Privacy notice
Privacy Notice (Processing of Personal Data)
1. Data controller
Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Impact Nest Eğitim, Araştırma ve Danışmanlık Limited Şirketi ("ImpactNest", the "Company") as data controller, within the scope described below.
Address: Zühtüpaşa Mah. Şefik Bey Sk. No:3 Archerson Köşkü, 34724 Kadıköy / İstanbul, Türkiye
Email: info@theimpactnest.org
Mersis No: 0465163867700001
2. Personal data processed
We process only the data you send us through our website. The site runs no analytics tool that tracks visitor behaviour.
If you complete the contact form: your name, your organisation, your email address, your phone number if you choose to share it, the subject of your request and any information in your message.
Technically on each visit: your IP address is processed only to prevent misuse and only as an irreversible salted hash. Your raw IP address is not stored. These records are deleted within 24 hours.
3. Purposes of processing
- To receive, evaluate and respond to your request
- To answer questions about our services and provide proposals where needed
- To ensure the security of the website and prevent automated and malicious submissions
- To fulfil our legal obligations and provide evidence in possible disputes
Your personal data is not used to send marketing messages without your consent. Newsletter subscription is subject to separate, explicit consent; completing the contact form does not subscribe you to the newsletter.
4. Legal grounds
Your data is processed under Article 5 of the KVKK: performance of a contract (art. 5/2-c); compliance with a legal obligation (art. 5/2-ç); the legitimate interests of the Company provided your fundamental rights are not harmed (art. 5/2-f, site security and abuse prevention); and your explicit consent (art. 5/1, only for newsletter subscription and, where necessary, cross-border transfer).
5. Method of collection
Your personal data is collected electronically and automatically, through the forms on the website or by email you send us.
6. Transfer and cross-border transfer
To provide the service, your data is shared with the following providers acting as data processors, processing your data only on our instructions:
- Hostinger — website hosting and database — servers located in the European Union.
- Brevo (Sendinblue) — form notifications and email delivery — European Union (France).
- Google Workspace — corporate email — European Union and United States.
Because we use Google Workspace, some data may be transferred abroad (to the United States). Such transfer is carried out in accordance with the conditions of Article 9 of the KVKK (explicit consent or appropriate safeguards). Data may also be transferred to legally authorised public authorities upon request, within the limits of the law.
7. Retention
- Contact form submissions: 2 years, then automatically deleted.
- Salted IP hashes: 24 hours, then automatically deleted.
- Email correspondence: 5 years, then reviewed and deleted.
Records whose retention period has expired are deleted automatically by a scheduled task on the server.
8. Your rights
Under Article 11 of the KVKK you have the right to learn whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the third parties to whom it is transferred at home or abroad, request correction of incomplete or inaccurate data, request erasure or destruction under the conditions of the law, request that correction and erasure be notified to third parties, object to a result against you produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.
9. Application
You may submit your requests, in line with the Communiqué on Application Procedures to the Data Controller, to info@theimpactnest.org (from the email address registered in our system) or in writing to the address above with documents verifying your identity. Your request is concluded free of charge within thirty days at the latest; where the process requires an additional cost, the fee set by the Personal Data Protection Board may apply.
10. Updates
This notice is updated when legislation or the data collected on the site changes. The date of the current version appears at the bottom of the page.
1. Data controller
Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Impact Nest Eğitim, Araştırma ve Danışmanlık Limited Şirketi ("ImpactNest", the "Company") as data controller, within the scope described below.
Address: Zühtüpaşa Mah. Şefik Bey Sk. No:3 Archerson Köşkü, 34724 Kadıköy / İstanbul, Türkiye
Email: info@theimpactnest.org
Mersis No: 0465163867700001
2. Personal data processed
We process only the data you send us through our website. The site runs no analytics tool that tracks visitor behaviour.
If you complete the contact form: your name, your organisation, your email address, your phone number if you choose to share it, the subject of your request and any information in your message.
Technically on each visit: your IP address is processed only to prevent misuse and only as an irreversible salted hash. Your raw IP address is not stored. These records are deleted within 24 hours.
3. Purposes of processing
- To receive, evaluate and respond to your request
- To answer questions about our services and provide proposals where needed
- To ensure the security of the website and prevent automated and malicious submissions
- To fulfil our legal obligations and provide evidence in possible disputes
Your personal data is not used to send marketing messages without your consent. Newsletter subscription is subject to separate, explicit consent; completing the contact form does not subscribe you to the newsletter.
4. Legal grounds
Your data is processed under Article 5 of the KVKK: performance of a contract (art. 5/2-c); compliance with a legal obligation (art. 5/2-ç); the legitimate interests of the Company provided your fundamental rights are not harmed (art. 5/2-f, site security and abuse prevention); and your explicit consent (art. 5/1, only for newsletter subscription and, where necessary, cross-border transfer).
5. Method of collection
Your personal data is collected electronically and automatically, through the forms on the website or by email you send us.
6. Transfer and cross-border transfer
To provide the service, your data is shared with the following providers acting as data processors, processing your data only on our instructions:
- Hostinger — website hosting and database — servers located in the European Union.
- Brevo (Sendinblue) — form notifications and email delivery — European Union (France).
- Google Workspace — corporate email — European Union and United States.
Because we use Google Workspace, some data may be transferred abroad (to the United States). Such transfer is carried out in accordance with the conditions of Article 9 of the KVKK (explicit consent or appropriate safeguards). Data may also be transferred to legally authorised public authorities upon request, within the limits of the law.
7. Retention
- Contact form submissions: 2 years, then automatically deleted.
- Salted IP hashes: 24 hours, then automatically deleted.
- Email correspondence: 5 years, then reviewed and deleted.
Records whose retention period has expired are deleted automatically by a scheduled task on the server.
8. Your rights
Under Article 11 of the KVKK you have the right to learn whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the third parties to whom it is transferred at home or abroad, request correction of incomplete or inaccurate data, request erasure or destruction under the conditions of the law, request that correction and erasure be notified to third parties, object to a result against you produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.
9. Application
You may submit your requests, in line with the Communiqué on Application Procedures to the Data Controller, to info@theimpactnest.org (from the email address registered in our system) or in writing to the address above with documents verifying your identity. Your request is concluded free of charge within thirty days at the latest; where the process requires an additional cost, the fee set by the Personal Data Protection Board may apply.
10. Updates
This notice is updated when legislation or the data collected on the site changes. The date of the current version appears at the bottom of the page.
Last updated: 3 September 2026