Under Article 10 of Turkish Law No. 6698 (KVKK)

Privacy Notice and Privacy Policy

Last updated: 18 October 2026

Dwien Games (“Dwien”, “we”), acting as data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”), is committed to processing the personal data of visitors to https://dwien.com (the “Site”) and of persons who contact us through the Site lawfully, fairly, transparently and proportionately.

This notice has been prepared to fulfil our obligation to inform data subjects under Article 10 of the KVKK and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

01Identity of the Data Controller

Data controller: Dwien Games
Email: contact@dwien.com

02Personal Data We Process and How We Collect It

The following personal data may be processed through the Site:

Identity and contact data: Your name and email address, obtained from you through the contact form.
Request and message data: The topic you select, your message, and any other information you choose to share in it (for example a CV, portfolio link or experience details in a job application).
Email correspondence: Emails and attachments you send directly to contact@dwien.com.
Security data: Server logs such as IP address, date and time of access, requested page, and browser and device type. These are collected automatically by the hosting provider of the Site.

Your language preference, sound and music settings, high score in the mini game, and whether the intro animation has been shown are stored only on your device. They are not sent to us and are not used to identify you (see “Cookies and Similar Technologies”).

Please do not include special categories of personal data (such as health, religion, ethnic origin or biometric data) or information unrelated to your request in your messages.

03Purposes of Processing

Receiving and answering the requests, questions and suggestions you send through the contact form or by email,
Evaluating partnership, publishing and press enquiries,
Evaluating job and internship applications and contacting applicants,
Handling support requests about our games and apps,
Keeping the Site secure and running, and preventing misuse and security incidents,
Complying with legal obligations and establishing, exercising or defending legal claims.

04Legal Bases

Your personal data is processed on the following legal bases set out in Article 5(2) of the KVKK:

Processing is necessary for the conclusion or performance of a contract, provided it is directly related (Art. 5/2-c), for partnership, publishing or pre-employment discussions,
Processing is necessary for compliance with a legal obligation of the controller (Art. 5/2-ç),
Processing is necessary for the establishment, exercise or protection of a right (Art. 5/2-e),
Processing is necessary for the legitimate interests of the controller, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f), for answering enquiries and keeping the Site secure.

These processing activities do not rely on your explicit consent. The checkbox under the contact form only confirms that you have read this notice and have been informed; it is not a declaration of explicit consent.

05Disclosure and Transfers of Personal Data

We do not sell or rent your personal data, and we do not share it with third parties for marketing or advertising. Within the limits of the purposes above and in line with Articles 8 and 9 of the KVKK, your data may be disclosed to the following categories of recipients:

Service providers: Netlify, Inc. (United States) for hosting the Site and the contact form infrastructure; Google LLC / Google Workspace (United States and other countries where the service is provided) for business email and document infrastructure.
Competent public authorities and judicial bodies: Where required by law and upon request.

Because these providers operate servers outside Turkey, your personal data is transferred abroad. Under Article 9 of the KVKK, such transfers rely on an adequacy decision where one exists and otherwise on appropriate safeguards such as a standard contract, binding corporate rules or a written undertaking.

06Retention Periods

Contact form and email correspondence: 2 years after your request is resolved
Job and internship applications: 1 year from the application date. Keeping an application in our talent pool for longer is only possible with your explicit consent.
Server logs: For the period determined by the hosting provider

When the retention period ends or the purpose of processing no longer exists, your personal data is deleted, destroyed or anonymised. Where a dispute, investigation or legal obligation exists, data may be kept until the relevant periods have ended.

07Cookies and Similar Technologies

The Site does not use cookies for analytics, advertising or tracking. Fonts are served from the Site itself, not from third-party servers.

For the Site to work, only the following may be stored in your browser’s local storage (localStorage and sessionStorage): the selected language, sound and music preference, the mini game high score, and whether the intro animation has been shown. This information stays on your device, is not sent to us, and can be deleted at any time from your browser settings.

If we start using cookies or analytics tools in the future, this notice will be updated and the required consent mechanisms will be provided.

08Data Security

We take reasonable technical and organisational measures under Article 12 of the KVKK to prevent unlawful processing of, unlawful access to, and loss of your personal data. The Site is served over an encrypted (HTTPS/TLS) connection, and access to data is limited to authorised persons who need it for their duties.

09Your Rights as a Data Subject

Under Article 11 of the KVKK you may apply to the data controller to exercise the following rights:

To learn whether your personal data is processed,
To request information if it has been processed,
To learn the purpose of processing and whether it is used in line with that purpose,
To know the third parties to whom your data is transferred in Turkey or abroad,
To request correction if it is incomplete or inaccurate,
To request deletion or destruction under the conditions set out in Article 7 of the KVKK,
To request that corrections, deletions and destruction be notified to third parties to whom your data was transferred,
To object to a result against you that arises from analysis of your data exclusively by automated systems,
To claim compensation for damage you suffer because your data was processed unlawfully.

10How to Apply

You can send your requests about these rights to contact@dwien.com, stating your name, your contact details and the subject of your request. We may ask for additional information to verify your identity. Applications may also be made by the other methods set out in the Communiqué on the Procedures and Principles of Applications to the Data Controller.

Depending on its nature, your request will be concluded within thirty (30) days at the latest and, as a rule, free of charge. If the process requires an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.

If your application is rejected, you find the response insufficient, or no response is given in time, you may file a complaint with the Personal Data Protection Board within thirty (30) days of learning of the response and in any case within sixty (60) days of the application date.

This notice has been prepared under the legislation in force in Turkey. Visitors from other countries keep any additional rights they have under the laws of their country, and may send such requests to the same address.

11Changes to This Notice

We may update this notice to reflect changes in legislation or in our activities. The current version is always published on this page, and the date of the latest update is shown at the top.