Privacy Policy.

DZDSoft is a custom IT studio based at ODTÜ Teknokent, Çankaya, Ankara, Türkiye. We design, build, secure, and operate software for clients across construction, façade engineering, education, and corporate sectors.

For the purposes of applicable data protection law — including the EU General Data Protection Regulation (GDPR) where it applies — DZDSoft is the data controller responsible for the personal data described in this policy. That means we decide why and how your personal data is processed.

We have not appointed a statutory Data Protection Officer, but a single point of contact handles all privacy matters. You can reach us at info@dzdsoft.com or by post at the address above.

This policy applies to personal data we process when you visit dzdsoft.com, contact us through the website or by email, or engage DZDSoft for services.

It does not cover third-party websites we link to, or the separate platforms we operate (for example cepheyedair.com, allinfacade.com, or FacadCAL+). Those services publish their own privacy notices, and you should review them when you use them.

Where we act as a processor on behalf of a client — handling personal data inside software we built for them — that client is the controller, and their own privacy notice and our data-processing agreement govern that activity.

We collect only what we need to respond to you, deliver our services, and keep the site secure.

— Information you give us

• Contact & enquiry data — your name, email address, and any phone number, company, or project details you choose to include when you fill in a form or email us.
• Service data — information you share with us while we scope, build, or support a project, including correspondence and account details.

— Information collected automatically

• Technical & usage data — IP address, browser and device type, operating system, referring pages, and the pages you view, collected through server logs and cookies.

Please don't send us sensitive personal data (such as health, religious, or biometric information) through the contact form — we don't ask for it and don't need it to respond.

We use the personal data we collect to:

• Respond to your enquiries and provide the information or quote you asked for;
• Deliver, manage, and support the services you engage us for;
• Operate, maintain, and improve this website and its performance;
• Keep our systems secure and prevent fraud or abuse;
• Meet our legal, tax, and accounting obligations;
• Where you have agreed, send you occasional updates about our work.

We do not use your data for automated decision-making that produces legal or similarly significant effects, and we don't sell it.

Where the GDPR applies, we rely on one of the following legal bases for each processing activity:

Consent

Where you have opted in — for example, to receive updates. You can withdraw consent at any time.

Contract

Where processing is necessary to provide a service you've requested or to take steps before entering a contract.

Legitimate interests

To run, secure, and improve our website and business, and to respond to enquiries — balanced against your rights and freedoms.

Legal obligation

Where we must process data to comply with the law, such as accounting records or a lawful request from authorities.

We use a small number of cookies to make the site work and to understand how it's used. Strictly necessary cookies are always active; analytics and any non-essential cookies are only set with your consent, which you give through our cookie banner and can change at any time.

For the full list of cookies, what they do, and how to manage them, see our Cookie Policy.

We never sell your personal data. We share it only where necessary, with:

• Service providers — trusted processors who host our site, deliver email, or provide analytics, all bound by contract to protect your data and use it only on our instructions;
• Professional advisers — such as accountants or lawyers, where reasonably required;
• Authorities — where we are legally required to disclose data, or to protect our rights, safety, and property;
• Business transfers — if DZDSoft is involved in a merger, acquisition, or asset sale, with appropriate safeguards in place.

We are based in Türkiye, and some of our service providers may process data in other countries. Where we transfer personal data subject to the GDPR outside the European Economic Area, we make sure an appropriate safeguard is in place — such as an adequacy decision, or the European Commission's Standard Contractual Clauses — so your data keeps an equivalent level of protection.

You can ask us for more detail about a specific transfer or safeguard at any time.

We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires.

Enquiry data

Typically retained for up to 24 months after our last contact, unless it becomes part of a client relationship.

Client & contract records

Kept for the duration of the engagement and for the period required by tax and accounting law afterwards.

Technical logs

Retained for a short period for security and troubleshooting, then deleted or aggregated.

When data is no longer needed, we securely delete it or anonymise it so it can no longer identify you.

As engineers, security is part of how we build. We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), access controls on a least-privilege basis, monitoring, and regular backups.

No method of transmission or storage is ever completely secure, so we can't guarantee absolute security — but we work to recognised industry standards and review our measures regularly.

Where the GDPR applies, you have the following rights over your personal data:

• Access — ask for a copy of the data we hold about you;
• Rectification — have inaccurate or incomplete data corrected;
• Erasure — ask us to delete your data in certain circumstances;
• Restriction — ask us to pause processing while a concern is resolved;
• Portability — receive your data in a portable format, or have it sent to another provider;
• Objection — object to processing based on legitimate interests or direct marketing;
• Withdraw consent — at any time, without affecting prior processing.

To exercise any of these, email us — we'll respond within one month, and we won't charge you in normal cases.

Our website and services are intended for businesses and professionals, not for children. We don't knowingly collect personal data from anyone under 16.

If you believe a child has provided us with personal data, please contact us and we'll delete it promptly.

We may update this policy from time to time as our practices, technology, or the law change. The "Last updated" date at the top always reflects the current version.

If we make a material change, we'll take reasonable steps to let you know — for example, with a notice on the website.

For any question about this policy or your personal data, contact us at info@dzdsoft.com, by phone on 0 850 840 99 11, or by post at ODTÜ Teknokent, Çankaya, Ankara, Türkiye.

If you're in the European Economic Area and believe we've handled your data improperly, you also have the right to lodge a complaint with your local data protection supervisory authority. We'd appreciate the chance to address your concern first, so please do reach out to us.