Privacy Policy

Summary

We collect personal data from visitors in one situation only: when you choose to write to us. Two optional things wait for your permission — a Google map, and an anonymous count of visits — and neither happens if you say no. This website sets no cookies for visitors and stores one thing in your browser: your answer to that question. What follows sets that out in the detail the law requires, together with what we keep about the people who manage the site.

Who is responsible for your data

Ada Yacht Brokerage is the data controller — the party that decides why and how your personal data is used — within the meaning of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

• Ada Yacht Brokerage
• Kemalpaşa, Cumhuriyet Cd. Necip Peker İş Hanı No:74 Kat:3 D:302, 41100 İzmit / Kocaeli, Türkiye
• adayachtbrokerage@outlook.com
• +90 539 420 41 35

What we collect, and when

Only what you type into the contact form, and only if you choose to send it:

• Your name — required
• Your telephone number — required
• Your email address — optional
• How you found us — optional
• The message you write — optional

Nothing that identifies you is collected from simply reading the site. We run no advertising and no tracking of any kind: we do not build a profile of you, and we do not follow you from one site to another. If you allow it, we count visits anonymously, as described below.

We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, write to us and we will delete it.

What happens when you press Send

The contact form has no server behind it. Pressing Send opens your own email application with the details you entered already written into a message. Nothing is transmitted, and nothing is stored anywhere, until you send that message yourself. If you close it instead, no data reaches us at all.

Once you do send it, the email arrives in our mailbox and is treated like any other message you might write to us: we read it, we reply, and we keep the thread while the conversation is live.

Anonymous visit statistics — only with your permission

When you first visit, a small card asks whether we may load the map and count your visit. If you accept, two tools from our hosting provider, Vercel, run in your browser: Vercel Web Analytics, which counts page views, and Vercel Speed Insights, which measures how quickly each page loads for real visitors. If you decline, or do not answer, neither runs.

Neither tool sets a cookie or stores anything in your browser, and both send what they measure to our own domain, not to a third-party address. According to Vercel, the data is recorded anonymously and is not tied to you or to your IP address; visitors are told apart by a value computed from the request, which Vercel discards after 24 hours. What may be recorded with each page view or measurement:

• the page, as its address without anything after it (we remove the part after a “?” or “#” before sending)
• the site that linked you here, if any
• your approximate location — country, and for page views region and city
• browser, operating system and device type, with their versions
• for speed: the loading measurements themselves and the type of network (such as 4G)
• the time it was received

The management panel is never measured. We see only totals — how many visits, which pages, from which countries — in Vercel’s dashboard, where our plan keeps them for one month. We use them to understand which pages people read and whether the site is fast enough, and for nothing else.

The legal basis is your consent (KVKK Article 5/1; GDPR Article 6(1)(a)). You can withdraw it at any time with the button on our Cookie Policy page; the statistics stop immediately.

Why we may use it, and on what legal basis

We use what you send us for one purpose: to answer your enquiry and to carry on the conversation you started. We do not use it for marketing, and we do not add you to a mailing list.

Under the KVKK the processing rests on Article 5/2(c) — processing necessary in connection with the conclusion or performance of a contract — and Article 5/2(f), our legitimate interest in responding to someone who has asked us to. Under the GDPR the corresponding bases are Article 6(1)(b) and Article 6(1)(f). Where neither applies, we rely on your explicit consent, which you give by choosing to send the message.

Who else sees it

Your enquiry reaches our own mailbox and the people at Ada Yacht Brokerage who need to answer it. We do not sell, rent, or trade personal data, and we do not pass it to anyone for their own purposes.

A few service providers are involved, each only for what it does for us. Our email is handled by a professional email provider, in the way every business’s email is. The website is hosted by Vercel Inc.: like any web host, its servers receive your IP address in order to deliver the pages to you, and, if you allow it, they run the visit statistics described above. The site’s content and the panel’s accounts are kept in a database run by Neon. And we may disclose data where a law, a court, or a competent authority requires it of us.

Data that leaves Türkiye

The contact section shows a map supplied by Google. It does not load unless you agree to it: until you do, the frame is not created and no request reaches Google. Once you agree, your browser connects to Google directly, and Google may receive your IP address and set cookies under its own domains, on servers outside Türkiye. That processing is Google’s, under its own privacy notice, and we neither control it nor receive anything from it. Once accepted, the map is shown on every visit until you withdraw your consent.

The frame is isolated from the rest of the page and can neither read nor change anything on it, and the address of the page you are reading is deliberately withheld from the request. Our Cookie Policy explains how to change your answer.

Our hosting and database are also outside Türkiye. The pages are delivered from Vercel’s servers, which are spread around the world so that each visitor is served from nearby; the part of the site that talks to the database runs in Frankfurt, Germany, and the database itself is in Frankfurt. The visit statistics, if you allow them, are processed on Vercel’s servers.

Fonts are served from our own domain rather than a font service, so no font provider learns of your visit.

What is stored in your browser

This site sets no cookies for visitors. One thing is written to your browser’s local storage, and only after you have been asked: the word accepted or declined, recording your answer about the map and the visit statistics. It holds nothing about you, it is never transmitted anywhere, and clearing your browser data removes it.

Nothing else is kept for visitors. The language you are reading is decided by the address of the page — /tr for Turkish, /es for Spanish — so there is nothing to remember between visits. The Cookie Policy sets this out in full, including the one cookie used by people who sign in to the management panel.

If you work in the management panel

The people at Ada Yacht Brokerage who manage the site’s listings and articles sign in to a private panel. For them, and only for them, we keep:

• the account: name, email address and role. The password is never stored — only a one-way hash of it, from which it cannot be recovered
• signed-in sessions: when each began, the IP address and the browser it was used from, so that a session on a lost device can be recognised and ended. A session lasts at most fourteen days
• failed sign-in attempts — the email address tried and the IP address — kept only to stop password guessing, and cleared at the next successful sign-in
• password-reset requests, with the IP address they came from, deleted after 24 hours
• an activity record of who changed what and when, with the IP address, so that every change to the public site can be accounted for

This is kept in the database in Frankfurt for as long as the account exists and the records are needed for the security of the site, on the basis of our legitimate interest in keeping the site secure and our working relationship with the people concerned (KVKK Article 5/2(c) and (f); GDPR Article 6(1)(b) and (f)). When a partner asks for a listing or an article to be translated, its text — not personal data — is sent to Groq, the translation service we use.

How long we keep it

No personal data about visitors is stored on this website, so retention applies to the email you choose to send, to the anonymous totals described above (one month in Vercel’s dashboard), and to the panel records described in the previous section. We keep enquiry correspondence for up to two years from our last exchange, so that we can pick up a conversation that resumes, and delete it after that.

Where an enquiry leads to an engagement, the records belonging to that engagement are kept for as long as the law requires us to keep them — ten years under the Turkish Code of Obligations, and the periods set by tax and commercial legislation — and deleted once every applicable period has run.

How it is kept safe

The site is served over an encrypted connection (HTTPS), and the database is reached only over encrypted connections. It holds no personal data about visitors. Panel passwords are stored only as one-way hashes, the panel’s cookie cannot be read by scripts, and repeated failed sign-ins are blocked. Correspondence is held in mailboxes protected by access control and reachable only by the people who need them. No system is beyond risk, and we do not claim otherwise; we take the measures that are reasonable for a business of this size and the data involved.

Your rights

Under Article 11 of the KVKK, and under the GDPR where it applies to you, you may ask us to:

• confirm whether we hold personal data about you, and give you a copy
• tell you why it was processed, and whether it is being used consistently
• correct it if it is incomplete or wrong
• delete it, or restrict what we do with it
• tell anyone we disclosed it to that it has been corrected or deleted
• object to processing based on legitimate interests
• withdraw a consent you have given, at any time
• receive it in a portable form, or have it sent to another controller (GDPR)
• claim compensation for damage caused by processing that breached the law

Write to adayachtbrokerage@outlook.com, or to the postal address above. We answer within thirty days under the KVKK and within one month under the GDPR, free of charge unless a request is manifestly unfounded or repetitive. We may first need to confirm who you are, so that we do not hand your data to somebody else.

If our answer does not satisfy you, you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu) or, in the EU, to your national supervisory authority.

Changes to this policy

If the way this website handles data changes, this page is updated before the change takes effect and the date at the top changes with it. Where a change requires your consent, we will ask for it rather than assume it — which is why everyone who had answered the earlier question about the map alone is asked again now that it also covers the visit statistics.