Privacy Policy
How we collect, use and protect your personal data under the GDPR and KVKK. Effective: May 2026
1. Introduction
MadeByCat ("MadeByCat", "we", "us", "our") values the privacy of visitors to its website madebycat.com (the "Site"). This Privacy Policy explains how we collect, use, store, and protect personal data of our visitors in accordance with the EU General Data Protection Regulation ("GDPR") and the Turkish Personal Data Protection Law No. 6698 ("KVKK").
By continuing to use the Site, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The data controller within the meaning of GDPR and KVKK is:
| Field | Detail |
|---|---|
| Legal Name | MADE BY CAT İNTERAKTİF PAZARLAMA HİZMETLERİ ANONİM ŞİRKETİ |
| Address | Nidakule Batı, Barbaros, Begonya Sk. No:1/2, 34746 Ataşehir/İstanbul, Türkiye |
| kvkk@madebycat.com | |
| Registered Electronic Mail (KEP) | madebycat@hs03.kep.tr |
3. Personal Data We Collect
We process the following categories of personal data through the Site:
3.1 Through the Contact Form
- Name and surname
- Email address
- Phone number (optional)
- Company / organisation name (optional)
- Message content
3.2 Automatically Collected Data
- IP address
- Browser type and version
- Operating system
- Pages visited and session duration
- Referrer URL
- Device information (mobile/desktop, screen resolution)
3.3 Blog Comments (Where Applicable)
- Name and email address provided when commenting
- Comment content
4. Purposes and Legal Bases of Processing
We process your personal data for the following purposes and on the following legal bases:
| Purpose | GDPR Legal Basis | KVKK Legal Basis |
|---|---|---|
| Responding to inquiries submitted via the contact form | Pre-contractual steps (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) | Performance of a contract (Art. 5/2-c); legitimate interest (Art. 5/2-f) |
| Measuring and improving Site performance (Google Analytics) | Consent (Art. 6(1)(a)) | Explicit consent (Art. 5/1) |
| Managing blog comments | Consent (Art. 6(1)(a)) | Explicit consent (Art. 5/1) |
| Information security, fraud prevention, system logging | Legitimate interest (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) | Legitimate interest (Art. 5/2-f); legal obligation (Art. 5/2-ç) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) | Legal obligation (Art. 5/2-ç) |
5. Cookies and Similar Technologies
The Site uses cookies to enhance user experience and analyse Site usage.
5.1 Types of Cookies Used
| Cookie Type | Purpose | Duration | Consent Required? |
|---|---|---|---|
| Strictly necessary cookies | Enable core Site functions | Session / short-term | No |
| Analytics cookies (Google Analytics) | Analyse Site traffic and user behaviour | Up to 14 months | Yes |
5.2 Cookie Management
The Site displays a cookie consent banner on first visit. Analytics cookies are not activated without your explicit consent. You can change your preferences at any time via the cookie settings on the Site or via your browser settings.
Disabling cookies through your browser may prevent certain Site features from functioning correctly.
5.3 Google Analytics
The Site uses Google Analytics, provided by Google Ireland Limited. Google Analytics collects data such as anonymised IP address, pages visited, session duration, and device information through cookies. This data is processed solely with your consent to analyse Site performance.
Google Analytics may process data in countries including those outside the European Union. For details on Google's data practices, see: https://policies.google.com/privacy
6.1 Domestic Transfers
Your personal data may be shared with the following parties, only to the extent necessary for the processing purpose:
- Hosting and infrastructure service providers
- Email and communication infrastructure providers
- Public authorities, where required by legal obligation
6.2 International Transfers
Some service providers used on the Site (e.g. Google Analytics) may process data outside Turkey or the European Economic Area. International transfers are carried out in accordance with Chapter V of the GDPR and Article 9 of KVKK, based on your explicit consent or other appropriate safeguards such as Standard Contractual Clauses.
7. Retention Periods
Upon expiry of the retention period, your personal data is deleted, destroyed, or anonymised.
| Data Category | Retention Period |
|---|---|
| Contact form data | Up to 2 years from resolution of the inquiry |
| Site logs (IP, session data) | Up to 2 years as required by law |
| Analytics cookie data | Up to 14 months |
| Blog comments | Until removed or consent is withdrawn |
8. Your Rights as a Data Subject
Under Chapter III of the GDPR and Article 11 of KVKK, you have the following rights:
- Right to be informed about whether your personal data is being processed
- Right of access to your personal data and related information
- Right to know the purposes of processing and whether data is used in line with those purposes
- Right to know the third parties to whom data has been transferred, domestically or internationally
- Right to rectification of inaccurate or incomplete data
- Right to erasure ('right to be forgotten') under applicable conditions
- Right to restriction of processing (GDPR)
- Right to data portability (GDPR)
- Right to object to processing, including automated decision-making
- Right to compensation for damages arising from unlawful processing
- Right to withdraw consent at any time
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
- SSL/TLS encryption in transit
- Access rights managed on the principle of least privilege
- Regular backups and restore testing
- Confidentiality agreements and information security training for employees
- Monitoring of system and application logs
10. Children's Data
The Site is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe that personal data of your child has been processed by us, please contact us and we will take the necessary steps to delete it.
11. Third-Party Links
The Site may contain links to third-party websites. MadeByCat is not responsible for the privacy practices of such third parties. We recommend reviewing the privacy policies of those websites separately.
12. Changes to this Policy
This Privacy Policy may be updated from time to time. Material changes will be announced on the Site. We recommend reviewing the current version periodically. The effective date is indicated at the beginning of the Policy.
13. Contact
For any questions regarding this Privacy Policy or your personal data, please contact us via:
Email: kvkk@madebycat.com
KEP: madebycat@hs03.kep.tr
Address: Nidakule Batı, Barbaros, Begonya Sk. No:1/2, 34746 Ataşehir/İstanbul, Türkiye