Privacy Policy — Labirento

At Labirento İletişim ve Bilgi Teknolojileri A.Ş. (“Labirento”, “we”), we take the security of your personal data seriously. This policy explains how your personal data is processed when you visit the labirento.com website and when you get in touch with us, and fulfils our duty to inform under the Turkish Personal Data Protection Law No. 6698 (“KVKK”).

Data controller

Your personal data is processed by the following company as data controller:

Labirento İletişim ve Bilgi Teknolojileri A.Ş.
Evliya Çelebi Mahallesi Sadi Konuralp Caddesi İKSV Vakfı Binası No:5 K:2 Beyoğlu / Istanbul, Turkey
Email: info@labirento.com
Phone: +90 532 488 64 42

Personal data we process

Contact details: your name, email address, phone number and company, when you send them to us through the contact form or by email.
Content of your request: information about your project, needs and similar details that you share in your message.
Technical data: server logs automatically recorded by our hosting provider for security and operational purposes when you visit the site, such as IP address, browser and device information, and the date and time of your visit, together with the site usage measurement data described in the “Cookies” section below.
App data: if you use our mobile apps, the data described in the “Our mobile apps” section below.

We do not ask for special categories of personal data through our website. Please do not include such information in your messages.

Our mobile apps

Labirento may publish apps on the App Store and Google Play. What an app processes depends on the features it offers; the privacy information on each app’s store page and the notices inside the app describe what applies to that app. In general, our apps may process:

Camera feed: In augmented reality features, the camera feed is used in real time to place virtual content in the real world. It is processed on your device and is neither transmitted to us nor stored, unless you choose to save or share the result.
Microphone and audio: Used only in features that involve audio recording or voice interaction, and only with your permission.
Photos and media: Accessed when you add content to the app or save something you created in the app to your device.
Location: Used only where a feature depends on it (for example showing content for a nearby venue) and only with your permission.
Usage and technical data: Usage statistics and crash reports, along with technical details such as device model, operating system version, app version and app-specific identifiers, to measure and improve stability. This data is not used to identify you directly.
Account details: If an app requires an account, information such as your name, email address and account preferences.
Purchases: In-app purchases are handled by Apple and Google; your payment and card details are never shared with us.

We do not track you for advertising and do not use cross-device advertising identifiers. If this ever changes for an app, it will be stated clearly on that app’s store page and inside the app, and the required permissions will be requested.

App permissions and deleting your data

You can withdraw camera, microphone, photo and location permissions at any time in your device settings. Deleting the app from your device also removes the data held on the device.

To delete your account and the app data we hold, use the account deletion step inside the app or send your request to info@labirento.com. Requests are completed within thirty (30) days at the latest; records we are legally required to retain are deleted or anonymised once that period ends.

Why we process your data

We process your personal data in order to:

respond to your enquiries and questions,
prepare proposals for the services you request and carry out business discussions,
keep the website secure and detect and fix technical issues,
comply with our legal obligations and respond to requests from competent authorities.

Legal bases and how we collect data

Your personal data is collected when you send it to us through our website’s contact form, by email or by phone, and automatically while you visit the site. It is processed on the following legal bases set out in Article 5 of the KVKK:

it is directly related to the conclusion or performance of a contract (Art. 5/2-c),
it is necessary for us to comply with a legal obligation (Art. 5/2-ç),
it is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms (Art. 5/2-f).

We do not sell your personal data or share it with third parties for advertising. Your data may be shared, only for the purposes above and in line with Articles 8 and 9 of the KVKK, with:

business partners and service providers we use for services such as website hosting, email delivery and site usage measurement,
app stores (Apple, Google) for distributing our mobile apps and the analytics or crash reporting providers we use to measure their stability,
legally authorised public authorities, when requested.

Our website is served through a hosting provider whose servers are located outside Turkey (Vercel Inc., USA), so server logs may be processed abroad. Messages sent through the contact form likewise reach us via our email delivery provider (Resend, USA) and are processed abroad in that context.

Cookies and third-party content

We use Google Analytics 4 on our website to understand how visits happen and to improve the site. It places a cookie in your browser that links your actions within a visit, and processes data such as the pages you view, where you came from, how long you stay, your approximate location, and your browser and device details. Your IP address is truncated before processing, and this data is not used to identify you directly. We do not track you for advertising and do not match measurement data with advertising identifiers.

Google Analytics is provided by Google Ireland Limited and Google LLC (USA), so this data may be processed outside Turkey. If you prefer to stay out of the measurement entirely, you can delete or block cookies in your browser settings, or install Google’s Analytics opt-out add-on.

Beyond this we use no advertising or tracking cookies. Fonts and libraries are served from our own server. When you click a video or project link in our work section, you are taken to third-party sites such as YouTube, whose own privacy policies apply.

How long we keep your data

We keep your personal data for as long as required for the purpose it was collected for and for the periods set out in the applicable legislation. When these periods end, your data is deleted, destroyed or anonymised.

Data security

We take the necessary technical and organisational measures to ensure an appropriate level of security, to prevent unlawful processing of and access to your personal data and to safeguard it. All connections to our website are encrypted (HTTPS).

Your rights under the KVKK

Under Article 11 of the KVKK, you have the right to apply to the data controller to:

learn whether your personal data is being processed,
request information about the processing if it has been processed,
learn the purpose of the processing and whether the data is used in line with that purpose,
know the third parties in Turkey or abroad to whom your personal data has been transferred,
request correction if your data has been processed incompletely or inaccurately,
request deletion or destruction of your data under the conditions set out in Article 7 of the KVKK,
request that third parties to whom your data was transferred be notified of any correction, deletion or destruction,
object to a result against you arising from the analysis of your data exclusively by automated systems,
claim compensation if you suffer damage because your personal data was processed unlawfully.

How to apply

You can send requests regarding your rights, together with information that identifies you, by email to info@labirento.com or in writing to our address above. We will respond to your request free of charge as soon as possible, and within thirty (30) days at the latest, depending on its nature. If the request involves an additional cost, a fee may be charged in line with the tariff set by the Turkish Personal Data Protection Board.

Changes to this policy

We may update this policy to reflect changes in legislation or in our services. The current version is always published on this page, and the “Last updated” date at the top shows the most recent change.