK)
VOGANIS A.Ş., acting as data controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), processes your personal data within the framework set out below. This notice explains which data we process, for what purpose, on which legal basis, and what rights you hold.
Last updated: 2026-10-17
Data Controller
The data controller is VOGANIS A.Ş. For any request or question concerning your personal data, you may write to info@voganis.com. Requests are answered within the periods set out in the KVKK and related legislation.
Personal Data We Process
We process only the data you provide through this site: first and last name, email address, telephone number, organization name and your role, your country and city, and the information you include in the content of your request. In addition, technical connection information (security context such as IP address) and, subject to your explicit consent, cookie-based usage data may be processed. We do not request special categories of personal data and ask that you do not enter such data into our forms.
Purposes of Processing
Your personal data is processed to receive and evaluate your request, respond to you, determine which services may be suitable, conduct pre-contractual discussions, perform the service relationship where one is established, fulfil our legal obligations, ensure the security and traceability of records, and — only where you have given explicit consent — send informational communications.
Legal Grounds
Our processing relies on the following grounds under Article 5 of the KVKK: direct relevance to the establishment or performance of a contract, fulfilment of the controller's legal obligations, necessity for the establishment or protection of a right, our legitimate interests provided your fundamental rights and freedoms are not harmed, and — for marketing communications and non-essential cookies — your explicit consent.
Transfers and Service Providers
We do not sell your personal data or transfer it to third parties for marketing purposes. Your data may be shared, only to the extent necessary to provide the service, with the suppliers from whom we obtain hosting, email delivery, and infrastructure services, and with public authorities legally empowered to request it, in accordance with applicable legislation. As these providers' servers may be located abroad, any transfer is carried out under Article 9 of the KVKK with the required safeguards. If you choose to type a free-form question in the site's AI assistant, the transfer of your messages is described separately in the "AI Assistant" section of this notice. You may write to us to learn our current list of providers.
Retention Period
We retain your personal data for as long as necessary for the purpose for which it was processed, and for as long as the limitation periods and retention obligations under applicable legislation continue. Once the purpose ceases and statutory retention periods expire, data is deleted, destroyed, or anonymised. You may request deletion of your record; records subject to a statutory retention obligation continue to be kept for the duration of that obligation.
Candidate Applications
We process the data you submit through the general application form on the careers page only to review your application. The data processed is: first and last name, email address, the area you are interested in, your preferred way of working, the text of your application and, if you choose to share them, your city and country and a profile link (a portfolio, LinkedIn, GitHub or a piece of published work). Public content at the link you share is viewed only to review your application. We do not ask for a CV file, photo, date of birth, national ID number, marital status, health, religion or origin, and we ask that you do not include them in your application text. The purposes of processing are to review your application, to contact you by email when there is a suitable project or need, and, should a working relationship come up, to conduct the discussions that precede it. The legal ground is direct relevance to the establishment of a contract under Article 5(2)(c) of the KVKK; explicit consent is therefore not requested for an application, and the checkbox on the form records that you have read this notice. Your application is kept for as long as it is under consideration; once that purpose ceases, it is deleted, destroyed or anonymised. You may ask for your application to be deleted at any time by writing to info@voganis.com. Applications are stored on the infrastructure described in the "Transfers and Service Providers" section of this notice.
AI Assistant
The AI assistant on this site works in two ways. When you use the ready-made options, answers are shown in your browser from the site's own content; no message is sent to our servers or to any third party. If you choose to type a free-form question, the messages you type, together with your earlier messages in the same session, are transferred to and processed by our AI service provider, Anthropic, PBC (United States), so that a reply can be generated. This transfer takes place only where the conditions required by Article 9 of the KVKK are met; the free-form feature does not open without your explicit consent, and declining does not restrict any other part of the site. The assistant does not ask for personal data; we ask that you do not include your name, phone number, email, ID number or special categories of personal data, and expressions that look like such data are automatically masked before sending where possible. VOGANIS does not keep a transcript of the conversation on its own servers; the conversation is held only in this browser tab and is deleted when you close the tab or choose 'Clear conversation'. To prevent abuse, connection information (IP address) is processed briefly, in hashed form and only for rate limiting, and is not recorded. How long the provider retains the messages is governed by the provider's own terms. The assistant's replies are generated automatically, may be inaccurate and are not binding; they do not replace an offer, a contract, or legal, financial or medical advice. You can withdraw consent at any time with 'Withdraw consent' in the assistant panel, and write to info@voganis.com to exercise your rights.
Data Security
We take appropriate technical and administrative measures to prevent unlawful processing of and access to your personal data and to ensure its safekeeping. These measures include authorisation-based access control, encryption in transit, traceability of records, and limitation of access rights on a role basis. We note that no method of transmission over the internet or of storage can be guaranteed absolutely secure.
Your Rights as a Data Subject
Under Article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information if it has been; learn the purpose of processing and whether the data is used in accordance with that purpose; know the third parties to whom it is transferred domestically or abroad; request rectification if it is incomplete or incorrect; request erasure or destruction; request that rectification and erasure be notified to third parties to whom the data was transferred; object to a result adverse to you arising from analysis of the data solely by automated systems; and claim compensation for damage suffered as a result of unlawful processing.
How to Apply
To exercise your rights, you may send your request, together with information verifying your identity, to info@voganis.com. Depending on its nature, your request is concluded free of charge as soon as possible and in any case within the period prescribed by legislation; where the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, your right to lodge a complaint with the Personal Data Protection Board is reserved.