Privacy
Privacy Policy
How we handle the personal data you share with us through this website. Last updated 3 November 2026.
1. Who we are
The data controller responsible for personal data processed through this website is ORYNERA Technologies,Bursa Uludağ Üniversitesi, Görükle Kampüsü, Üniversite Cd. No:933, Görükle, Nilüfer, Bursa 16285, Türkiye. You can reach us through the contact page.
This policy applies to the website https://orynera.com. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK).
2. What we collect
We collect personal data only when you send us a message through the contact form. We do not require an account, and we do not collect data from visitors who simply read the site.
| Data | Why we need it |
|---|---|
| Full name | to address you in our reply |
| Work email address | to reply to you |
| Organisation and organisation type | to understand your context and route your enquiry |
| Area of interest | to prepare a relevant answer (for example, an EGaaS plan) |
| Your message | to answer your request |
| IP address and time of submission | to prevent abuse of the form (rate limiting) and to keep a record of your consent |
Like every web server, Hostinger (Hostinger International Ltd., Lithuania; servers in the EU) records technical access logs (IP address, requested page, browser type, time). These logs are used only to keep the service running and secure.
3. Why and on what legal basis
- Responding to your enquiry. Legal basis: your consent, given by ticking the box in the form (GDPR Art. 6(1)(a); KVKK Art. 5(1)), and, where you ask about a service, the steps needed to prepare a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- Preventing abuse of the form. Legal basis: our legitimate interest in keeping the site secure (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Sending you a confirmation email. When you submit the form, we send one automatic confirmation to the address you entered. We do not send newsletters or marketing emails.
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Who receives your data
We share personal data only with service providers that act on our instructions as processors:
- Resend (Resend, Inc., USA) delivers the emails generated by the contact form. Data may be transferred outside Türkiye and the EU/EEA; the transfer is covered by the provider's Data Processing Agreement and the European Commission's Standard Contractual Clauses.
- Hostinger (Hostinger International Ltd., Lithuania; servers in the EU) hosts the website and processes technical access logs. Data stays within the EU.
We may also disclose data when required by law or a competent authority.
5. How long we keep it
Messages sent through the contact form, and our replies, are kept for up to 24 months after the last contact, unless the enquiry leads to a business relationship, in which case the data becomes part of our contractual records and is kept for the period required by commercial and tax law. Technical access logs are kept for a short period for security purposes and then deleted.
6. Cookies and tracking
This website does not use cookies, analytics tools, advertising trackers or embedded third-party content. Fonts are served from our own servers, so no request is made to a third party when you view a page. If this changes, we will update this policy and, where required, ask for your consent first.
7. Your rights
Under GDPR (Articles 15 to 21) and KVKK (Article 11) you have the right:
- to be informed about whether and how your data is processed
- to access your data and receive a copy
- to have inaccurate or incomplete data corrected
- to have your data deleted ("right to be forgotten"), subject to legal retention duties
- to restrict or object to processing
- to receive your data in a portable format
- to withdraw consent at any time, without affecting processing that took place before withdrawal
- to lodge a complaint with a supervisory authority: the Turkish Personal Data Protection Authority (KVKK) or the data protection authority in your EU member state
To exercise any of these rights, contact us through the contact page. We respond within 30 days as required by KVKK, and within one month under GDPR. We may ask you to verify your identity before acting on a request.
8. Security
Data is transmitted over encrypted connections (HTTPS). Access to enquiries is limited to the people who need it to reply to you. We apply technical and organisational measures appropriate to the risk, as required by GDPR Article 32 and KVKK Article 12.
9. Changes to this policy
We may update this policy when our services or legal obligations change. The date at the top of the page shows the latest version. Substantial changes will be highlighted on this page.
10. Contact
Questions about this policy or about your personal data: contact page, or write to the postal address in section 1.