Privacy Policy

Privacy Policy

Last Updated: December 30, 2025

SnA Consulting ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains our minimal data collection practices when you visit our website www.sna-consult.com.

Important: Our website is informational only. We do not have contact forms, user accounts, or any interactive features that collect personal data. The only data collection occurs through Google Analytics, and only if you consent via our cookie banner.

We comply with the General Data Protection Regulation (GDPR), the Turkish Personal Data Protection Law (KVKK - Law No. 6698), and other applicable data protection laws.

1. Information We Collect

We Do NOT Collect Personal Data Directly

Our website does not have contact forms, newsletter subscriptions, user accounts, or any interactive features that collect your personal information. We do not store names, email addresses, phone numbers, or any personally identifiable information.

Analytics Data (Only With Your Consent)

The only data collection on our website occurs through Google Analytics, and only if you explicitly accept cookies through our consent banner. If you decline cookies, no data is collected.

When you consent, Google Analytics collects:

  • Usage Data: Pages visited, time spent on pages, and navigation paths
  • Device Information: Browser type, operating system, device type
  • Location Data: General geographic location (country/city level) - anonymized
  • Referral Data: Website you visited before arriving at our site

Important: All analytics data is anonymized and IP addresses are masked. We cannot identify individual visitors. For detailed information about cookies, please see our Cookie Policy.

2. How We Use Analytics Data

Since we only collect anonymized Google Analytics data (with your consent), we use it for a single purpose:

Website Improvement Only

  • Understand which pages visitors find most useful
  • Identify technical issues or broken links
  • Optimize website performance and user experience
  • Make informed decisions about content improvements

What We Do NOT Do: We do not use your data for marketing, advertising, profiling, or selling to third parties. We do not send emails, newsletters, or promotional materials because we do not collect email addresses.

3. Legal Basis for Processing (GDPR/KVKK)

Since we only collect anonymized analytics data, our legal basis is simple and straightforward:

Explicit Consent (Article 6(1)(a) GDPR)

Google Analytics cookies are processed only based on your explicit consent, in accordance with Article 6(1)(a) of the GDPR and relevant provisions of the Turkish Personal Data Protection Law (KVKK).

You control everything: If you decline cookies via our consent banner, no analytics data is collected. You can withdraw your consent at any time by clicking the "Cookie Settings" button at the bottom left of any page.

Note: No other legal bases apply because we do not process personal data for contractual purposes, legitimate interests, or legal obligations through this website.

4. Data Sharing

We Do NOT Sell or Trade Your Data

We never sell, trade, rent, or share your information with third parties for marketing purposes. We do not have marketing partnerships or data brokers.

Google Analytics Only

The only third party that processes data from our website is:

Google Analytics (Google LLC, United States)

Purpose: Website analytics to understand visitor behavior (anonymized data only)

Data Shared: Anonymized usage data, device information, and general location

Your Control: You can opt-out via our cookie banner or change settings anytime. See our Cookie Policy for details.

5. International Data Transfers

As part of our use of Google Analytics, anonymized website usage data may be processed on servers located outside the European Economic Area (EEA) or Turkey.

Google Analytics (United States)

Website analytics data may be processed on servers in the United States. Google LLC complies with applicable data protection frameworks and implements appropriate safeguards.

Safeguards: Standard Contractual Clauses (SCCs), the EU–US Data Privacy Framework (where applicable), and appropriate technical and organizational security measures implemented by Google LLC.

All international transfers comply with GDPR Chapter V and KVKK Article 9, ensuring adequate protection through appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or binding corporate rules.

6. Data Retention

Since we only use cookies (with your consent), our data retention is minimal and straightforward:

Data Type Retention Period
Google Analytics Cookies Up to 2 years (managed by Google LLC)
Cookie Consent Preference 12 months (stored in your browser)

Your Control: You can delete cookies at any time through your browser settings or by clicking "Cookie Settings" at the bottom left of our website. When cookies expire or are deleted, no trace of your visit remains.

7. Your Privacy Rights

Under GDPR and KVKK, you have the following rights regarding your personal data:

Important Note: Since we do not collect identifiable personal data (only anonymized Google Analytics data), some rights such as access, rectification, or data portability may not be applicable in practice. However, you always have the right to withdraw cookie consent and object to analytics processing via our Cookie Settings.

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction: Request limitation of processing in certain circumstances
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing based on legitimate interests or for marketing

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We will respond to your request within 30 days (GDPR/KVKK). We may request additional information to verify your identity before processing your request.

Note for KVKK (Turkey): Under KVKK, data subjects may also submit their requests in accordance with Article 13 of Law No. 6698, either electronically via the specified contact methods or in writing to our address.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

Technical Measures

  • SSL/TLS encryption for data transmission
  • Secure hosting infrastructure
  • Regular security audits and updates
  • Firewall and intrusion detection systems

Organizational Measures

  • Access controls and authentication
  • Employee training on data protection
  • Confidentiality agreements with staff
  • Data protection impact assessments

Important: While we strive to protect your personal data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@sna-consult.com, and we will promptly delete such information from our systems.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you via email (if we have your email address)
  • Display a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us & Complaints

Data Controller Information (GDPR/KVKK)

Data Controller: SnA Consulting

Privacy Email: privacy@sna-consult.com

General Contact: info@sna-consult.com

Contact Page: www.sna-consult.com/contact

For KVKK-related inquiries (Turkey), you may submit your requests in accordance with Article 13 of Law No. 6698.

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

  • EU/EEA: Your local Data Protection Authority
  • Turkey: Personal Data Protection Authority (KVKK - Kişisel Verileri Koruma Kurumu)

Summary - Simple & Transparent

  • ✓ We do NOT collect personal information (no forms, no accounts, no emails)
  • ✓ Our website is informational only - you can browse freely
  • Google Analytics only - and only with your explicit consent
  • ✓ All analytics data is anonymized - we cannot identify you
  • ✓ We never sell or share data with third parties
  • ✓ You have complete control - accept or reject cookies anytime
  • ✓ Full compliance with GDPR and KVKK
  • ✓ International transfers (Google US) protected by Standard Contractual Clauses
  • No spam, no tracking beyond basic analytics