What this site measures — and what it does not.

1. Summary

On this site, visit measurement (Google Analytics 4) runs only if you allow it; that is why your choice is asked on your first visit. If you do not allow it, the measurement code is not loaded, no measurement cookie is written and no measurement request is sent to Google Analytics. There is no advertising, remarketing or profiling tag, no embedded third-party content and no external web fonts. The web server’s technical logs (section 4) are kept in any case. You can change your choice at any time using the “Privacy choices” control at the bottom of every page.

2. Data controller

The data controller for this website is DiligencePilot (diligencepilot.com) — the party that operates the site and determines the purposes and means of processing. This page is the information notice required by art. 10 of the Turkish Data Protection Law (KVKK, Law No. 6698).

You may send requests under KVKK art. 11 to info@diligencepilot.com. They are answered within 30 days at the latest, as required by KVKK art. 13.

Stated openly rather than glossed over: KVKK art. 3/1(ı) defines a data controller as a natural or legal person. “DiligencePilot” is a brand name and is neither, so this line improves the notice but does not fully satisfy the identity element of art. 10. No legal entity, registered address or VERBİS record has been invented here; this is a known and recorded gap. When a verified legal identity exists, it will be named here.

3. Cookies and similar technologies

With your permission, first-party measurement cookies are used for Google Analytics 4, measurement ID G-XWHY5JH34C: _ga and _ga_XWHY5JH34C, with a lifetime of 90 days. Ninety days is not a legal limit — it is our voluntary data-minimisation choice, and the period is not restarted on each visit. If you do not allow measurement, these cookies are not written and no measurement request is sent to Google Analytics; the default state is declined.

Ad personalisation and Google signals are switched off in code, and there is no advertising, remarketing or user-profiling tag on this site. Measurement data is not anonymous but pseudonymous: Google Analytics assigns a random identifier to distinguish your browser. Besides page views, the following are also counted: first visit, session start, engagement time, reaching about 90 % of a page, outbound-link clicks (this site links to two external addresses, both on this page) and downloads of the brand files offered on the Brand and Banner Library pages. There is no video and no site search on this site, so those events cannot occur — the banner filter runs entirely in your browser and never appears in the address bar.

Your choice is stored in this browser for 12 months in a local record that is not a cookie and is never sent to a server: your decision, the date it was made, its expiry date and the consent-scope version (technical record name: dp-riza). Acceptance and refusal are stored for the same period. Wording, design or explanation updates do not reset your choice; you are asked again only if the purpose, the data categories, the provider, the recipients or the measurement features used expand materially. When a page of this site is displayed inside a frame (iframe) on another site, the consent banner is not shown and measurement is never started — even if an acceptance is already recorded; consent is asked and applied only on direct visits.

4. Server access and security logs

When the site is accessed, standard technical information such as the IP address, access time, requested page, browser or device information and the server response code may be processed on the hosting infrastructure in order to serve the website and keep it secure. These logs are not used for advertising or marketing, no behavioural profile is built from them, and they are not fed into any separate visit-measurement system.

No aggregated visit counting is carried out on these logs. If such counting is ever introduced, a written legitimate-interest balancing test will be prepared first and this text will be updated beforehand.

Stated plainly, not yet verified: the hosting provider’s full legal name, the actual retention period of the server logs and the country or countries in which they are processed have not been verified by us. Until these three facts are verified, this section is not considered complete; uncertain information is not written here by guesswork — it will be added once verified.

5. Third-party content and the hosting infrastructure

The published package contains no embedded third-party content: no video, no maps, no social embeds, no external web fonts and no external CDN scripts. Apart from Google Analytics after your permission, the pages make no third-party requests.

The site is served on shared hosting, and such providers can append their own traffic script to the pages they serve — an addition that is not part of the package and that an on-page consent control cannot block. This was measured on the live site on 31 August 2026: the home page, this page, the Contact and Architecture pages, the 404 page and both the www and non-www addresses were requested, and no injected provider script and no Set-Cookie header were observed. Because provider behaviour can change without notice, this section will be re-measured and updated for each release.

6. Outbound links

This site links to two external addresses, both of them on this page: the Google Analytics opt-out add-on and the website of the Turkish Personal Data Protection Authority. No request is sent to them unless you click. When you follow such a link you leave this website, and the data processing, cookie and privacy practices of the site you open are governed by its own published texts.

7. Purposes of processing

• Visit measurement (only with permission) — understanding which content is of interest and improving the site. Legal basis: explicit consent (KVKK art. 5/1).
• Technical access and security logs — operating the site, information and system security, detecting faults and outages, preventing unauthorised access and abuse, and legal obligations where applicable. If legitimate interest is to be relied on for these logs, a concrete balancing test will be prepared first; that test has not yet been prepared.
• Correspondence — if you write to the address in section 2, your message and address are processed in order to answer you. Legal basis: legitimate interest (KVKK art. 5/2-f). This is a separate purpose and is not covered by the measurement consent.

8. Transfers of personal data

If you allow measurement, your visit data is transferred to Google and may be processed outside Türkiye on Google’s infrastructure (KVKK art. 9). The legal basis for this transfer is your explicit consent.

Stated plainly: this transfer is regular in nature, and the Law additionally requires an appropriate safeguard for regular transfers — for example the standard contract issued by the Personal Data Protection Board. No such contract has been concluded with Google. The site owner has chosen to run measurement on the basis of explicit consent while this gap persists. This text therefore does not claim full legal compliance. If you do not allow measurement, no such transfer takes place.

Verification of the recipient, the role, the country and the safeguard mechanism for the hosting provider and any sub-processors that handle the server access logs is still outstanding (see section 4).

9. Retention periods

• Measurement cookies (_ga, _ga_XWHY5JH34C): 90 days — a voluntary minimisation, not a legal limit.
• User- and event-level data on Google Analytics servers: 2 months. This is GA4’s default retention setting; this site has not requested an increase.
• Consent record (dp-riza): 12 months, for acceptance and refusal alike.
• Server access and security logs: the period is set by the hosting provider; as stated in section 4, the actual period has not yet been verified by us.
• Correspondence about KVKK requests: for the periods required by law and for possible disputes.

10. Your rights under the KVKK

Under art. 11 of Law No. 6698 you may: learn whether your personal data are processed; request information if they are; learn the purpose of processing and whether the data are used in line with it; know the third parties to whom they are transferred; request rectification of incomplete or incorrect data; request erasure or destruction where the legal conditions are met; request that rectification and erasure be notified to the recipients; object to a result arising against you exclusively from automated analysis; and claim compensation for damage.

You can withdraw your measurement permission at any time, without giving a reason, using the “Privacy choices” control at the bottom of every page — no request is needed. On withdrawal the measurement cookies are deleted and no new measurement request is sent to Google Analytics. You can also block or delete cookies for this site in your browser settings, or install the Google Analytics opt-out browser add-on.

Send requests to info@diligencepilot.com; they are answered within 30 days at the latest. If a request is refused, answered inadequately or answered late, you may complain to the Turkish Personal Data Protection Board (kvkk.gov.tr). If you are in the European Economic Area or the United Kingdom, you may instead complain to your own national supervisory authority.

11. How the privacy choices work

On your first visit, three equal options are offered: Allow measurement · Continue without measurement · Review settings. The three are identical in size, colour and typeface; none is preselected, and closing or ignoring the notice is not treated as consent. The default state is declined, and no measurement request is sent to Google Analytics before you allow it. In the settings panel the measurement switch starts in the “Off” position and is never switched on for you.

If your browser blocks local storage — in private browsing, for example — your choice cannot be recorded in a verifiable way, so measurement is never started and the notice tells you why. You are asked again after 12 months, or if the measurement scope expands materially.

Measurement ID: G-XWHY5JH34C · Consent-scope version: analytics-scope-01 — stored together with your choice. Corrections to the wording of this page do not reset your consent.