Privacy notice

This notice explains what personal data the website marqib.com collects, why, and what rights you have. It is issued by Nordera Works Teknoloji ve Danışmanlık A.Ş. (the "Company"), which operates the Marqib platform and is the data controller for this website. Last updated 28 September 2026.

Who we are

Controller: Nordera Works Teknoloji ve Danışmanlık A.Ş., Metrocity, Esentepe, Şişli, İstanbul, Türkiye. Trade registry: [İstanbul Ticaret Sicili No. — to be added on registration]. MERSİS: [MERSİS No. — to be added on registration]. Contact for privacy matters: hello@marqib.com.

What this website collects

The public website is a static site. It sets no cookies, runs no analytics or advertising scripts, and does not profile visitors.

Server logs. Our hosting provider (Vercel Inc.) records standard web-server logs (IP address, user agent, requested page, timestamp) for security and operation of the service. These are retained by the provider for a short period and are not used by us to identify individuals.

Fonts. Pages load typefaces from Google Fonts, which means your browser sends a request, including your IP address, to Google LLC. No other third-party resources are loaded.

Pilot request form. When you submit the form, the details you enter (firm, regulator, name and role, email, message) are stored in our customer-relationship system and emailed to us so that we can reply.

Action events. We record a small number of actions, not page views: opening the sandbox, submitting the form, and viewing or exporting a demo case file. Each record holds the action, time, page, language, country (from the request) and a truncated one-way hash of the IP address; no cookies are set.

Correspondence. If you write to us, we keep the email and the personal data it contains (name, role, employer, contact details, the content of your message) in our mailbox in order to reply and to manage the business relationship.

Product demo (app.marqib.com). The public demo runs entirely on synthetic data. No real client, transaction or trading data is present there, and the demo does not collect data about visitors beyond the server logs described above.

Why we process it and on what legal basis

To answer your enquiry and to prepare, negotiate and perform a pilot or licence agreement: performance of a contract or steps prior to a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).

To keep the website secure and available: our legitimate interest (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).

To meet legal obligations, for example record-keeping and responses to lawful requests (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)).

We do not sell personal data, and we do not use it for automated decision-making about you.

Client data during a pilot or deployment

Marqib is installed in the client firm’s own environment. Trading, transaction and customer data processed by the platform stay in that environment; the Company does not host, receive or hold them. In that processing the client firm is the controller and, where the Company provides support, the Company acts as a processor under a written data processing agreement that sets out the purposes, security measures, sub-processors and deletion terms.

Where a language model is used for drafting, identifiers are replaced by tokens before any model call, and the model endpoint is chosen by the client firm within its own region or infrastructure. Details are set out in the Data and model governance section of this website and in the agreement with each client.

Who receives your data

Hosting: Vercel Inc. (United States; edge locations worldwide). Email: Namecheap, Inc. (Private Email service). These providers process data on our behalf under their standard contractual terms.

We do not share personal data with other third parties unless required by law or with your consent.

International transfers

Our providers may store data outside Türkiye, the European Economic Area or the UAE. Where that happens we rely on the safeguards available under the applicable law: for KVKK, the transfer mechanisms in Article 9 (including standard contracts registered with the Authority where required); for GDPR, adequacy decisions or the European Commission’s standard contractual clauses; for the UAE PDPL, the transfer conditions in Articles 22 and 23.

How long we keep it

Correspondence and enquiry data: for the duration of the relationship and up to three years after the last contact, unless a longer period is required by law (for example the ten-year retention under the Turkish Commercial Code for commercial books and records).

Server logs: as retained by the hosting provider, normally days rather than months.

Your rights

Under KVKK Article 11, GDPR Articles 15–22 and the UAE PDPL Articles 13–18 you may ask us to confirm whether we process your data, to access it, to correct or erase it, to restrict or object to processing, to receive it in a portable format, and to withdraw consent where processing is based on consent. You may also complain to the supervisory authority: in Türkiye the Kişisel Verileri Koruma Kurumu (kvkk.gov.tr), in the EEA the authority of your member state, in the UAE the UAE Data Office or the relevant free-zone regulator (DIFC Commissioner of Data Protection, ADGM Office of Data Protection).

To exercise a right, write to hello@marqib.com. We reply within thirty days (KVKK) or one month (GDPR). We may ask you to verify your identity.

Changes

We will post any change to this notice on this page with a new date. Material changes affecting an existing client are also communicated under the relevant agreement.