How Uskur handles information collected through the GoPunica website.
Effective date: 12 October 2026
Uskur Yazılım ve Bilişim Hiz. Ltd. Şti. ("Uskur", "we", "us", or "our") operates the GoPunica website and is the controller of the personal data described in this notice.
Address: Hilal Mah. Aleksander Dupçek Cad. 46/3 Çankaya / Ankara Türkiye
Privacy contact: info@uskur.com.tr
This notice explains how we process personal data under Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR) and UK GDPR.
When you contact us through the website, we may collect your:
Please do not include sensitive personal data or information about other people unless it is necessary and you are authorised to provide it.
When you use the website, our systems may process your IP address, request date and time, requested URL, referrer, browser and device information, language, operating system, and security events. We use this information to deliver the site, maintain security, diagnose problems, and prevent abuse.
When you use the contact form, we use Google reCAPTCHA and Stop Forum Spam to assess whether the request is automated or abusive. reCAPTCHA loads only after you choose to enable it and is required to submit the form. Google may then process technical browser and device signals, your IP address, and a short-lived verification token, and may set the necessary _GRECAPTCHA cookie. Stop Forum Spam receives the submitted email address and IP address for the abuse check. We do not send the contents of your message to either service.
Google Analytics loads only after you choose Accept analytics. It may then collect cookie identifiers, approximate city-level location, browser and device details, session information, and interactions with the website.
We do not send Google Analytics a user ID or submitted contact-form content. Google Signals, advertising storage, advertising user data, and advertising personalisation are disabled. The Analytics property is not linked to Google Ads, and optional Google account-level data sharing is disabled.
| Purpose | GDPR or UK GDPR basis, where applicable | KVKK processing condition |
|---|---|---|
| Delivering the website and its requested functions | Legitimate interests in operating the website | Legitimate interests, provided your fundamental rights are not harmed |
| Responding to enquiries and discussing services | Steps requested before entering a contract and our legitimate interests in handling business enquiries | Establishment or performance of a contract where applicable, and legitimate interests |
| Securing the website and preventing spam, fraud, and abuse | Legitimate interests in protecting the website and its users | Legitimate interests, provided your fundamental rights are not harmed |
| Measuring website use through Google Analytics | Consent | Explicit consent |
| Meeting legal obligations and establishing, exercising, or defending legal claims | Legal obligation and legitimate interests | Compliance with legal obligations and the establishment, exercise, or protection of a right |
You may reject analytics without losing access to the website or contact form. You can change your analytics choice at any time through the cookie-settings button. Withdrawing consent does not affect processing that occurred before withdrawal.
We do not sell personal data. We use the following service providers where necessary:
Authorised Uskur personnel may access information when required for their work. We may also disclose information where required by law, to protect legal rights, or in connection with a corporate transaction subject to appropriate safeguards.
Links to third-party websites open independently. Those third parties process information under their own notices.
Some providers and their subprocessors operate outside Türkiye and may also operate outside the European Economic Area or the United Kingdom. This means personal data may be processed in other countries. Where transfer rules apply, we use the applicable contractual and other legal safeguards and take supplementary technical and organisational measures where appropriate. You may contact us for information about the safeguards relevant to your data.
We apply the following retention periods unless a longer period is required by law or is necessary for a legal claim:
| Information | Retention period |
|---|---|
| Contact enquiries and related email correspondence | Up to 24 months after the last communication |
| Web-server, application, security, and blocked-spam logs | Up to 5 weeks |
| Local Stop Forum Spam lookup cache | Up to 1 month |
| Google Analytics event and user-level data | 14 months |
| Cookie-consent choice | 180 days |
Google Analytics cookies can remain on your device for up to two years unless you delete them or withdraw analytics consent. Aggregated reports that no longer identify an individual visitor may be retained for longer.
When a retention period ends, we delete or anonymise the information unless continued retention is legally required. Provider backups may retain limited copies until they are overwritten through the provider's normal backup cycle.
These technologies support security and functions you request. They do not require the analytics choice.
| Name or service | Purpose | Typical duration |
|---|---|---|
csrfToken |
Protects forms and requests against cross-site request forgery | Browser session |
CAKEPHP or equivalent session cookie |
Maintains temporary session state, including form validation and response messages | Browser session |
kediy_cookie_consent |
Stores your analytics choice | 180 days |
_GRECAPTCHA (Google reCAPTCHA) |
Provides risk analysis and verifies that contact-form activity is legitimate after you enable reCAPTCHA | Set and controlled by Google; verification tokens expire after about 2 minutes |
These cookies are set only after you accept analytics.
| Name | Purpose | Typical duration |
|---|---|---|
_ga |
Distinguishes visitors for Google Analytics | Up to 2 years |
_ga_<measurement-id> |
Maintains Google Analytics session state | Up to 2 years |
Rejecting analytics prevents Google Analytics from loading. If you first accept and later withdraw consent, we stop Analytics, remove the Analytics cookies accessible to the site, and reload the page to apply your choice.
Browser controls can also block or delete cookies. Blocking necessary cookies may prevent forms or other requested functions from working correctly.
We use technical and organisational measures intended to protect personal data, including encrypted web connections, access controls, security monitoring, software maintenance, and restricted administrative access. No internet service can guarantee absolute security.
Subject to the law that applies to you, you may ask us to:
You may withdraw consent at any time. You also have the right to complain to the Turkish Personal Data Protection Authority and, where the GDPR or UK GDPR applies, to the competent data-protection supervisory authority. KVKK requests should first be submitted to us using the contact details above.
We may ask for information needed to verify your identity and request. We will respond within the period required by applicable law.
We may update this notice when our practices, providers, or legal obligations change. We will publish the revised notice with a new effective date and provide additional notice when required by law.
Questions and privacy requests can be sent to info@uskur.com.tr or mailed to:
Uskur Yazılım ve Bilişim Hiz. Ltd. Şti. Hilal Mah. Aleksander Dupçek Cad. 46/3 Çankaya / Ankara Türkiye