Privacy policy

1. Who we are

This policy explains how AppVest processes personal data when you visit this website, contact us, submit a project, apply for a job or apply to become a manufacturing partner. It follows the EU General Data Protection Regulation (GDPR), the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where they apply, US state privacy laws. The controller is:

AppVest Intelligent Manufacturing Yazılım Web Tasarım Danışmanlık İmalat Mühendislik İhracat İthalat Sanayi ve Ticaret A.Ş.
Turuncu Bina, Ostim OSB, Cevat Dündar Cd.
Kat: 1, No: 1/1
06374 Yenimahalle / Ankara
Türkiye
Email: info@app-vest.com

The information notice required by Article 10 of the KVKK is available on a separate page: KVKK information notice.

2. What we collect

• Contact and business details you give us: name, company, job title, email, phone, country and the content of your message.
• Project information: drawings, 3D models, bills of materials and specifications. These are mainly business data but may contain personal data, for example names in drawing title blocks.
• Job applications: your CV, contact details, LinkedIn profile, education, work history and cover note.
• Partner applications: company details, contact person and information about your capabilities.
• Technical data recorded by our web server: IP address, date and time of access, pages requested, browser and operating system.

3. Purposes and legal bases

• Answering enquiries, reviewing projects and preparing proposals: steps prior to a contract (Art. 6(1)(b) GDPR; Art. 5(2)(c) KVKK).
• Carrying out orders, including sharing the necessary project data with the manufacturing partners involved: performance of a contract (Art. 6(1)(b) GDPR; Art. 5(2)(c) KVKK).
• Keeping commercial and tax records: legal obligation (Art. 6(1)(c) GDPR; Art. 5(2)(ç) KVKK).
• Operating and securing the website, preventing misuse and defending legal claims: legitimate interests (Art. 6(1)(f) GDPR; Art. 5(2)(e) and (f) KVKK).
• Recruitment and the selection of manufacturing partners: steps prior to a contract and legitimate interests (Art. 6(1)(b) and (f) GDPR; Art. 5(2)(c) and (f) KVKK).

We do not send marketing emails without your consent, we do not sell personal data and we do not use automated decision-making or profiling.

4. Your drawings and technical data

We treat drawings, models and specifications as confidential. We use them only to review your request and, if you place an order, to manufacture and inspect your parts. We share them only with the manufacturing partners working on your project, who are bound by confidentiality obligations, and we never publish them. On request we sign your NDA, or ours, before you share any files.

5. Who receives data

Depending on the purpose, personal data may be received by: manufacturing partners involved in a project, logistics and customs service providers, IT, hosting and email providers, the form delivery service FormSubmit (formsubmit.co), our accountants, auditors and legal advisors, our affiliated company in Germany where a contract is concluded through it, and public authorities where we are legally required to disclose data. Service providers process data only on our instructions and under confidentiality obligations.

6. International transfers

AppVest is based in Türkiye. If you contact us from the European Union or the United States, your data is processed in Türkiye to handle your request. Where data is transferred to other countries, for example to service providers or to customers' sites abroad, we rely on appropriate safeguards such as standard contractual clauses or, where applicable, on the necessity of the transfer for a contract with you (Art. 49(1)(b) GDPR). Transfers from Türkiye are made under Article 9 of the KVKK.

7. Cookies and tracking

This website does not use cookies, analytics or advertising tools. Fonts are served from our own server. Links to Google Maps, LinkedIn and our manufacturer portal open those services only when you click them; their own privacy policies apply there.

8. How long we keep data

• Enquiries that do not lead to an order: up to two years after our last contact.
• Customer, order and supplier records: for the periods required by commercial and tax law, generally ten years.
• Job applications: six months after the recruitment process ends, unless you agree to a longer period.
• Partner applications: up to two years, or for the duration of the partnership.
• Server log files: for a short period, unless they are needed to investigate a security incident.

After these periods, data is deleted, destroyed or anonymised.

9. Security

The website is served over an encrypted connection. Access to project files and personal data is limited to employees who need it for their work, and manufacturing partners receive only the data required for their part of a project. No transmission over the internet is completely secure; contact us if you need a dedicated secure channel for sensitive data.

10. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and you may withdraw any consent at any time. You can also lodge a complaint with a data protection supervisory authority. Your rights under the KVKK are set out in our KVKK information notice. If you live in a US state with a consumer privacy law, you may have the right to know, correct and delete personal data we hold about you; we do not sell personal data or share it for targeted advertising, and we will not treat you differently for exercising your rights.

To exercise your rights, write to info@app-vest.com. We answer within 30 days.

11. Changes to this policy

We may update this policy when our services or legal requirements change. The date at the top shows the current version.