1. Data controller
This notice is provided by Cleova (“Cleova”) as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the related Communiqué on the obligation to inform. It applies to visitors of the thecleova.com website.
2. Personal data we process
The website has no accounts or orders. Using the site, only the following data is processed:
- Security and log data: technical records such as IP address, date and time of the visit, pages viewed, browser and device information.
- Preference data: your chosen site language (Turkish/English) and your cookie/measurement choice, stored in cookies in your browser.
- Communication data: if you contact us via Instagram or e-mail, your name, username, contact details and the content of your message.
- Newsletter data: if you choose to subscribe to our e-mail newsletter, your e-mail address, the date of sign-up, site language, the page you signed up on and the consent text you agreed to.
- Visit statistics: only if you allow them — pages viewed, referring site, country, device and browser type, collected without cookies and without identifying you, as aggregate statistics.
3. Purposes
- Providing the website reliably, securely and correctly,
- Running information security processes and preventing misuse,
- Remembering your language and cookie preferences,
- If you allow it, producing aggregate, anonymous visit statistics to improve the site,
- With your explicit consent, sending you commercial e-mails about new products, offers and Journal content,
- Answering your questions, suggestions and requests,
- Complying with legal obligations and providing information to competent authorities.
4. Collection method and legal grounds
Your data is collected automatically when you visit the site (server logs, cookies and, if you allow it, cookie-free visit measurement), and electronically when you fill in the newsletter form or contact us. It is processed on the following legal grounds under Article 5(2) of the KVKK:
- It is expressly provided for by law and necessary for the controller to comply with a legal obligation (e.g. traffic records under Law No. 5651),
- It is necessary for the legitimate interests of the controller, provided that your fundamental rights and freedoms are not harmed (providing the site securely, remembering your language, answering requests),
- It is necessary for the establishment, exercise or protection of a right.
Newsletter data is processed on the basis of your explicit consent under Article 5(1) of the KVKK and the commercial electronic message consent you give under Law No. 6563 on the Regulation of Electronic Commerce; visit statistics on the basis of the permission you give in your cookie preferences. Giving consent or permission is optional; not giving it does not affect your use of the site.
5. Transfers
Your data may be transferred to the service providers we use to host the site and its content infrastructure (Vercel Inc. – USA, hosting and content delivery; Sanity AS – Norway, content management and image delivery) and, upon request, to competent public authorities. As these providers’ servers are located abroad, such transfers are made in accordance with Article 9 of the KVKK. When you message us on Instagram, Meta Platforms also processes your data under its own policies. As required by law, your commercial message consent is recorded in Turkey’s Message Management System (İYS); if an e-mail service provider is used to send the newsletter, this notice will be updated.
6. Retention
Technical logs are kept for the periods required by law, the language cookie for up to 1 year, the cookie-preference cookie for up to 6 months, newsletter data until you withdraw your consent (consent records for the period required by law as proof), and correspondence for as long as needed to handle your request and any possible dispute. After that, the data is deleted, destroyed or anonymised.
7. Your rights
Under Article 11 of the KVKK, you may apply to the data controller to:
- learn whether your personal data is processed and request information about it,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties in Turkey or abroad to whom it is transferred,
- request correction of incomplete or inaccurate data, request erasure or destruction under Article 7, and request that third parties be notified of these actions,
- object to a result against you arising exclusively from automated analysis,
- claim compensation for damage caused by unlawful processing.
You can withdraw your newsletter consent and your permission for visit statistics at any time, without giving a reason and free of charge.
8. How to apply
You can send your request, with information that allows us to verify your identity, via direct message to our Instagram account (@thecleova), in line with the Communiqué on the Procedures and Principles of Applications to the Data Controller. Requests are handled free of charge as soon as possible and within 30 days at the latest; if the request involves an additional cost, the fee set by the Personal Data Protection Board may apply.
LAST UPDATED: 13 October 2026