Privacy policy.

Data controller

Your personal data is processed by Delivery One Teknoloji A.Ş., headquartered in Ankara, Türkiye, as the data controller. Questions about this policy and requests concerning your personal data can be sent to info@delivery-one.com.

Personal data we process

We process only the data you provide to us directly or that is technically necessary to operate the website securely:

• Contact and quote form: Full name, company, work e-mail address, product of interest, daily parcel volume, message and the page the form was sent from.
• Datasheet requests: Full name, company, job title, phone number, work e-mail address and the requested document.
• Job applications: Full name, e-mail address, phone number, position applied for, LinkedIn or portfolio link, CV and cover letter.
• Newsletter: E-mail address.
• Chat assistant: The messages you type, the assistant’s replies and the time of the conversation.
• Server logs: IP address, browser information, requested page and time of access. These logs are kept briefly, for security and troubleshooting only.
• Visit statistics: Page views, active time on a page, scroll depth and clicks are measured without cookies and without storing any identifier on your device. To tell visits apart, your IP address and browser details are turned into an irreversible digest with a key that changes daily; your IP address is not stored. Only aggregated figures (page, time, referring site, country, device type) are produced.

Purposes and legal bases

We process your personal data under Article 5 of the KVKK and, where it applies, Article 6 of the GDPR, for the following purposes and on the following legal bases:

• Responding to quote, partnership and investor requests: Processing is directly related to entering into a contract (KVKK Art. 5/2-c).
• Sending the requested datasheet and following up on the request: Processing is directly related to entering into a contract, and our legitimate interest (Art. 5/2-c, Art. 5/2-f).
• Evaluating job applications and running the recruitment process: Processing is directly related to entering into a contract (Art. 5/2-c). Keeping your application for future openings: Your explicit consent (Art. 5/1).
• Sending the newsletter: Your explicit consent, which you can withdraw at any time through the link in every e-mail (Art. 5/1).
• Providing the chat assistant and improving the quality of its answers: Our legitimate interest (Art. 5/2-f).
• Ensuring the security and continuity of the website: Our legal obligations and legitimate interest (Art. 5/2-ç, Art. 5/2-f).

Transfers of personal data

We share your personal data only with service providers that help us operate the website and respond to your requests, under written agreements and confidentiality obligations:

• Amazon Web Services: Hosting, data storage and e-mail delivery. Data is stored on servers in the European Union (Frankfurt).
• Anthropic: The language model service that generates the chat assistant’s replies. Chat messages are processed in the United States for this purpose.

As these providers’ servers are located outside Türkiye, such transfers are carried out in accordance with Article 9 of the KVKK: on the basis of an adequacy decision, standard contracts notified to the Personal Data Protection Board or, where neither applies, your explicit consent. We do not sell your personal data or share it with third parties for advertising.

Retention periods

We keep your personal data for as long as the purpose of processing requires:

• Contact, partnership and investor requests: 2 years after our last correspondence. If a contract is concluded, for the term of the contract and the statutory retention periods.
• Datasheet requests: 2 years from the date of the request.
• Job applications: 12 months after the position is closed. Up to 2 years if you agree to remain in our talent pool.
• Newsletter: Until you unsubscribe. Records of consent and its withdrawal are kept for the period required by law.
• Chat conversations: 6 months.
• Server logs: 90 days.
• Visit statistics: Visit digests 24 hours, event records 90 days; aggregated, anonymous counts indefinitely.

At the end of the retention period, data is deleted, destroyed or anonymised in line with our personal data retention and destruction policy.

Your rights

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is processed and, if so, request information about it.
• Learn the purpose of processing and whether the data is used in line with that purpose.
• Know the third parties in Türkiye or abroad to whom the data is transferred.
• Request the correction of incomplete or inaccurate data, its deletion or destruction where the legal conditions are met, and the notification of these actions to the third parties the data was transferred to.
• Object to a result to your detriment that arises exclusively from automated analysis.
• Claim compensation for damage caused by unlawful processing.

Where the GDPR applies, you also have the right to data portability and to lodge a complaint with the competent supervisory authority.

You can submit your request to info@delivery-one.com, together with information that allows us to verify your identity. Requests are resolved free of charge as quickly as their nature allows, and within 30 days at the latest.

Data security

We take appropriate technical and organisational measures to protect your personal data. All communication between your browser and our servers is encrypted with TLS. Form data is validated on the server, stored in systems with authorised access only, and visible only to the team members handling your request. CVs are kept in private storage that is not publicly accessible. Access to personal data is logged and reviewed regularly.

Children’s privacy

Our website and services are intended for businesses and adults. We do not knowingly process personal data of anyone under the age of 18. If you believe a child has sent us personal data, please contact us so that we can delete it.

Changes to this policy

We may update this policy in line with changes to our services or to the applicable legislation. The current version is always published on this page, and the date of the last update is shown at the top. We also announce significant changes on this page.