Cookie Policy
Last updated: 29 October 2026
This policy, provided by Cevat Tahir Bayındır ("Cevat Workshop") under KVKK Art. 10, explains the data processed on cevatworkshop.com through cookies and similar technologies (local storage, tags). Contact details, your rights and how to apply are in the Privacy Notice. The Turkish version prevails.
Cookies we use
| Category | Purpose | Name | Duration | Legal ground |
|---|---|---|---|---|
| Necessary | Remember your cookie choice | cw_consent | 12 months | KVKK Art. 5/2-f; no consent needed |
| Necessary (preference) | Remember your TR/EN choice; only set when you choose | cw_lang | 12 months | Art. 5/2-f |
| Necessary (security) | Random id created in your browser to prevent abuse of the quote form; only a one-way hash is stored on our servers | cw_fid (localStorage) | 12 months, then renewed | Art. 5/2-f |
| Personalisation | Remember the services you viewed, only in this browser, and show them first on the home page | cw_interest (localStorage) | 90 days | Consent |
| Analytics | Visitor counts, page views and usage statistics (Google Analytics 4) | _ga, _ga_NMDHJQ1TZD | About 2 years; data kept 14 months at Google | Consent |
| Analytics | Heatmaps and session recordings with form fields masked (Microsoft Clarity); never runs on quote request pages | _clck, _clsk and Microsoft cookies | _clck 12 months, _clsk 1 day; recordings 30 days | Consent |
| Advertising | Measure Google Ads results and show relevant ads. With this permission, when you send the quote form or join the newsletter, your email, phone, name and city are hashed in your browser (SHA-256) and sent to Google, which never receives them in clear text | _gcl_au, _gcl_aw and Google ad cookies | 90 days | Consent |
| Third-party content | Instagram (Meta) cookies when embedded posts load | Set by the platform | Set by the platform | Consent |
Cloudflare Turnstile bot protection processes technical data needed to keep the Site secure (Art. 5/2-f).
Recipients
Data collected by analytics, advertising and embedded-content cookies goes to these providers abroad:
| Provider | Service | Country |
|---|---|---|
| Google (Google LLC and its affiliates) | Google Analytics 4, Google Ads | USA and other countries where Google has data centres |
| Microsoft Corporation | Microsoft Clarity | USA |
| Meta Platforms | Embedded Instagram posts | USA and other countries |
Legal basis for the transfer. These transfers take place only when you allow the relevant category in the cookie window, on the basis of your explicit consent under KVKK Art. 9/6-a. No standard contract announced by the Turkish Personal Data Protection Board has been signed with these providers, and the Board has made no adequacy decision for these countries.
Possible risks. Those countries may not offer the level of protection you have in Türkiye; foreign public authorities may request access to the data from the providers; exercising your rights and seeking remedies there may be harder. Under their own terms, Microsoft and Google may also process part of this data for their own purposes (for example product improvement or advertising) as independent controllers.
If you do not allow them, no such transfer happens and you can use the Site just the same. You can withdraw your consent at any time with "Cookie preferences"; withdrawal stops transfers from then on.
Managing your choices
- On your first visit you can accept or reject analytics, advertising, personalisation and third-party content separately. "Reject" is as easy as "Accept" and rejecting never blocks the Site.
- Change your choice any time with "Cookie preferences" at the bottom of every page.
- The Site uses Google Consent Mode v2: without your consent Google tags set no analytics or advertising cookies.
- You can also delete or block cookies in your browser settings.