Legal and privacy

Privacy and cookies

Last updated: 1 September 2026

1. In short

Visit measurement (Google Analytics 4) on this site runs only if you allow it, which is why you are asked on your first visit. If you do not allow it, the measurement code is not loaded, no measurement cookie is written and no measurement request is sent to Google Analytics. The default state is refused; no silent acceptance and no pre-ticked box is used. There is no advertising, remarketing or profiling tag on the site. The server's technical logs (below) are always kept. You can change your choice at any time from the Privacy choices button at the bottom of the page.

2. Data controller

The data controller for this website is Multiversera Teknoloji Yatırımları Anonim Şirketi; it operates the site and determines the purposes and means of processing personal data. This section is published to meet the disclosure duty under Article 10 of the Turkish Data Protection Law (KVKK).

The company's MERSİS number, tax office and number, and registered address are not published on this site; because we have not verified them, they are not written here. They will be added to this section once verified.

3. Cookies and similar technologies

If you allow it, first-party measurement cookies are used for Google Analytics 4 (measurement ID G-LYJCWRXKH7): _ga and _ga_LYJCWRXKH7. Their lifetime is 90 days; this is not a legal limit but our voluntary data-minimisation choice, and the period is not restarted on each visit. If you do not allow it, these cookies are not written and no measurement request is sent to Google Analytics. Ad personalisation and Google signals are disabled in code. The measurement data is not anonymous but pseudonymous: you are not asked who you are, but a random identifier distinguishing your browser is used. In addition to page views, first visit and session start, engagement time, reaching about 90% of the page and outbound-link clicks are counted; this site has four external targets (Anadolu Agency, YouTube, Google's opt-out page and the Turkish Data Protection Authority). Downloads of the ten public PDF documents may also be counted, and if you play the video, video-engagement events may occur. There is no search form on this site, so no site-search event occurs.

Your choice — the decision, its date, its expiry date and the consent-scope version — is stored in this browser for 12 months in a local record that is not a cookie (technical record name: mv-riza). This record is never sent to a server and is not used for measurement, advertising or profiling. Acceptance and refusal are stored for the same period. Wording, design or explanatory updates do not reset your choice; you are asked again only if the purpose, data categories, provider, recipients or measurement features expand materially. If your browser blocks local storage (private mode, for example), your consent cannot be recorded in a provable way, so measurement is never started and you are told why.

4. Server access and security logs

When the site is accessed, standard technical information such as the IP address, access time, requested page, browser or device information and server response code may be processed in the hosting infrastructure in order to deliver the website and keep it secure. These logs are not used for advertising or marketing, no behavioural user profile is built, and they are not transferred to a separate visit-measurement system. No aggregated visit count is produced from the server logs either; if one is introduced, a written legitimate-interest balancing test will be prepared first and this text will be updated.

Explicitly not yet confirmed: the hosting provider's full legal name, the actual retention period of the server logs and the country or countries in which the logs are processed have not been verified by us. This section is not complete until those three facts are verified; uncertain information is not written by guesswork and will be added here once confirmed.

5. Embedded video and external links

The video in the “From the archive to today” section loads on click. The preview image is produced on our own server; when the page opens no request goes to YouTube and no third-party cookie is written. Only if you click play — a deliberate user action — is the video loaded from the youtube-nocookie.com domain. For this reason no separate consent switch is produced for embedded content; your click is the decision itself. Once you play the video, YouTube's own cookies and services may come into play; that is governed by YouTube's own privacy terms.

External links on the pages open in a new tab. No request is sent to the linked site unless you click the link. When you open a link you leave this site; the personal-data, cookie and privacy practices of the site you open are governed by its own texts.

6. Purposes of processing

Visit measurement (only with permission): to understand which content is of interest and to improve the site — legal basis: explicit consent (KVKK Art. 5/1). Email correspondence: data you send us by email is used only for that conversation — legal basis: legitimate interest (Art. 5/2-f). Technical access and security logs: operating the site, ensuring information and system security, detecting errors and outages, preventing unauthorised access and, where required, meeting legal obligations. If legitimate interest is to be relied on for server logs, a concrete balancing test will be prepared first — that test has not been prepared yet.

7. Transfers of personal data

If you allow measurement, your visit data is transferred to Google and may be processed outside Türkiye on Google's infrastructure (KVKK Art. 9). The legal basis for this transfer is your explicit consent. We state this openly: the transfer is regular in nature and the Law requires an additional appropriate safeguard for regular transfers (for example the Board's standard contract); no such contract has been concluded with Google. The site owner has chosen to run the measurement on the basis of explicit consent while this gap persists. This text therefore does not claim full regulatory compliance. If you do not allow it, no transfer takes place at all. For the hosting provider and sub-processors handling server access logs, verification of the recipient, role, country and mechanism is still in progress.

8. Retention periods

• Measurement cookies (_ga, _ga_LYJCWRXKH7): 90 days (voluntary minimisation).
• User and event data on Google Analytics servers: 2 months — this is GA4's default setting and has not been increased by us.
• Consent record (mv-riza): 12 months; acceptance and refusal are stored for the same period.
• Server access and security logs: the period is determined by the hosting provider; the actual period has not yet been confirmed by us.
• Correspondence relating to KVKK requests: for the periods set by the applicable legislation and any potential dispute.

9. Your rights under the KVKK

Under Article 11 of Law no. 6698 you have the right to: learn whether your personal data is processed; request information if it has been; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties to whom it is transferred; request correction if it is incomplete or incorrect; request erasure or destruction where the legal conditions are met; request that correction and erasure be notified to the parties to whom the data was transferred; object to an outcome against you arising solely from automated analysis; and claim compensation for damage.

You may withdraw your permission for measurement at any time, without giving a reason, from the Privacy choices button at the bottom of the page; no application is needed. When you withdraw it, the measurement cookies are deleted and no new measurement request is sent to Google Analytics.

You may send your requests to info@multiversera.com; under KVKK Art. 13 they are answered within 30 days at the latest. If your request is refused, answered insufficiently or not answered in time, you may lodge a complaint with the Turkish Personal Data Protection Board (kvkk.gov.tr). If you are visiting from the European Economic Area you may also contact the data protection authority in your own country.

10. How the privacy choices work

On your first visit three equal options are offered: Allow measurement · Continue without measurement · Review settings. The three buttons have the same size, colour and type size; the accept button is not emphasised and is not the keyboard default. In the settings panel the measurement category is not pre-ticked. You are asked again after 12 months, or if the scope of the measurement expands materially. If this site is displayed inside a frame (iframe) on a sister site, the consent banner is not shown and measurement never starts — even if you have previously given permission.

Ways to switch measurement off, starting with the most direct: (1) the Privacy choices button at the bottom of the page — the primary route; measurement stops immediately and the _ga cookies are deleted; (2) blocking this site in your browser's cookie and site-data settings; (3) Google's browser add-on (tools.google.com/dlpage/gaoptout). Measurement ID: G-LYJCWRXKH7 · consent-scope version: analytics-scope-01.

11. Contact and applications

For questions about this text and for KVKK requests: info@multiversera.com (Multiversera Teknoloji Yatırımları Anonim Şirketi). The address is written as plain text rather than as a link; you can copy it and paste it into your email program.