Home

Privacy Policy and Disclosure

Data Privacy on B2B Deep-Tech Platforms and the GDPR/KVKK Intersection

Last Updated: July 26, 2026
Data Controller: Spikedge A.Ş. — Ulutek Teknopark, Bursa, Türkiye
Contact Email: bilgi@spikedge.com.tr

1. Purpose and Corporate Scope

At Spikedge, we provide B2B high-engineering services in deep-tech domains such as Edge AI, Embedded Systems, Yocto Linux, RTOS, and EtherCAT. We reflect the same rigor, discipline, and security-centric approach used in building our technological infrastructures into protecting the personal data of corporate representatives, engineers, and visitors utilizing our web platform.

This document is prepared to provide transparent and professional information under KVKK (Turkey) and the GDPR (EU) regulations regarding data collection, processing purposes, legal grounds, third-party transfers, security measures, and user rights. While we do not process CC payments or run typical e-commerce functions, electronic data is processed to establish project communication, distribute technical documents, and maintain platform security.

2. Processed Categories and Collection

Data is collected to enrich user experience, deliver whitepapers, and initiate engineering project evaluations either directly via self-declarations in our forms or — only after explicit cookie consent — via Google Analytics 4.

  • Identity & Contact: Name, Surname, Corporate Email, Phone (optional), Company Name.
  • Request & Project Data: Message content, technical details, project requirements.
  • Analytics: Anonymized IP address, device type, OS, browser, and page-view statistics — collected via Google Analytics 4 only after consent.

3. Purposes of Processing and Data Transfer

Data is processed strictly for B2B communication, providing requested technical assets, assessing project viability, and protecting our platform (hidden honeypot fields and rate limiting guard our forms against abuse). Form submissions are delivered to us by e-mail via our own SMTP infrastructure and stored in a local database (SQLite) on our own server, hosted by a Türkiye-based hosting provider; only authorized administrators can access these records. Collected data is never sold or shared with third-party ad agencies or data brokers. The only international transfer is Google Analytics 4 telemetry sent to Google LLC (USA), and only after your explicit consent.

4. Cookie Policy

Google Analytics 4 is the only third-party analytics tool on this site, and we use no advertising or marketing cookies whatsoever. Google Consent Mode v2 is implemented: analytics storage defaults to "denied" and is enabled only if you click accept on the cookie banner, while ad-related storage (ad_storage, ad_user_data, ad_personalization) is always denied. GA4 cookies (_ga, _ga_*) are set only after that consent. Your consent choice and theme preference are kept in your browser's localStorage ("spikedge-consent" key) rather than in cookies; no session cookies are set for public visitors (an admin session cookie exists only for administrators). If you decline, the site remains fully functional, and you can change your choice at any time via the banner or by clearing your browser data. In addition, our web servers keep cookieless, anonymous aggregate page-view statistics; this counter stores nothing in your browser, retains no identifiable data, and is used solely for internal site reporting.

5. Your Rights

Under Article 11 of the Turkish KVKK and the GDPR, you may learn whether your personal data is processed, request access, rectification, erasure or restriction, object to processing, and learn the third parties your data has been transferred to. Requests can be submitted to the data controller, Spikedge A.Ş. (Ulutek Teknopark, Bursa, Türkiye), at bilgi@spikedge.com.tr. Personal data is retained only for the periods required by the applicable legislation.