Privacy and Cookie Policy
This translation is provided for information only. The Turkish text is legally binding.
This policy explains how your information is protected and which cookies are used when you use the alanyatekmer.com website, the portal.alanyatekmer.com portal and the Alanya TEKMER mobile app (together, the "Services"), operated by ALANYA TEKNOLOJİ GELİŞTİRME MERKEZİ A.Ş. ("Alanya TEKMER" or the "Company"). Details on the purposes and legal grounds of processing, recipients and your rights are in the Personal Data Protection Notice.
1. Security Measures
Under Article 12 of the Personal Data Protection Law No. 6698, we apply the following technical and administrative measures:
- Encryption: All connections to the Services are encrypted with HTTPS (TLS). Turkish ID Numbers are additionally encrypted in the database with the AES-GCM algorithm. Passwords are stored as one-way hashes (bcrypt); plain-text passwords are never stored.
- Two-step verification: Logging in to the portal and mobile app requires, in addition to your email and password, a one-time verification code sent to your email. Failed attempts are limited, and repeated failures lock the account temporarily. Email and password changes are also confirmed with a verification code.
- Session security: Session cookies cannot be read by JavaScript (HttpOnly), are sent only over secure connections (Secure) and are not sent from other sites (SameSite). The session key is bound to a device fingerprint and renewed regularly.
- Access control: Each user can access only the data their role requires. Company users see only their own company's records. Committee members review applications without seeing Turkish ID Numbers; a Turkish ID Number can be displayed only to an authorized administrator, and every display is logged.
- Document security: Uploaded documents are kept in non-public storage and are served only to authorized users after identity and permission checks. Embedded information such as location (EXIF) is removed from uploaded images, and file types are verified by content.
- Misuse prevention: Forms are protected by Cloudflare Turnstile bot verification, rate limits and protection against cross-site request forgery (CSRF).
- Logging: Login attempts, administrative actions and failed requests are logged with time, IP address and user information. Only authorized staff can access these logs.
- Administrative measures: Staff and service providers with access to data are bound by confidentiality; access rights are limited to what each role needs and are reviewed regularly. Backups are taken regularly.
No transmission over the internet can be guaranteed to be entirely risk-free. If we learn that your personal data has been obtained by others unlawfully, we will notify you and the Personal Data Protection Board as soon as possible under Article 12 of the Law. If you notice suspicious activity on your account, please write to [email protected].
2. Cookies and Similar Technologies
Cookies are small text files that a site stores in your browser. The Services also use browser storage (localStorage, sessionStorage), and the mobile app uses the device's secure storage.
Essential cookies are needed for the site and portal to work, stay secure and keep you signed in; no consent is requested for them, and blocking them in your browser may stop parts of the Services from working. Statistics cookies are used only if you give explicit consent by choosing "Accept" in the cookie notice. If you choose "Essential only", no statistics cookies are set.
alanyatekmer.com
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| TEKMER_SESSION | Alanya TEKMER | Keeping the session and protecting the contact form against forged requests (CSRF) | Essential, first party | Deleted when the browser closes |
| site_lang | Alanya TEKMER | Remembering your language choice (Turkish/English) | Functional, first party | 1 year |
| cookieConsent (local storage) | Alanya TEKMER | Storing your cookie choice | Essential, first party | Until you delete it |
| Cloudflare security cookies (e.g. __cf_bm, cf_clearance) | Cloudflare, Inc. | Distinguishing bot and attack traffic, Turnstile verification | Essential, third party | 30 minutes to 1 year |
| _ga, _ga_SZDEZZCPVN | Google LLC (Google Analytics) | Aggregate statistics on pages visited | Statistics, third party, consent required | 2 years |
| Identifiers of the visit statistics tool | Our software service provider (fs.donedynamics.com) | Aggregate statistics on page use | Statistics, third party, consent required | Up to 1 year |
Videos on the gallery page are served by YouTube (Google LLC) or Vimeo, Inc. When you watch them, the provider may set its own cookies and process data under its own privacy policy. Fonts and icons are loaded from Google Fonts and Cloudflare cdnjs; your IP address and browser information are sent to those providers when this happens.
portal.alanyatekmer.com
The portal uses no statistics or advertising cookies. All cookies below are essential first-party cookies and cannot be read by JavaScript (except csrf_token).
| Name | Purpose | Duration |
|---|---|---|
| __Secure-Fgp | Fingerprint that binds the session to your device | 7 days (renewed on use) |
| __Secure-Rt | Session refresh key | 7 days (renewed on use) |
| __Secure-Mat | Short-lived access key used to show uploaded documents to authorized users | Length of the session access period (minutes) |
| csrf_token | Protection against cross-site request forgery | 24 hours |
| _Cht, _Chtp, _Cha, _Chc, _Che, _Chpw | Keeping the verification code step secure during login, password reset, deletion confirmation, and email or password change | 5 minutes |
| _Rgt, __Secure-Yrgt | Completing registration after email verification | 10 minutes |
| _Agt, _Agfp | Saving your application draft so you can continue where you left off | 24 hours |
| _Iq, _Iqfp | Track Application session | 30 minutes |
While the browser tab stays open, the portal also keeps your profile information (sessionStorage) and some display preferences (localStorage) on your device. The mobile app stores the session refresh key in the device's secure storage (iOS Keychain, Android Keystore) and stores data cached for offline viewing encrypted with a device-specific key; the cache is deleted when you sign out.
Managing your cookie choices
You can withdraw consent to statistics cookies by clearing the site data in your browser; the cookie notice will be shown again on your next visit. You can delete or block all cookies in your browser settings. For Google Analytics, you can also use Google's opt-out browser add-on.
3. Third-Party Services
- Cloudflare, Inc.: content delivery, attack protection, Turnstile bot verification and document storage (Cloudflare R2).
- Resend: delivery of verification code and notification emails.
- NetGSM: delivery of announcement and information text messages.
- Google LLC: mobile notifications (Firebase Cloud Messaging) and, if you consent, visit statistics (Google Analytics).
- KOSGEB: the public body to which company, personnel and project information is reported under the support program.
Social media links on our site and links to the websites of TEKMER companies lead to third-party sites. We are not responsible for their privacy practices.
4. Children's Privacy
The Services are intended for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If we find that such data has been collected, we delete it.
5. Changes to This Policy
We may update this policy to reflect changes to the Services or the law. The current text takes effect when it is published on this page; we announce significant changes separately through a portal notification or email.
6. Contact
ALANYA TEKNOLOJİ GELİŞTİRME MERKEZİ A.Ş., Kestel Mah. Üniversite Cad. No: 86/3 Alanya / Antalya, Türkiye. Email: [email protected]. Phone: +90 242 505 6272.
Last updated: September 24, 2026