Privacy & Cookies
Last updated: 27 October 2026
The complete Privacy Policy, KVKK Notice and Cookie Policy of Cevat Workshop is published in Turkish: read the full Turkish version. This page summarises the key points in English. If you have any question, write to info@cevatworkshop.com.
Who we are
| Item | Detail |
|---|---|
| Data controller | Cevat Tahir Bayındır ("Cevat Workshop") |
| Tax office / Tax no. | Gökdere Vergi Dairesi / 1530839061 |
| Address | AGAKÖY MAH. GÜRSU/BURSA |
| info@cevatworkshop.com | |
| Phone / WhatsApp | +90 536 589 0510 |
What we collect and why
- Quote requests: name or company, email, phone, city and project details you send us, used to reply to your request and prepare a quote.
- Newsletter and marketing messages: only if you give a separate, explicit consent. Consent is optional, never a condition for requesting a quote, and you can withdraw it at any time through the unsubscribe link in each message or by writing to us.
- Files you upload: files you add to a quote request are used only to assess that request. They are scanned for viruses and stored on the infrastructure of our cloud service providers (Google, GitHub). To have your files deleted, write to destek@cevatworkshop.com.
- Security: technical data such as IP address, spam-protection results (Cloudflare Turnstile) and a one-way hash of the random id the quote form keeps in your browser, to keep the site and forms safe and to match requests from the same person.
- Analytics (Google Analytics 4, Microsoft Clarity): page views and usage statistics, plus Clarity heatmaps and session recordings of clicks, scrolling and mouse movement, only after you accept analytics cookies. Whatever you type into forms is masked and never recorded, Clarity never runs on your private quote tracking page, and Microsoft does not use Clarity data for advertising. Clarity recordings are kept for 30 days (flagged recordings and heatmap data for 13 months).
- Advertising (Google Ads): measuring the results of our ads (for example a visitor from an ad sending the quote form) and showing relevant ads, only after you accept advertising cookies.
- Embedded content (Instagram): loaded only after you accept third-party content.
Service providers that process data for us include Cloudflare (hosting, security, database), Resend and our mailbox provider (email delivery), and, with your consent, Google (analytics and advertising) and Microsoft (Clarity analytics). Some of them are located outside Türkiye; transfers follow Article 9 of the Turkish Personal Data Protection Law (KVKK). We do not sell your data.
Marketing and newsletter consent
The optional box on the quote form ("Keep me informed…") and the newsletter form mean you agree to the following: Cevat Tahir Bayındır ("Cevat Workshop") may send you commercial electronic messages (product and service news, offers, new services, project announcements and the newsletter) to the email address you gave and, if you shared your phone number, by SMS. No phone calls. For this purpose your name, email and (if given) phone number are processed on the basis of your explicit consent. Giving consent is not a condition for getting a quote or using our services. You can withdraw it at any time, free of charge and without giving a reason, through the unsubscribe link in each message, the Turkish Message Management System (İYS) or by writing to info@cevatworkshop.com.
For the newsletter we also send a confirmation link to verify the address; nothing is sent until you click it. We record the date, channel, version of this text and a one-way hash of your IP address as proof of consent.
Our confirmation and newsletter emails contain a one-pixel image and redirecting links so we can measure whether a message was delivered, opened and which links were clicked. These records (time, clicked link, a one-way hash of your IP address and browser details) are used only to improve our emails and to stop sending to addresses that bounce or report spam. You can prevent open tracking by turning off images in your email program.
The box "I have read the privacy notice" on the quote form only confirms that you have read this notice. It is not a consent: quote requests are processed because they are needed to prepare and perform a contract (KVKK Art. 5/2-c).
Language and personalisation
When you open the bare address cevatworkshop.com we choose Turkish or English from, in order, your earlier language choice (cw_lang cookie), your browser language and the country Cloudflare derives from your IP address. Country and language are used only for that moment and are not stored. If you allow "Personalisation" in the cookie settings, the service pages you viewed are kept in your own browser for up to 90 days so the home page can show your service first; nothing is sent to our servers, and withdrawing consent deletes it.
Cookies
| Category | Purpose | Examples | Duration | Consent needed |
|---|---|---|---|---|
| Necessary | Remembers your cookie choice | cw_consent | 12 months | No |
| Necessary (preference) | Remembers your TR/EN choice; only set when you pick a language | cw_lang | 12 months | No |
| Necessary (security) | Random id created in your browser (localStorage) when you send the quote form; used to recognise requests sent from the same browser under different e-mail addresses and to prevent abuse. Only a one-way hash is stored on our servers | cw_fid | Until you delete it | No |
| Personalisation | Remembers the services you viewed to put them first on the home page; kept only in your browser (localStorage) | cw_interest | 90 days | Yes |
| Analytics | Visitor statistics (Google Analytics 4) | _ga, _ga_NMDHJQ1TZD | Up to about 2 years by default | Yes |
| Analytics | Heatmaps and session recordings with form fields masked (Microsoft Clarity) | _clck, _clsk and Microsoft cookies | _clck 12 months, _clsk 1 day | Yes |
| Advertising | Measuring Google Ads results (conversions) and showing relevant ads | _gcl_au, _gcl_aw and other Google ad cookies | 90 days | Yes |
| Third-party content | Embedded Instagram posts | Set by the platform | Set by the platform | Yes |
Analytics, advertising and third-party cookies are not loaded until you accept them. The site uses Google Consent Mode v2, so Google tags respect your analytics and advertising choices separately; without advertising consent no Google Ads cookies are set and no data is sent for ad personalisation. If you have accepted advertising cookies and send the quote form or sign up for the newsletter, your e-mail address, phone number, name and city are hashed (SHA-256) in your browser and sent to Google with that conversion, so that Google Analytics and Google Ads can measure it more accurately; Google does not receive them in plain text. You can change your choice at any time with the "Cookie preferences" link at the bottom of every page.
Your rights
Under Article 11 of KVKK you may ask whether your data is processed, request information, ask for correction or deletion, object to certain processing, and claim compensation for unlawful processing. Visitors from the EEA or the UK also have their GDPR / UK GDPR rights. Send your request to info@cevatworkshop.com; we answer within 30 days. You may also complain to the Turkish Personal Data Protection Board.