Last updated: 7 June 2026
This Privacy Policy explains how LGY YAZILIM DANIŞMANLIK VE BİLGİ TEKNOLOJİLERİ SANAYİ TİCARET LİMİTED ŞİRKETİ ("LGY", "we", "us") processes personal data collected through the marketing website at www.sitetransformer.com (the "Website").
This policy covers the marketing Website only. The Site Transformer service at console.sitetransformer.com is governed by its own privacy documentation and data processing agreement.
For data subjects in Türkiye, this policy is supplemented by our KVKK Information Notice, prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). For visitors in the EU/EEA and the UK, this policy is also designed to meet the transparency requirements of the General Data Protection Regulation ("GDPR").
The data controller is LGY (full registration details in Section 12). Contact for privacy matters: [email protected].
Because the Website is informational and does not contain a contact form or account sign-up (sign-up takes place on console.sitetransformer.com), the data we process is limited:
| Category | Examples | Source |
|---|---|---|
| Technical & usage data | IP address, approximate location derived from IP, device and browser type, operating system, referring URLs, pages viewed, timestamps, interactions | Automatically, via cookies and similar technologies, and via our hosting/CDN/DNS providers |
| Analytics data | Aggregated and pseudonymous statistics about how visitors use the Website | Google Analytics (see Cookie Policy) |
| Correspondence data | Your name, email address and the content of your message when you email us (e.g. [email protected]) | You, when you contact us |
| Marketing data | Email address and preferences where you have opted in to receive commercial electronic messages | You, at opt-in |
| Live chat data (if/when enabled) | Any information you provide through a website chat widget we may add in the future | You |
We do not intentionally collect special categories of personal data through the Website, and we ask that you do not send them to us.
| Purpose | KVKK basis (art. 5/6) | GDPR basis (art. 6) |
|---|---|---|
| Operate, secure and maintain the Website; prevent fraud/abuse | Legitimate interest of the controller; compliance with legal obligation | Legitimate interests (art. 6(1)(f)); legal obligation (art. 6(1)(c)) |
| Analytics and improving the Website | Explicit consent (via cookie banner) | Consent (art. 6(1)(a)) |
| Respond to your enquiries / correspondence | Establishment/performance of a contract; legitimate interest | Steps prior to a contract / legitimate interests (art. 6(1)(b)/(f)) |
| Send commercial electronic messages (marketing) | Explicit consent | Consent (art. 6(1)(a)) |
| Comply with legal obligations and defend legal claims | Legal obligation; establishment/exercise/defence of a right | Legal obligation / legitimate interests (art. 6(1)(c)/(f)) |
Where we rely on consent, you may withdraw it at any time (see Section 8); withdrawal does not affect processing carried out before withdrawal.
The Website uses strictly necessary cookies and, subject to your consent, analytics cookies. Details — including the specific cookies, their purpose and how to manage or withdraw consent — are in our Cookie Policy.
We use the following processors/service providers to operate the Website. They may process personal data on our behalf under appropriate contractual safeguards:
We may also disclose personal data to professional advisers, and to public authorities or courts where required by law or to establish, exercise or defend legal claims. We do not sell personal data.
The Website is hosted and served through global infrastructure, and some of our providers (e.g. AWS, Cloudflare, Google) process data on servers located outside Türkiye. This means personal data may be transferred abroad.
Under the KVKK (art. 9, as amended): cross-border transfers are made on the basis of, in order of priority, (a) an adequacy decision by the Personal Data Protection Board where one exists for the destination country/sector/organisation; or, absent that, (b) one of the "appropriate safeguards" — in particular a standard contract notified to the Board within the statutory period, or binding corporate rules; or (c) one of the exceptional grounds set out in art. 9, which may include your explicit consent for a specific transfer. We take reasonable steps to ensure an appropriate basis is in place for each transfer.
Under the GDPR: where data relating to EU/EEA or UK visitors is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum/IDTA where applicable).
You may request information about the safeguards applied by contacting [email protected].
We keep personal data only as long as necessary for the purposes above or as required by law:
Where a longer period is required to comply with a legal obligation or to defend a legal claim, that period applies.
If you are in Türkiye (KVKK art. 11), you have the right to learn whether your data is processed and request information about it; to know the purpose of processing and whether data is used accordingly; to know the third parties to whom data is transferred at home or abroad; to request correction of incomplete/inaccurate data; to request erasure or destruction; to request that corrections, erasures and destructions be notified to third parties to whom data was transferred; to object to results arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing. To exercise these rights, follow the application procedure in our KVKK Information Notice, or contact [email protected]. You may also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK — kvkk.gov.tr).
If you are in the EU/EEA or UK (GDPR), you have the rights of access, rectification, erasure, restriction, data portability, and objection (including to direct marketing), and the right not to be subject to certain automated decision-making. Where processing is based on consent, you may withdraw it at any time. You may lodge a complaint with your local data protection supervisory authority.
We will respond within the timeframes required by applicable law.
We apply reasonable technical and organizational measures appropriate to the risk — including transport encryption (TLS), access controls and provider-level safeguards — to protect personal data against unauthorized access, loss, misuse or alteration. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
The Website is intended for a professional/business audience and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will take appropriate steps.
We may update this Privacy Policy from time to time. The current version is always posted here with its "Last updated" date. Material changes will be highlighted on the Website.
LGY YAZILIM DANIŞMANLIK VE BİLGİ TEKNOLOJİLERİ SANAYİ TİCARET LİMİTED ŞİRKETİ