What is KVKK & ISO Compliance?
Every business with a website processes its visitors' personal data in some way: contact form, cookies, server logs. From the moment this data is processed it falls under Law No. 6698, and the obligation does not change with the size of the business.
Compliance is not just having a few texts on the site. The texts must match the data you actually process, tracking code must not run before consent, and incoming requests must be answerable.
What's included?
- Current-state analysis: which data is processed where
- Privacy notice, privacy policy, cookie policy and terms of use
- Cookie banner and consent management infrastructure
- Storing consent records in a provable form
- Setting up the data subject request flow
- List of third parties and transfers abroad
- Retention periods and disposal routine
How we work
- 01
Inventory
Which data is collected from where and for what purpose is worked out.
- 02
Texts
Written according to actual processing activity; copied text provides no protection.
- 03
Technical setup
Cookie banner, blocking code before consent, consent logging.
- 04
Request flow
Which address requests go to and who answers is defined.
- 05
Review
Texts are updated when a new tool or process is added.
What determines the price?
Since every project is different, we don’t give a single list price. The items that determine the quote are:
- Types of data processed and number of processes
- Number of third-party services used
- Whether e-commerce brings additional obligations
- Ongoing consultancy can be added optionally
