1. Who we are

This website, sanug.com.tr (the "Site"), is operated by Sanug Teknoloji A.Ş. ("SANUG", "we", "us"), a company registered in Türkiye with its registered office at Akarca Mah. Mustafa Kemal Blv. No: 173B, 48300 Fethiye / Muğla, Türkiye. SANUG is the data controller for the personal data described in this policy. You can reach us at webpost@sanug.com.tr.

2. Scope

This policy explains what personal data we collect through the Site, why we collect it, how long we keep it and what rights you have. It applies to the Site only. Products and games published by SANUG have their own privacy notices, which are made available within each product or on its own website.

3. What we collect and why

3.1. Contact form

When you use the contact form, we receive the name, e-mail address, topic and message you enter. We use this information solely to respond to your request. The message is delivered to our mailbox by e-mail and is not stored in any other system on the Site.

3.2. Form protection

To protect the contact form and the newsletter sign-up from automated abuse, the Site uses Cloudflare Turnstile, a security check provided by Cloudflare. When you start filling in either form, the check is loaded from Cloudflare's servers and processes technical information such as your IP address and browser characteristics to tell people from automated programs. Cloudflare states that this information is not used to identify, profile or target individuals; see its Turnstile Privacy Addendum. To limit repeated submissions, the Site also keeps a one-way coded record of the internet addresses that send these forms, which is deleted after 24 hours.

3.3. Newsletter

If you subscribe to our newsletter, we store your e-mail address with our newsletter service provider in order to send you occasional updates about SANUG. You can unsubscribe at any time using the link included in every newsletter, or by writing to us.

3.4. Website analytics

We use Google Analytics to understand how the Site is used, for example which pages are visited and from which countries. This service sets cookies on your device and processes technical information such as your approximate location, browser type and the pages you view. The data we receive is aggregated and does not identify you by name. Details are given in our Cookie Policy.

3.5. Server logs

Like every website, the server that hosts the Site records technical information about each visit, including the IP address, date and time, pages requested and browser type. These logs are used only to keep the Site secure and operational and are kept for a limited period. Fonts used on the Site are loaded from Google Fonts; see our Cookie Policy for details.

4. Legal basis

We process your personal data on the following grounds: your consent, where you subscribe to the newsletter or accept analytics cookies; the steps needed to respond to a request you make through the contact form; and our legitimate interest in keeping the Site secure and understanding how it is used. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

5. Sharing of personal data

We do not sell personal data. We share it only with the service providers that make the Site work, namely our hosting, e-mail, security, newsletter and analytics providers, each of which processes data on our behalf and under its own terms, and with public authorities where the law requires us to do so.

6. International transfers

Our newsletter and analytics providers are based in the United States. If you subscribe to the newsletter or accept analytics cookies, the related data is transferred to and processed in the United States with your consent. The security check on the contact form and the newsletter sign-up is provided by Cloudflare, a company based in the United States; the related technical information may be processed outside Türkiye.

7. How long we keep personal data

Contact form messages are kept in our mailbox for as long as needed to handle your request and for a reasonable period afterwards for our records. Records used to limit repeated form submissions are deleted after 24 hours. Newsletter subscriptions are kept until you unsubscribe. Analytics data is retained according to the retention settings of the analytics service. Server logs are kept for a limited period defined by our hosting provider.

8. Your rights

Under the data protection legislation of the Republic of Türkiye, including the Personal Data Protection Law, you have the right to learn whether we process your personal data, to request access to it, to ask for correction or deletion, to object to processing in certain circumstances and to withdraw any consent you have given. To exercise these rights, write to webpost@sanug.com.tr. We will respond within the time limits set by applicable law. If you believe your request has not been handled properly, you may also lodge a complaint with the Turkish Personal Data Protection Authority.

9. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. The Site is served over an encrypted connection (HTTPS).

10. Children

The Site is not directed at children, and we do not knowingly collect personal data from children through it.

11. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed. Continued use of the Site after a change means the updated policy applies.

12. Contact

Questions about this policy or about your personal data can be sent to webpost@sanug.com.tr or by post to Sanug Teknoloji A.Ş., Akarca Mah. Mustafa Kemal Blv. No: 173B, 48300 Fethiye / Muğla, Türkiye.